0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0), 0x12)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r8 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r9=>0x0)
migrate_pages(r9, 0x0, 0x0, &(0x7f0000000100))

[ 2981.004781][T24073] IPVS: ftp: loaded support on port[0] = 21
03:56:48 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
getpgid(0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0)
listxattr(0x0, 0x0, 0x0)
r2 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r2, r3)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r4)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x6)
open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x12d}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f00000031c0), 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0)
r6 = socket(0x2000000000000021, 0x0, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0)
r7 = socket(0x0, 0x2, 0x10000000000002)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r7, &(0x7f0000005c00), 0x0, 0x0)
r8 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r8, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x119}}], 0x1, 0x0)
recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0)
r9 = socket(0x2000000000000021, 0x2, 0x0)
connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0)
r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r10, 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r10, r11)
ioctl$EVIOCREVOKE(r10, 0x40044591, &(0x7f0000000300))
r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r12, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r12, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r12, 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

03:56:48 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x8, "aeccd79c8cc0020db3b095478313502dd0d082e8bfa8335bf785c3dd6841ccc8", 0x1, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0), 0x12)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r8 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r9=>0x0)
migrate_pages(r9, 0x0, 0x0, &(0x7f0000000100))

03:56:48 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x8, "aeccd79c8cc0020db3b095478313502dd0d082e8bfa8335bf785c3dd6841ccc8", 0x1, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0), 0x12)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r8 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r9=>0x0)
migrate_pages(r9, 0x0, 0x0, &(0x7f0000000100))

03:56:48 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
getpgid(0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0)
listxattr(0x0, 0x0, 0x0)
r2 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r2, r3)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r4)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x6)
open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a8fd217367c017f76f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26ae3208e5809f51528f2436610c52b724993141a5cb7a0a9c3dca0a16787a4d0c82e2d9829219e3d981d196f1b7256c49aac96b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b4046cf69b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c5669b224b800"/301], 0x12d}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f00000031c0), 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0)
r6 = socket(0x2000000000000021, 0x0, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0)
r7 = socket(0x0, 0x2, 0x10000000000002)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r7, &(0x7f0000005c00), 0x0, 0x0)
r8 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r8, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x119}}], 0x1, 0x0)
recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0)
r9 = socket(0x2000000000000021, 0x2, 0x0)
connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0)
r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r10, 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r10, r11)
ioctl$EVIOCREVOKE(r10, 0x40044591, &(0x7f0000000300))
r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r12, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r12, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r12, 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

03:56:48 executing program 4:
open(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:56:48 executing program 5:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x8, "aeccd79c8cc0020db3b095478313502dd0d082e8bfa8335bf785c3dd6841ccc8", 0x1, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0), 0x12)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r8 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r9=>0x0)
migrate_pages(r9, 0x0, 0x0, &(0x7f0000000100))

[ 2982.150510][T24110] IPVS: ftp: loaded support on port[0] = 21
03:56:49 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x8, "aeccd79c8cc0020db3b095478313502dd0d082e8bfa8335bf785c3dd6841ccc8", 0x1, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0), 0x12)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r8 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r9=>0x0)
migrate_pages(r9, 0x0, 0x0, &(0x7f0000000100))

03:56:49 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x8, "aeccd79c8cc0020db3b095478313502dd0d082e8bfa8335bf785c3dd6841ccc8", 0x1, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0), 0x12)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r8 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r9=>0x0)
migrate_pages(r9, 0x0, 0x0, &(0x7f0000000100))

03:56:49 executing program 4:
r0 = getpid()
ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000200))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
r7 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x4, 0x4000)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000440)={'mangle\x00'}, &(0x7f00000004c0)=0x54)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "83e0899b36a57dd3b1320834cf982590aea99ea49af9fbeb63fe1c1004cc3f9e12766f22dd23c1aa01726ec5af6d10fb5f42104537540a097be128b8bf5a0f196ab3a4d017141e6363b0107d3eda432b"}, 0xd8)

03:56:49 executing program 5:
r0 = getpid()
ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000200))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
r7 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x4, 0x4000)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000440)={'mangle\x00'}, &(0x7f00000004c0)=0x54)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "83e0899b36a57dd3b1320834cf982590aea99ea49af9fbeb63fe1c1004cc3f9e12766f22dd23c1aa01726ec5af6d10fb5f42104537540a097be128b8bf5a0f196ab3a4d017141e6363b0107d3eda432b"}, 0xd8)

03:56:49 executing program 3:
mmap(&(0x7f000090c000/0x4000)=nil, 0x4000, 0x1, 0xe88eafe37dcada71, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2020000002a27fc, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readlinkat(r0, &(0x7f000090fff8)='./file0\x00', &(0x7f0000728000)=""/145, 0x4)

03:56:49 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
getpgid(0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0)
listxattr(0x0, 0x0, 0x0)
r2 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r2, r3)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r4)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x6)
open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a8fd217367c017f76f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26ae3208e5809f51528f2436610c52b724993141a5cb7a0a9c3dca0a16787a4d0c82e2d9829219e3d981d196f1b7256c49aac96b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b4046cf69b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c5669b224b800"/301], 0x12d}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f00000031c0), 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0)
r6 = socket(0x2000000000000021, 0x0, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0)
r7 = socket(0x0, 0x2, 0x10000000000002)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r7, &(0x7f0000005c00), 0x0, 0x0)
r8 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r8, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x119}}], 0x1, 0x0)
recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0)
r9 = socket(0x2000000000000021, 0x2, 0x0)
connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0)
r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r10, 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r10, r11)
ioctl$EVIOCREVOKE(r10, 0x40044591, &(0x7f0000000300))
r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r12, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r12, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r12, 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

03:56:50 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x8, "aeccd79c8cc0020db3b095478313502dd0d082e8bfa8335bf785c3dd6841ccc8", 0x1, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0), 0x12)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r8 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r9=>0x0)
migrate_pages(r9, 0x0, 0x0, &(0x7f0000000100))

03:56:50 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x8, "aeccd79c8cc0020db3b095478313502dd0d082e8bfa8335bf785c3dd6841ccc8", 0x1, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0), 0x12)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
r8 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r9=>0x0)
migrate_pages(r9, 0x0, 0x0, &(0x7f0000000100))

03:56:50 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x1, 0x1, [0xd6d, 0x63c, 0xe56, 0x2d0]})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0xc000001, 0xfff})
faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4, 0x100)
symlink(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1'])
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000700)=0x7)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={<r3=>0x0, 0x7307}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r3, 0x73, 0x5}, 0x8)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x248000, 0x0)
sendto$rxrpc(r4, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc43d2e9f256bf3bdd", 0x89, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000780)={0x1, 0x2, 0x1, {0x200000, 0x7fffffff, 0x9, 0x2}})
io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0)

03:56:50 executing program 5:
r0 = getpid()
ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000200))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
r7 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x4, 0x4000)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000440)={'mangle\x00'}, &(0x7f00000004c0)=0x54)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "83e0899b36a57dd3b1320834cf982590aea99ea49af9fbeb63fe1c1004cc3f9e12766f22dd23c1aa01726ec5af6d10fb5f42104537540a097be128b8bf5a0f196ab3a4d017141e6363b0107d3eda432b"}, 0xd8)

03:56:50 executing program 4:
r0 = getpid()
ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000200))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
r7 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x4, 0x4000)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000440)={'mangle\x00'}, &(0x7f00000004c0)=0x54)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "83e0899b36a57dd3b1320834cf982590aea99ea49af9fbeb63fe1c1004cc3f9e12766f22dd23c1aa01726ec5af6d10fb5f42104537540a097be128b8bf5a0f196ab3a4d017141e6363b0107d3eda432b"}, 0xd8)

[ 2983.834360][T24161] overlayfs: conflicting lowerdir path
[ 2983.841935][  T659] tipc: TX() has been purged, node left!
03:56:50 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
getpgid(0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0)
listxattr(0x0, 0x0, 0x0)
r2 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r2, r3)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r4)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x6)
open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a8fd217367c017f76f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26ae3208e5809f51528f2436610c52b724993141a5cb7a0a9c3dca0a16787a4d0c82e2d9829219e3d981d196f1b7256c49aac96b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b4046cf69b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c5669b224b800"/301], 0x12d}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f00000031c0), 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0)
r6 = socket(0x2000000000000021, 0x0, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0)
r7 = socket(0x0, 0x2, 0x10000000000002)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r7, &(0x7f0000005c00), 0x0, 0x0)
r8 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r8, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a8fd217367c017f76f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26ae3208e5809f51528f2436610c52b724993141a5cb7a0a9c3dca0a16787a4d0c82e2d9829219e3d981d196f1b7256c49aac96b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b4046cf69b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c5669b224"], 0x119}}], 0x1, 0x0)
recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0)
r9 = socket(0x2000000000000021, 0x2, 0x0)
connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24)
getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0)
r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r10, 0x0, 0x0)
r11 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r10, r11)
ioctl$EVIOCREVOKE(r10, 0x40044591, &(0x7f0000000300))
r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r12, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r12, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r12, 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2984.014204][  T659] tipc: TX() has been purged, node left!
[ 2984.079953][T24161] overlayfs: workdir and upperdir must reside under the same mount
03:56:51 executing program 0:
set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0ff00ff050000000010000100090ac2d00b0ccbd8", 0x58}], 0x1)
pipe(0x0)

[ 2984.168465][  T659] tipc: TX() has been purged, node left!
03:56:51 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x1, 0x1, [0xd6d, 0x63c, 0xe56, 0x2d0]})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0xc000001, 0xfff})
faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4, 0x100)
symlink(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1'])
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000700)=0x7)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={<r3=>0x0, 0x7307}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r3, 0x73, 0x5}, 0x8)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x248000, 0x0)
sendto$rxrpc(r4, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc43d2e9f256bf3bdd", 0x89, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000780)={0x1, 0x2, 0x1, {0x200000, 0x7fffffff, 0x9, 0x2}})
io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0)

[ 2984.321662][  T659] tipc: TX() has been purged, node left!
03:56:51 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x1, 0x1, [0xd6d, 0x63c, 0xe56, 0x2d0]})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0xc000001, 0xfff})
faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4, 0x100)
symlink(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1'])
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000700)=0x7)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={<r3=>0x0, 0x7307}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r3, 0x73, 0x5}, 0x8)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x248000, 0x0)
sendto$rxrpc(r4, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc43d2e9f256bf3bdd", 0x89, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000780)={0x1, 0x2, 0x1, {0x200000, 0x7fffffff, 0x9, 0x2}})
io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0)

03:56:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000004300)=@newtaction={0x44, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x30, 0x1, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0xf}}]}, {0x4}}}}]}, 0x44}}, 0x0)

[ 2984.788845][T24183] overlayfs: workdir and upperdir must reside under the same mount
03:56:51 executing program 1:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = memfd_create(&(0x7f00000000c0)='\x11\x00\xf6\xd3B\xe7\xf0\xae_\v\xb8\x00\x1c\xd8\x8d\xc1$\xfa\xe6\xed0\x15 y\xf9=!&\xfbA\xcc\x19\x95\x10\xcah\xc4vW\xd9z\x88\xf0\xf8\x15H\x87j\xd8\xd2/N\xb9\xab~\x93\xa0)\"\x10\xfc\x981[o\xaf\xd5\xe2vOf\xa0\xf0\xbd-Ed\x02\xbf\xd4\xf7\xe1\"\xc6\x98\x8bK\x8a\x99\x91\xb16\xb9o\xdd\xd3\x12', 0x0)
write(r1, &(0x7f0000000200)="000000ba89319103c89f5b13cb3b5f8c5c43f508cda183c9b6c724d3e97f1b6d3412281457031efee5d46a6b6dd039868c773ad89e387df7a3845c3e773a399e04535641b5deb2cebcb1df4afecd", 0x4e)
sendfile(r1, r1, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000000004, 0x11, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

03:56:51 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x1, 0x1, [0xd6d, 0x63c, 0xe56, 0x2d0]})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0xc000001, 0xfff})
faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4, 0x100)
symlink(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1'])
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000700)=0x7)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={<r3=>0x0, 0x7307}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r3, 0x73, 0x5}, 0x8)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x248000, 0x0)
sendto$rxrpc(r4, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc43d2e9f256bf3bdd", 0x89, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000780)={0x1, 0x2, 0x1, {0x200000, 0x7fffffff, 0x9, 0x2}})
io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0)

03:56:51 executing program 0:
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x400020000000010, 0x2, 0x0)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write(r0, &(0x7f0000000000)='#', 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
mincore(&(0x7f0000001000/0xe000)=nil, 0xe000, &(0x7f00000012c0)=""/4096)

03:56:51 executing program 5:
r0 = getpid()
ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000200))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
r7 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x4, 0x4000)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000440)={'mangle\x00'}, &(0x7f00000004c0)=0x54)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "83e0899b36a57dd3b1320834cf982590aea99ea49af9fbeb63fe1c1004cc3f9e12766f22dd23c1aa01726ec5af6d10fb5f42104537540a097be128b8bf5a0f196ab3a4d017141e6363b0107d3eda432b"}, 0xd8)

03:56:52 executing program 4:
r0 = getpid()
ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000200))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
r7 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x4, 0x4000)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000440)={'mangle\x00'}, &(0x7f00000004c0)=0x54)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "83e0899b36a57dd3b1320834cf982590aea99ea49af9fbeb63fe1c1004cc3f9e12766f22dd23c1aa01726ec5af6d10fb5f42104537540a097be128b8bf5a0f196ab3a4d017141e6363b0107d3eda432b"}, 0xd8)

03:56:52 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r0, 0x10001)
listen(r0, 0x10001)

03:56:52 executing program 0:
socket$inet(0x2, 0x2000000000003, 0x2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
io_setup(0x2346, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

03:56:52 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x1, 0x1, [0xd6d, 0x63c, 0xe56, 0x2d0]})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0xc000001, 0xfff})
faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4, 0x100)
symlink(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1'])
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000700)=0x7)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={<r3=>0x0, 0x7307}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r3, 0x73, 0x5}, 0x8)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x248000, 0x0)
sendto$rxrpc(r4, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc43d2e9f256bf3bdd", 0x89, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000780)={0x1, 0x2, 0x1, {0x200000, 0x7fffffff, 0x9, 0x2}})
io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0)

[ 2985.443043][T24220] overlayfs: conflicting lowerdir path
03:56:52 executing program 1:
syz_open_dev$midi(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
eventfd2(0x0, 0x80001)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
lstat(0x0, &(0x7f0000000600))
openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0xb, 0x0, 0x0, 0x4010, &(0x7f0000000380)='user_id')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
dup(0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0x80047210, &(0x7f0000000280))
move_mount(r2, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2)
r3 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

03:56:52 executing program 5:
set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x9)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0)
ftruncate(r2, 0x1000000)
sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

03:56:52 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x1, 0x1, [0xd6d, 0x63c, 0xe56, 0x2d0]})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0xc000001, 0xfff})
faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4, 0x100)
symlink(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1'])
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000700)=0x7)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={<r3=>0x0, 0x7307}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r3, 0x73, 0x5}, 0x8)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x248000, 0x0)
sendto$rxrpc(r4, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc43d2e9f256bf3bdd", 0x89, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000780)={0x1, 0x2, 0x1, {0x200000, 0x7fffffff, 0x9, 0x2}})
io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0)

03:56:53 executing program 0:
socket$inet(0x2, 0x2000000000003, 0x2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
io_setup(0x2346, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

03:56:53 executing program 1:
syz_open_dev$midi(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
eventfd2(0x0, 0x80001)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
lstat(0x0, &(0x7f0000000600))
openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0xb, 0x0, 0x0, 0x4010, &(0x7f0000000380)='user_id')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
dup(0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0x80047210, &(0x7f0000000280))
move_mount(r2, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2)
r3 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

03:56:53 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x1, 0x1, [0xd6d, 0x63c, 0xe56, 0x2d0]})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0xc000001, 0xfff})
faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4, 0x100)
symlink(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1'])
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000700)=0x7)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={<r3=>0x0, 0x7307}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r3, 0x73, 0x5}, 0x8)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x248000, 0x0)
sendto$rxrpc(r4, &(0x7f0000000400)="c189ef4fd17c2ddcb3632ef404103cbb92c78e189e9bcc9e1ebc9f8b84b02ae2d18de80dbb9b65cd291efdac1a9a20a96223b43557745b8ff3f1be1429b3e0ddc9b8c7f6f22ccbd9be70234221adf91cb9fd4e15d036a17d0fdfedcdc837fbf5abacea2221e0e22f63658966675d0b597c05e114dc78051da628b9ec7653ea7ebc43d2e9f256bf3bdd", 0x89, 0x24000805, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000780)={0x1, 0x2, 0x1, {0x200000, 0x7fffffff, 0x9, 0x2}})
io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0)

03:56:53 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414ec}]}, &(0x7f0000000080)=0x10)

03:56:53 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3}, &(0x7f0000000100)=0x10)
sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

03:56:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0)

03:56:53 executing program 5:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4003)
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x17)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x0, 0x0)

03:56:54 executing program 0:
socket$inet(0x2, 0x2000000000003, 0x2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
io_setup(0x2346, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

03:56:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0)

03:56:54 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3}, &(0x7f0000000100)=0x10)
sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

03:56:54 executing program 1:
syz_open_dev$midi(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
eventfd2(0x0, 0x80001)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
lstat(0x0, &(0x7f0000000600))
openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0xb, 0x0, 0x0, 0x4010, &(0x7f0000000380)='user_id')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
dup(0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0x80047210, &(0x7f0000000280))
move_mount(r2, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2)
r3 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

03:56:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0)

03:56:54 executing program 5:
r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)=']wlan0\x00', &(0x7f0000000100)='em1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='em1\x00', &(0x7f0000000040)='[', 0x0)

03:56:54 executing program 1:
syz_open_dev$midi(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
eventfd2(0x0, 0x80001)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
lstat(0x0, &(0x7f0000000600))
openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0xb, 0x0, 0x0, 0x4010, &(0x7f0000000380)='user_id')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
dup(0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r0, r1, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0x80047210, &(0x7f0000000280))
move_mount(r2, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2)
r3 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

03:56:54 executing program 0:
socket$inet(0x2, 0x2000000000003, 0x2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
io_setup(0x2346, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

03:56:54 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x19})

03:56:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0)

03:56:55 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80802, 0x0)
write$sndseq(r2, &(0x7f0000000280)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30)
write$sndseq(r2, &(0x7f00000002c0)=[{0x81, 0x3, 0x0, 0x0, @tick, {}, {}, @queue}], 0xffffff76)

03:56:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0)

03:56:55 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

03:56:55 executing program 0:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="200000006c0013"], 0x1}}, 0x0)
r0 = socket(0x10, 0x800000000080003, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x18, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[ 2988.962964][T24322] vhci_hcd: invalid port number 0
[ 2989.140482][  T659] tipc: TX() has been purged, node left!
03:56:56 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3}, &(0x7f0000000100)=0x10)
sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

03:56:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0)

03:56:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0)

03:56:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$unix(0x1, 0x10004000000002, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
pidfd_send_signal(r3, 0x0, 0x0, 0x0)

[ 2989.409279][T24322] vhci_hcd: invalid port number 0
[ 2989.447689][   T27] audit: type=1800 audit(2000001416.370:1174): pid=24321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16532 res=0
[ 2990.384451][  T659] device bridge_slave_1 left promiscuous mode
[ 2990.390642][  T659] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2990.442400][  T659] device bridge_slave_0 left promiscuous mode
[ 2990.448604][  T659] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2990.485618][  T659] device veth1_vlan left promiscuous mode
[ 2990.491494][  T659] device veth0_vlan left promiscuous mode
[ 2991.422167][  T659] device hsr_slave_0 left promiscuous mode
[ 2991.462172][  T659] device hsr_slave_1 left promiscuous mode
[ 2991.509423][  T659] team0 (unregistering): Port device team_slave_1 removed
[ 2991.519835][  T659] team0 (unregistering): Port device team_slave_0 removed
[ 2991.529953][  T659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2991.586181][  T659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2991.667970][  T659] bond0 (unregistering): Released all slaves
[ 2991.770013][T24346] IPVS: ftp: loaded support on port[0] = 21
[ 2991.828566][T24346] chnl_net:caif_netlink_parms(): no params data found
[ 2991.860248][T24346] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2991.867515][T24346] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2991.875964][T24346] device bridge_slave_0 entered promiscuous mode
[ 2991.883809][T24346] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2991.890884][T24346] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2991.898769][T24346] device bridge_slave_1 entered promiscuous mode
[ 2991.984084][T24346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2991.995319][T24346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2992.017732][T24346] team0: Port device team_slave_0 added
[ 2992.024854][T24346] team0: Port device team_slave_1 added
[ 2992.098550][T24346] device hsr_slave_0 entered promiscuous mode
[ 2992.142403][T24346] device hsr_slave_1 entered promiscuous mode
[ 2992.221690][T24346] debugfs: Directory 'hsr0' with parent '/' already present!
[ 2992.265144][T24346] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2992.272232][T24346] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2992.279539][T24346] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2992.286583][T24346] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2992.331467][T24346] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2992.348450][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2992.360482][T12336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2992.368838][T12336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2992.385329][T24346] 8021q: adding VLAN 0 to HW filter on device team0
[ 2992.396068][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2992.405991][T21647] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2992.413033][T21647] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2992.433728][T21648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2992.444096][T21648] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2992.451181][T21648] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2992.474102][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2992.483329][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2992.496648][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2992.506099][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2992.520627][T24346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2992.528811][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2992.547676][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2992.555252][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2992.567027][T24346] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2992.624052][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2992.638128][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2992.654881][T24346] device veth0_vlan entered promiscuous mode
[ 2992.667080][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2992.675221][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2992.687800][T24346] device veth1_vlan entered promiscuous mode
[ 2992.772524][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2992.783170][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
03:56:59 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3}, &(0x7f0000000100)=0x10)
sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

03:56:59 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

03:56:59 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

03:56:59 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

03:56:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_getneigh={0x28, 0x1e, 0x432f48df8388db2d, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0)

03:56:59 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

03:57:00 executing program 2:
madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r0, 0x20400000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000006d000507000000000000000000000000bf8f6f74efc7e9c1653cefb1dd58f38d16f49b57140436a5ce577d1123fee2b6738bd40c157e4349fcdda940c67f03905a6ab3569d41b432f97f36bb09ab70b83e364adc74805e8119e59673cf6f1260950a30de4a2b414f2aa3445d6e727066fd214707f20f899cd16460723be8efa2da3c7f7f87df25", @ANYRES32=0x0, @ANYBLOB="246c03000000040010001200080001007674690004000200"], 0x30}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
name_to_handle_at(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x46, 0x2c, "a987ce8b9aa5a7433222b7cd84780e1cb1338b7f5352c3bb4b12e4378dfa6549a0240071f4bbcb9dc654113deed0a5cdc141cd0d7e93a8e0f0880c73e9a3"}, &(0x7f0000000380), 0x2000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffd7)
accept$netrom(r6, 0x0, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x10)
sendfile(r2, r3, 0x0, 0x7fffffa7)

[ 2993.250532][T24368] vhci_hcd: invalid port number 0
[ 2993.380694][T24372] vhci_hcd: invalid port number 0
03:57:00 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

[ 2993.484131][   T27] audit: type=1800 audit(2000001420.410:1175): pid=24378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1605 res=0
03:57:00 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

[ 2993.525328][   T27] audit: type=1804 audit(2000001420.440:1176): pid=24381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/28/file0/file0" dev="loop2" ino=1605 res=1
[ 2993.577982][   T27] audit: type=1800 audit(2000001420.440:1177): pid=24381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1605 res=0
03:57:00 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000026000535d25a80648c63940d0324fc60100002400a000200053582c137153e370900018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

03:57:00 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

[ 2993.698365][T24378] attempt to access beyond end of device
[ 2993.757383][T24378] loop2: rw=2049, want=130, limit=112
[ 2993.842620][  T659] tipc: TX() has been purged, node left!
03:57:00 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x98}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:57:00 executing program 3:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)

03:57:00 executing program 2:
madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r0, 0x20400000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000006d000507000000000000000000000000bf8f6f74efc7e9c1653cefb1dd58f38d16f49b57140436a5ce577d1123fee2b6738bd40c157e4349fcdda940c67f03905a6ab3569d41b432f97f36bb09ab70b83e364adc74805e8119e59673cf6f1260950a30de4a2b414f2aa3445d6e727066fd214707f20f899cd16460723be8efa2da3c7f7f87df25", @ANYRES32=0x0, @ANYBLOB="246c03000000040010001200080001007674690004000200"], 0x30}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
name_to_handle_at(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x46, 0x2c, "a987ce8b9aa5a7433222b7cd84780e1cb1338b7f5352c3bb4b12e4378dfa6549a0240071f4bbcb9dc654113deed0a5cdc141cd0d7e93a8e0f0880c73e9a3"}, &(0x7f0000000380), 0x2000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f0000000600)="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", 0x200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffd7)
accept$netrom(r6, 0x0, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x10)
sendfile(r2, r3, 0x0, 0x7fffffa7)

03:57:01 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

[ 2994.221712][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2994.227622][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:57:01 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

[ 2994.354476][T24395] vhci_hcd: invalid port number 0
[ 2994.525935][   T27] audit: type=1800 audit(2000001421.450:1178): pid=24408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1606 res=0
[ 2994.629577][T24421] vhci_hcd: invalid port number 0
[ 2994.691011][   T27] audit: type=1804 audit(2000001421.580:1179): pid=24408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/29/file0/file0" dev="loop2" ino=1606 res=1
[ 2994.857113][   T27] audit: type=1800 audit(2000001421.580:1180): pid=24408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1606 res=0
03:57:01 executing program 3:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)

[ 2994.907330][T24408] attempt to access beyond end of device
03:57:01 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0xc0185500, &(0x7f0000000080)=0x323)

[ 2994.981957][T24408] loop2: rw=2049, want=130, limit=112
03:57:02 executing program 3:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)

[ 2995.136591][T24420] vhci_hcd: invalid port number 0
03:57:02 executing program 2:
madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r0, 0x20400000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000006d000507000000000000000000000000bf8f6f74efc7e9c1653cefb1dd58f38d16f49b57140436a5ce577d1123fee2b6738bd40c157e4349fcdda940c67f03905a6ab3569d41b432f97f36bb09ab70b83e364adc74805e8119e59673cf6f1260950a30de4a2b414f2aa3445d6e727066fd214707f20f899cd16460723be8efa2da3c7f7f87df25", @ANYRES32=0x0, @ANYBLOB="246c03000000040010001200080001007674690004000200"], 0x30}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
name_to_handle_at(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x46, 0x2c, "a987ce8b9aa5a7433222b7cd84780e1cb1338b7f5352c3bb4b12e4378dfa6549a0240071f4bbcb9dc654113deed0a5cdc141cd0d7e93a8e0f0880c73e9a3"}, &(0x7f0000000380), 0x2000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f0000000600)="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", 0x200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffd7)
accept$netrom(r6, 0x0, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x10)
sendfile(r2, r3, 0x0, 0x7fffffa7)

03:57:02 executing program 4:
madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r0, 0x20400000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000006d000507000000000000000000000000bf8f6f74efc7e9c1653cefb1dd58f38d16f49b57140436a5ce577d1123fee2b6738bd40c157e4349fcdda940c67f03905a6ab3569d41b432f97f36bb09ab70b83e364adc74805e8119e59673cf6f1260950a30de4a2b414f2aa3445d6e727066fd214707f20f899cd16460723be8efa2da3c7f7f87df25", @ANYRES32=0x0, @ANYBLOB="246c03000000040010001200080001007674690004000200"], 0x30}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
name_to_handle_at(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x46, 0x2c, "a987ce8b9aa5a7433222b7cd84780e1cb1338b7f5352c3bb4b12e4378dfa6549a0240071f4bbcb9dc654113deed0a5cdc141cd0d7e93a8e0f0880c73e9a3"}, &(0x7f0000000380), 0x2000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f0000000600)="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", 0x200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffd7)
accept$netrom(r6, 0x0, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x10)
sendfile(r2, r3, 0x0, 0x7fffffa7)

[ 2995.490777][   T27] audit: type=1800 audit(2000001422.410:1181): pid=24436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=1607 res=0
[ 2995.546344][T24433] vhci_hcd: invalid port number 0
[ 2995.643268][   T27] audit: type=1804 audit(2000001422.460:1182): pid=24442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir827043682/syzkaller.oollw1/160/file0/file0" dev="loop4" ino=1607 res=1
03:57:02 executing program 3:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)

[ 2995.674533][   T27] audit: type=1800 audit(2000001422.460:1183): pid=24442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=1607 res=0
03:57:02 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000000c0)=0x9, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x80000000000711, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0)

[ 2995.824314][T24436] attempt to access beyond end of device
[ 2995.832057][   T27] audit: type=1800 audit(2000001422.760:1184): pid=24443 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1608 res=0
[ 2995.852805][T24436] loop4: rw=2049, want=130, limit=112
[ 2995.901682][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2995.907464][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2996.124989][  T659] device bridge_slave_1 left promiscuous mode
[ 2996.131337][  T659] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2996.216172][  T659] device bridge_slave_0 left promiscuous mode
[ 2996.225715][  T659] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2996.285850][  T659] device veth1_vlan left promiscuous mode
[ 2996.291833][  T659] device veth0_vlan left promiscuous mode
[ 2997.195373][  T659] device hsr_slave_0 left promiscuous mode
[ 2997.231866][  T659] device hsr_slave_1 left promiscuous mode
[ 2997.288734][  T659] team0 (unregistering): Port device team_slave_1 removed
[ 2997.300107][  T659] team0 (unregistering): Port device team_slave_0 removed
[ 2997.310598][  T659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2997.355349][  T659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2997.415771][  T659] bond0 (unregistering): Released all slaves
[ 2997.539415][T24460] IPVS: ftp: loaded support on port[0] = 21
[ 2997.594529][T24460] chnl_net:caif_netlink_parms(): no params data found
[ 2997.623770][T24460] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2997.630832][T24460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2997.638702][T24460] device bridge_slave_0 entered promiscuous mode
[ 2997.681838][T24460] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2997.688894][T24460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2997.703450][T24460] device bridge_slave_1 entered promiscuous mode
[ 2997.728799][T24460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2997.744564][T24460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2997.772253][T24460] team0: Port device team_slave_0 added
[ 2997.779212][T24460] team0: Port device team_slave_1 added
[ 2997.863943][T24460] device hsr_slave_0 entered promiscuous mode
[ 2997.922123][T24460] device hsr_slave_1 entered promiscuous mode
[ 2997.975747][T24460] debugfs: Directory 'hsr0' with parent '/' already present!
[ 2998.018826][T24460] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2998.026070][T24460] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2998.033469][T24460] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2998.040635][T24460] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2998.090534][T24460] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2998.103993][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2998.112875][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2998.120725][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2998.137513][T24460] 8021q: adding VLAN 0 to HW filter on device team0
[ 2998.163299][T21648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2998.172056][T21648] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2998.179109][T21648] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2998.192977][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2998.201366][T21647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2998.208440][T21647] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2998.248018][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2998.256696][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2998.273153][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2998.282286][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2998.293779][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2998.307332][T24460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2998.322853][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2998.330300][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2998.355568][T24460] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2998.414398][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2998.433483][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2998.442864][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2998.450865][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2998.460820][T24460] device veth0_vlan entered promiscuous mode
[ 2998.472207][T24460] device veth1_vlan entered promiscuous mode
03:57:05 executing program 0:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
read(r0, 0x0, 0x0)

03:57:05 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x7a}})
write$evdev(r0, &(0x7f0000000040), 0xa8)

03:57:05 executing program 2:
madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r0, 0x20400000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000006d000507000000000000000000000000bf8f6f74efc7e9c1653cefb1dd58f38d16f49b57140436a5ce577d1123fee2b6738bd40c157e4349fcdda940c67f03905a6ab3569d41b432f97f36bb09ab70b83e364adc74805e8119e59673cf6f1260950a30de4a2b414f2aa3445d6e727066fd214707f20f899cd16460723be8efa2da3c7f7f87df25", @ANYRES32=0x0, @ANYBLOB="246c03000000040010001200080001007674690004000200"], 0x30}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
name_to_handle_at(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x46, 0x2c, "a987ce8b9aa5a7433222b7cd84780e1cb1338b7f5352c3bb4b12e4378dfa6549a0240071f4bbcb9dc654113deed0a5cdc141cd0d7e93a8e0f0880c73e9a3"}, &(0x7f0000000380), 0x2000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f0000000600)="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", 0x200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffd7)
accept$netrom(r6, 0x0, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x10)
sendfile(r2, r3, 0x0, 0x7fffffa7)

03:57:05 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300))
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
read$rfkill(r4, &(0x7f0000000040), 0x8)

03:57:05 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b4c, &(0x7f0000000cc0)="7a16")

03:57:05 executing program 4:
madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r0, 0x20400000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000006d000507000000000000000000000000bf8f6f74efc7e9c1653cefb1dd58f38d16f49b57140436a5ce577d1123fee2b6738bd40c157e4349fcdda940c67f03905a6ab3569d41b432f97f36bb09ab70b83e364adc74805e8119e59673cf6f1260950a30de4a2b414f2aa3445d6e727066fd214707f20f899cd16460723be8efa2da3c7f7f87df25", @ANYRES32=0x0, @ANYBLOB="246c03000000040010001200080001007674690004000200"], 0x30}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
name_to_handle_at(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x46, 0x2c, "a987ce8b9aa5a7433222b7cd84780e1cb1338b7f5352c3bb4b12e4378dfa6549a0240071f4bbcb9dc654113deed0a5cdc141cd0d7e93a8e0f0880c73e9a3"}, &(0x7f0000000380), 0x2000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f0000000600)="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", 0x200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffd7)
accept$netrom(r6, 0x0, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x10)
sendfile(r2, r3, 0x0, 0x7fffffa7)

[ 2998.542523][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2998.550964][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2998.746429][   T27] audit: type=1800 audit(2000001425.670:1185): pid=24480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1609 res=0
03:57:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x0, {0x0, 0x4000000, 0xfffffffffffffffd}}, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2998.777836][   T27] audit: type=1800 audit(2000001425.670:1186): pid=24478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=1610 res=0
[ 2998.806387][   T27] audit: type=1804 audit(2000001425.730:1187): pid=24480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/31/file0/file0" dev="loop2" ino=1609 res=1
03:57:05 executing program 1:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

[ 2998.875991][T24478] attempt to access beyond end of device
[ 2998.897224][T24480] attempt to access beyond end of device
[ 2998.904374][T24478] loop4: rw=2049, want=130, limit=112
[ 2998.906382][T24480] loop2: rw=2049, want=130, limit=112
03:57:05 executing program 5:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0x18})
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x20000000)

03:57:06 executing program 4:
madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r0, 0x20400000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000006d000507000000000000000000000000bf8f6f74efc7e9c1653cefb1dd58f38d16f49b57140436a5ce577d1123fee2b6738bd40c157e4349fcdda940c67f03905a6ab3569d41b432f97f36bb09ab70b83e364adc74805e8119e59673cf6f1260950a30de4a2b414f2aa3445d6e727066fd214707f20f899cd16460723be8efa2da3c7f7f87df25", @ANYRES32=0x0, @ANYBLOB="246c03000000040010001200080001007674690004000200"], 0x30}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
name_to_handle_at(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x46, 0x2c, "a987ce8b9aa5a7433222b7cd84780e1cb1338b7f5352c3bb4b12e4378dfa6549a0240071f4bbcb9dc654113deed0a5cdc141cd0d7e93a8e0f0880c73e9a3"}, &(0x7f0000000380), 0x2000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f0000000600)="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", 0x200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffd7)
accept$netrom(r6, 0x0, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x10)
sendfile(r2, r3, 0x0, 0x7fffffa7)

03:57:06 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000040), 0x4)

03:57:06 executing program 5:
syz_init_net_socket$ax25(0x3, 0x0, 0xcd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3a9, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
socket$inet6_udplite(0xa, 0x2, 0x88)
preadv(r1, &(0x7f00000017c0), 0x315, 0x800000)

03:57:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

[ 2999.571980][   T27] kauditd_printk_skb: 4 callbacks suppressed
[ 2999.572063][   T27] audit: type=1800 audit(2000001426.500:1192): pid=24514 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16612 res=0
03:57:06 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='tz=UTC,debug,nodots'])

03:57:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x0, {0x0, 0x4000000, 0xfffffffffffffffd}}, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2999.836429][   T27] audit: type=1804 audit(2000001426.530:1193): pid=24518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir827043682/syzkaller.oollw1/162/file0/file0" dev="sda1" ino=16612 res=1
03:57:06 executing program 5:
syz_init_net_socket$ax25(0x3, 0x0, 0xcd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3a9, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
socket$inet6_udplite(0xa, 0x2, 0x88)
preadv(r1, &(0x7f00000017c0), 0x315, 0x800000)

[ 3000.049682][T24526] gfs2: not a GFS2 filesystem
[ 3000.058994][   T27] audit: type=1800 audit(2000001426.530:1194): pid=24518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16612 res=0
[ 3000.158814][T24540] FAT-fs (loop2): Directory bread(block 2563) failed
[ 3000.251698][T24540] FAT-fs (loop2): Directory bread(block 2564) failed
[ 3000.349186][T24540] FAT-fs (loop2): Directory bread(block 2565) failed
[ 3000.446360][T24540] FAT-fs (loop2): Directory bread(block 2566) failed
03:57:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x0, {0x0, 0x4000000, 0xfffffffffffffffd}}, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3000.491998][T24540] FAT-fs (loop2): Directory bread(block 2567) failed
[ 3000.516184][T24540] FAT-fs (loop2): Directory bread(block 2568) failed
03:57:07 executing program 5:
syz_init_net_socket$ax25(0x3, 0x0, 0xcd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3a9, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
socket$inet6_udplite(0xa, 0x2, 0x88)
preadv(r1, &(0x7f00000017c0), 0x315, 0x800000)

[ 3000.559968][T24540] FAT-fs (loop2): Directory bread(block 2569) failed
03:57:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9008, 0x2})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x5}}, 0x18)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c4, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3000.633436][T24540] FAT-fs (loop2): Directory bread(block 2570) failed
[ 3000.640271][T24540] FAT-fs (loop2): Directory bread(block 2571) failed
[ 3000.652283][T24540] FAT-fs (loop2): Directory bread(block 2572) failed
03:57:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x0, {0x0, 0x4000000, 0xfffffffffffffffd}}, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:57:08 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='tz=UTC,debug,nodots'])

03:57:08 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

03:57:08 executing program 5:
syz_init_net_socket$ax25(0x3, 0x0, 0xcd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3a9, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
socket$inet6_udplite(0xa, 0x2, 0x88)
preadv(r1, &(0x7f00000017c0), 0x315, 0x800000)

03:57:08 executing program 1:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

03:57:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9008, 0x2})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x5}}, 0x18)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c4, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3001.574939][T24589] FAT-fs (loop2): Directory bread(block 2563) failed
[ 3001.700027][T24589] FAT-fs (loop2): Directory bread(block 2564) failed
[ 3001.737308][T24589] FAT-fs (loop2): Directory bread(block 2565) failed
[ 3001.763997][T24589] FAT-fs (loop2): Directory bread(block 2566) failed
[ 3001.770826][T24589] FAT-fs (loop2): Directory bread(block 2567) failed
[ 3001.780663][T24603] gfs2: not a GFS2 filesystem
[ 3001.780794][T24589] FAT-fs (loop2): Directory bread(block 2568) failed
[ 3001.803680][T24589] FAT-fs (loop2): Directory bread(block 2569) failed
03:57:08 executing program 0:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

[ 3001.822396][T24589] FAT-fs (loop2): Directory bread(block 2570) failed
[ 3001.829336][T24589] FAT-fs (loop2): Directory bread(block 2571) failed
[ 3001.847348][T24589] FAT-fs (loop2): Directory bread(block 2572) failed
03:57:08 executing program 5:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

03:57:09 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='tz=UTC,debug,nodots'])

03:57:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9008, 0x2})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x5}}, 0x18)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c4, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:57:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

[ 3002.309361][T24627] FAT-fs (loop2): Directory bread(block 2563) failed
[ 3002.321935][T24627] FAT-fs (loop2): Directory bread(block 2564) failed
[ 3002.328785][T24627] FAT-fs (loop2): Directory bread(block 2565) failed
[ 3002.344446][T24627] FAT-fs (loop2): Directory bread(block 2566) failed
[ 3002.401734][T24627] FAT-fs (loop2): Directory bread(block 2567) failed
[ 3002.451908][T24627] FAT-fs (loop2): Directory bread(block 2568) failed
[ 3002.521959][T24627] FAT-fs (loop2): Directory bread(block 2569) failed
[ 3002.565389][T24627] FAT-fs (loop2): Directory bread(block 2570) failed
[ 3002.631739][T24627] FAT-fs (loop2): Directory bread(block 2571) failed
[ 3002.703429][T24627] FAT-fs (loop2): Directory bread(block 2572) failed
[ 3002.739275][T24634] gfs2: not a GFS2 filesystem
03:57:10 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='tz=UTC,debug,nodots'])

03:57:10 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

03:57:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9008, 0x2})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x5}}, 0x18)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c4, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3003.575753][T24647] FAT-fs (loop2): Directory bread(block 2563) failed
[ 3003.669950][T24647] FAT-fs (loop2): Directory bread(block 2564) failed
[ 3003.687681][T24647] FAT-fs (loop2): Directory bread(block 2565) failed
[ 3003.709145][T24647] FAT-fs (loop2): Directory bread(block 2566) failed
[ 3003.738788][T24647] FAT-fs (loop2): Directory bread(block 2567) failed
[ 3003.849436][T24647] FAT-fs (loop2): Directory bread(block 2568) failed
[ 3003.872940][T24647] FAT-fs (loop2): Directory bread(block 2569) failed
[ 3003.902490][T24647] FAT-fs (loop2): Directory bread(block 2570) failed
[ 3003.916367][T24647] FAT-fs (loop2): Directory bread(block 2571) failed
[ 3004.007012][T24647] FAT-fs (loop2): Directory bread(block 2572) failed
03:57:11 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

[ 3004.268211][T24646] gfs2: not a GFS2 filesystem
03:57:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

[ 3005.146678][T24665] gfs2: not a GFS2 filesystem
[ 3005.382334][T24678] gfs2: not a GFS2 filesystem
03:57:12 executing program 1:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

03:57:12 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@local}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2a2912402201deb}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

03:57:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

03:57:12 executing program 5:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

03:57:12 executing program 0:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

03:57:12 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

03:57:12 executing program 3:
prlimit64(0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300))
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=""/38, 0x26}, 0x2000)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x1f})
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000040)=r3, 0xab)
clone3(&(0x7f0000000540)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}, 0x50)
write$cgroup_pid(r3, &(0x7f0000000580), 0x12)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8)
sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYBLOB], 0x2}}, 0x4020041)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
sendfile(r0, r1, 0x0, 0x10000)

[ 3005.913074][T24693] gfs2: not a GFS2 filesystem
[ 3006.027896][T24705] gfs2: not a GFS2 filesystem
03:57:13 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

[ 3006.235056][   T27] audit: type=1804 audit(2000001433.160:1195): pid=24715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir075735698/syzkaller.BFG85j/454/file0" dev="sda1" ino=17172 res=1
03:57:13 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

[ 3006.370573][   T27] audit: type=1804 audit(2000001433.190:1196): pid=24712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir075735698/syzkaller.BFG85j/454/file0" dev="sda1" ino=17172 res=1
[ 3006.649296][T24721] gfs2: not a GFS2 filesystem
03:57:13 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080db5055e0bcfe8696071")
r1 = socket$inet(0xa, 0x801, 0x84)
getsockopt$inet_buf(r1, 0x84, 0x0, &(0x7f0000dcffe8)=""/24, &(0x7f00000000c0)=0x69)

03:57:14 executing program 3:
prlimit64(0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300))
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=""/38, 0x26}, 0x2000)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x1f})
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000040)=r3, 0xab)
clone3(&(0x7f0000000540)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}, 0x50)
write$cgroup_pid(r3, &(0x7f0000000580), 0x12)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8)
sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYBLOB], 0x2}}, 0x4020041)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
sendfile(r0, r1, 0x0, 0x10000)

[ 3007.106782][T24725] gfs2: not a GFS2 filesystem
03:57:14 executing program 4:
prlimit64(0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300))
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=""/38, 0x26}, 0x2000)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x1f})
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000040)=r3, 0xab)
clone3(&(0x7f0000000540)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}, 0x50)
write$cgroup_pid(r3, &(0x7f0000000580), 0x12)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8)
sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYBLOB], 0x2}}, 0x4020041)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600)
sendfile(r0, r1, 0x0, 0x10000)

[ 3007.416858][   T27] audit: type=1804 audit(2000001434.340:1197): pid=24740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir075735698/syzkaller.BFG85j/455/file0" dev="sda1" ino=17172 res=1
[ 3007.580473][   T27] audit: type=1804 audit(2000001434.390:1198): pid=24739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir075735698/syzkaller.BFG85j/455/file0" dev="sda1" ino=17172 res=1
[ 3007.771935][   T27] audit: type=1804 audit(2000001434.610:1199): pid=24747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir827043682/syzkaller.oollw1/171/file0" dev="sda1" ino=16899 res=1
03:57:16 executing program 0:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

03:57:16 executing program 1:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

03:57:16 executing program 4:
prlimit64(0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300))
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=""/38, 0x26}, 0x2000)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x1f})
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000040)=r3, 0xab)
clone3(&(0x7f0000000540)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}, 0x50)
write$cgroup_pid(r3, &(0x7f0000000580), 0x12)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8)
sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYBLOB], 0x2}}, 0x4020041)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
sendfile(r0, r1, 0x0, 0x10000)

03:57:16 executing program 3:
prlimit64(0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300))
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=""/38, 0x26}, 0x2000)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x1f})
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000040)=r3, 0xab)
clone3(&(0x7f0000000540)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}, 0x50)
write$cgroup_pid(r3, &(0x7f0000000580), 0x12)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8)
sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYBLOB], 0x2}}, 0x4020041)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600)
sendfile(r0, r1, 0x0, 0x10000)

03:57:16 executing program 5:
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x36)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r5=>0x0}, &(0x7f00000005c0)=0xc)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0xc000, 0x80000003)
r8 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r8, &(0x7f0000001080)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x658, @local}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="eaa933f2b5098a439d3465faf53b2569ce7f5202feaa86868571676556c3fa3dd6b729454dd4bfd4109a0635fbbbed2858409ea63352cd2bc20a91f950abbf7b28b7b1083756456d4d04f88900dcbc438da0748540bf476422c2c1ea507e5ca174be8102bcc823295d145bf4d9b3fa8461848953b79fc64c7d0900d649870ad216ec1a3a6e85a6b445ac485e57d801994ee654107de1822cc51ac902d171d06f1bd3dde52879fae496786aa0bf62dce535b3fcfcecd351bd60", 0xb9}, {&(0x7f0000000840)="e0acf3a72e755f0ee2230b42f5b32e815a705cf79c32514f014d1e7787437c4ca5336e7587eb578c59beb08fabbc2b1c30cf91e74123f2b79ddcff28c132a9d8e916e65a2e6342c31a40cfb7ebe06a1ef4054e38890d805c3f241da14e4afa10d8bd6cb21698ed803a2bbc6a7d19eb50598d60d1482811fe547f29d78a1f7f0e70bedc199a1a348b870fec99cebdb7b5380930b1f6fe42ee44ea071f4b7c55f954ecd97997dd59e343e4e0ed5865924cd75abca3a88ecd6874fb6a9e9985c7f144d87e38eb58c815544fab6b266aa83afbc9", 0xd2}, {&(0x7f0000000940)="5669e663e9b51528a5b807371e519c81bfd11c8ed5aebd2628d0de9166c7c7638f81658afa707887212b08b40cb749e29d30fde82f65a0dd0c11f280a1958469be682ac146", 0x45}, {&(0x7f00000009c0)="61793bc7b301905dc254a51ce72850e44f9229b7b9c0fd8d2be84b5b927f5dd3d73941856391f364ede5d7a3f8baa11d63d8675f5873f5a4324a02cfaa8babfca861bedbae05d94296df7be6290b8a9e5223c6d9db80cfa4c3616957b88579077c0e150d7e61ef43f932f97f78dba3e4cbdf0b287061fa5060d1f9f5a2f377ab002d9a70c31b5b2af1f7f8ce2ea553b1774b347956a7f8eae0578dc96b655fc0cae80fd197935bd2d31a3d34cf7a389fbac2ad3201d6798afffc67217b6e75b863f9e6ba445968a54d8dc02bd136ba0eb2", 0xd1}], 0x4, &(0x7f0000000ac0)=[{0x18, 0x109, 0x0, "794f3b32db854965"}], 0x18}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x67cddcdf}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c40)="46fdd8088991d6868bb3944a38f1718efd83a7b78acd0bd606d36beac5b269c1ee38235cd8de5cb5b8b119f27c4ba8d5b47be2205dc2e98f0136f5cae4c426f18bf0a7bdddd6b44f5b72a153b8cb851b63a8fa7f37b313c3ae959e9914ae10f54cf1970e7c77b29943361ade66324238e92472c7d33a07b34857712524144e657942f787164abc54588a7c4289d0e1ee828fbfbc02174521fa1b42718929e422fb110347d4723cd0adf0fb592531", 0xae}, {&(0x7f0000000d00)="23b49ecba71241ae3d6696b953f1ec45ec517f0f7bae4732f52c5a080cc632c8664aa18c60a66c9ecf2b5a3c80e91635fc6aa282134fd6b10c27ebdab96a9f3aae3c6def0e162f5fec980e73f3d533b5afc5014fab20eaa5137b11c06a642516ec4b66c9b5620c4099653ae0fc6c1d800f89a748eec1034685e3e43a01e54447379e6fa66191b43a8c2c14d27e84161286b2", 0x92}, {0x0}, {&(0x7f0000000dc0)="bf9c0ed5e58a2664ec70c2b8dc910baab07a849ddc7cd9844c80fc9b609c0149b4a97f1bd54ecef50cf5245c5c9431078014a3a32c26ae2156e89c75f670010539c8be79478e22422067ef589f125215a838cc27b455741f4badc44e4c4ffbfa1b8cabd790b18200cc91d8273d1c13c0218df0b6135ba5ed7abda2d0", 0x7c}, {&(0x7f0000000e40)="917b63deac56571c678526cc473955fc1c4b604a5c4b5aa77f6408551a70c9179ac38ffd3e712463c64c0da3656a15d2801714d7d7a07dc080ddde90007fc04fa16ccd4f397ea8ca04d38bba400c60494fcbb746e0c1ae9ae979b65b88de928551ede72fbaaadd176e3cdc6d5152ae167c9a6b2f8f5ddc4b321d658035d7f4d338db4b17842a0aab00a007c136039471b3417206d0c41ead823dcbcc77708daafe26fc225a51575efae20f698b9c9791cc2d78cf71a6c5f58bd3e2aa74b8cf3585c04b99bf07d4202d590afc60248b0e9b19e8d8b4c5392531be981a899cd62c317bda7a0410d8c73cf285b5", 0xec}, {&(0x7f0000000f40)="c0201e30da1050d3a90916174d2d80c7995649f26ede39a31a61f09202c4ca3e9e5e1ba54800a8675a633cf7629cf5295055417d541cef6f0f464a0c1b97c9ae30ae531781ea845d76e2d6c7bceb9860422d8924da0a9f06c7620d3e85fd9e4febaadeecb6656f7b136d86e7db90f21888342a8422e51a6feb07d888cd8ae7ca2a93c4e0bc636f59a319bde7fc57f6652a283c04cf55a54a28b1fbd2c78d7571590d18d7", 0xa4}], 0x6}}], 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)={<r10=>r8})
kcmp(r4, r5, 0x4, r6, r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r11, 0x36)
r12 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000001c0)=<r13=>0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000600)={<r14=>0x0}, &(0x7f00000005c0)=0xc)
r15 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96)
r16 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r16, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r16, 0x3, 0xc000, 0x80000003)
r17 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r17, 0x0, 0x0)
connect$inet6(r17, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r17, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f00000004c0)={<r18=>r17})
kcmp(r13, r14, 0x4, r15, r18)
r19 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x1)
kcmp(0x0, r13, 0x6, r19, 0xffffffffffffffff)
r20 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60)
r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0)
r22 = dup3(r1, r20, 0x0)
r23 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r23, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r23, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r23, 0xc058534f, &(0x7f00000000c0)={{0x4c, 0x9}, 0x2, 0xfffffffc, 0xfffffffc, {0x6, 0xcf}, 0xa, 0x6})
setsockopt$netrom_NETROM_N2(r23, 0x103, 0x3, &(0x7f0000000080)=0x40, 0x4)
r24 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r24, 0x0)
dup2(r22, r21)
r25 = socket(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r25, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
r26 = socket$inet6(0xa, 0x3, 0x6)
r27 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r26, r27, &(0x7f0000000240)=0x97, 0x4000000000dc)

03:57:16 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)

[ 3009.579936][   T27] audit: type=1804 audit(2000001436.500:1200): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir827043682/syzkaller.oollw1/172/file0" dev="sda1" ino=17143 res=1
03:57:16 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)

[ 3009.692835][   T27] audit: type=1804 audit(2000001436.560:1201): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir827043682/syzkaller.oollw1/172/file0" dev="sda1" ino=17143 res=1
[ 3009.786720][   T27] audit: type=1804 audit(2000001436.600:1202): pid=24771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir075735698/syzkaller.BFG85j/456/file0" dev="sda1" ino=17153 res=1
03:57:16 executing program 4:
prlimit64(0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300))
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=""/38, 0x26}, 0x2000)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x1f})
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000040)=r3, 0xab)
clone3(&(0x7f0000000540)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}, 0x50)
write$cgroup_pid(r3, &(0x7f0000000580), 0x12)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8)
sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYBLOB], 0x2}}, 0x4020041)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
sendfile(r0, r1, 0x0, 0x10000)

03:57:16 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)

03:57:16 executing program 3:
prlimit64(0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300))
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=""/38, 0x26}, 0x2000)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x1f})
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000040)=r3, 0xab)
clone3(&(0x7f0000000540)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}, 0x50)
write$cgroup_pid(r3, &(0x7f0000000580), 0x12)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8)
sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYBLOB], 0x2}}, 0x4020041)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
sendfile(r0, r1, 0x0, 0x10000)

[ 3010.396824][   T27] audit: type=1804 audit(2000001437.320:1203): pid=24797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir075735698/syzkaller.BFG85j/457/file0" dev="sda1" ino=16978 res=1
03:57:17 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)

03:57:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000414635c743e7ee8b36fd001021a0000"], 0x14}}, 0x0)

[ 3010.918970][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:57:19 executing program 5:
perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_nanosleep(0x1, 0x1, &(0x7f0000000100)={0x77359400}, 0x0)

03:57:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000240)}, 0x5)

03:57:19 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r1, r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='em0mime_typewlan1]+,\xbe\x00', r2}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
write(r3, &(0x7f0000000040)='S', 0x1)
ioctl$TCXONC(r3, 0x540a, 0x2)
write$binfmt_misc(r3, 0x0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x1)

03:57:19 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0x8f)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr=0x3, @local}, 0xc)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x100000001]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

03:57:19 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
getegid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000001880))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000001240)='team\x00')
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0)
accept4(r6, &(0x7f0000001280)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f0000001300)=0x80, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r8, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001340)={<r10=>0x0, @dev, @multicast1}, &(0x7f0000001380)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@empty, @in6=@empty}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000001700)=0xe8)
r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000940))
fstat(r11, &(0x7f00000017c0))
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r12, 0x1000008912, &(0x7f0000000400)="01dca5055e0bcfe47b")
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000017c0)={'rose0\x00', <r13=>0x0})
socket$kcm(0x11, 0x2, 0x300)
r14 = socket$kcm(0x11, 0x0, 0x300)
recvmsg(r14, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r15=>0x0}, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r16 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r16, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r17 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r17, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000827bd7000090000", @ANYRES32=r7, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000800", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000380001002b0001006e6f746966795f70656572735f696e74657276616c000000000000000000000008090300030000000800040002000000080001", @ANYRES32=r13, @ANYBLOB="2401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000400040038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00", @ANYRES32=0x0, @ANYBLOB="3c0102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040001000001020000008000200104000000020020340100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000008000300030000000800", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400"/89, @ANYRES32, @ANYRES32, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400400000003800010024000100616374697665706f7274000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800020074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400070002060800000005000881050000000500057f0900000007000106400000000300000205000000ff030106060000000001007652c900000000e3810800000040000100240001007072696f7269747900"/156, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009"], 0x26}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r18 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r19 = syz_open_procfs(0x0, 0x0)
preadv(r19, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r19, 0x4018620d, &(0x7f0000000180))
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x2c710, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'bond0\x00', <r21=>0x0})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r22})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r23=>0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r5, 0x348850bc54e6b6d4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r21}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x52}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x22}, 0x800)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r24 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r24, 0x40086607, &(0x7f0000000040)=0x8040800)

03:57:19 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000380), 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x5}, 0xd, 0x0, 0x0, 0x0, "0327e1b22b5fcef700580f02000000003f4200030000000000580f0200000000ee420f0000000000856b76b5f500000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0)

03:57:19 executing program 0:
syz_mount_image$exfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

03:57:19 executing program 1:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{0x0, 0xffffffdd}], 0x1, 0x0)

[ 3012.941681][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3012.947494][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:57:19 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041)
write$evdev(r0, &(0x7f0000000480)=[{{}, 0x4, 0x8}], 0x18)

[ 3013.022810][T24836] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[ 3013.109419][T24836] EXT4-fs warning (device sda1): ext4_group_extend:1771: will only finish group (524288 blocks, 256 new)
03:57:20 executing program 1:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{0x0, 0xffffffdd}], 0x1, 0x0)

[ 3013.155693][T24836] EXT4-fs warning (device sda1): ext4_group_extend:1777: can't read last block, resize aborted
03:57:20 executing program 2:
gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
semget(0x3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 3013.261667][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3013.261694][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3013.267436][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3013.273175][    C0] protocol 88fb is buggy, dev hsr_slave_1
03:57:20 executing program 0:
r0 = getpgrp(0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x4})
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0)
readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1)

[ 3013.502172][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3013.507954][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:57:20 executing program 5:
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
splice(r1, &(0x7f0000000340), r0, 0x0, 0x2, 0x0)

03:57:20 executing program 1:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{0x0, 0xffffffdd}], 0x1, 0x0)

03:57:20 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xb00000000000000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

03:57:20 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0)

[ 3013.583983][   T27] audit: type=1804 audit(2000001440.500:1204): pid=24846 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir827043682/syzkaller.oollw1/175/file0" dev="sda1" ino=17190 res=1
03:57:20 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
getegid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000001880))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000001240)='team\x00')
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0)
accept4(r6, &(0x7f0000001280)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f0000001300)=0x80, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r8, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001340)={<r10=>0x0, @dev, @multicast1}, &(0x7f0000001380)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@empty, @in6=@empty}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000001700)=0xe8)
r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000940))
fstat(r11, &(0x7f00000017c0))
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r12, 0x1000008912, &(0x7f0000000400)="01dca5055e0bcfe47b")
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000017c0)={'rose0\x00', <r13=>0x0})
socket$kcm(0x11, 0x2, 0x300)
r14 = socket$kcm(0x11, 0x0, 0x300)
recvmsg(r14, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r15=>0x0}, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r16 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r16, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r17 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r17, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000827bd7000090000", @ANYRES32=r7, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000800", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000380001002b0001006e6f746966795f70656572735f696e74657276616c000000000000000000000008090300030000000800040002000000080001", @ANYRES32=r13, @ANYBLOB="2401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000400040038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00", @ANYRES32=0x0, @ANYBLOB="3c0102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040001000001020000008000200104000000020020340100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000008000300030000000800", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400"/89, @ANYRES32, @ANYRES32, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400400000003800010024000100616374697665706f7274000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800020074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400070002060800000005000881050000000500057f0900000007000106400000000300000205000000ff030106060000000001007652c900000000e3810800000040000100240001007072696f7269747900"/156, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009"], 0x26}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r18 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r19 = syz_open_procfs(0x0, 0x0)
preadv(r19, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r19, 0x4018620d, &(0x7f0000000180))
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x2c710, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'bond0\x00', <r21=>0x0})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r22})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r23=>0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r5, 0x348850bc54e6b6d4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r21}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x52}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x22}, 0x800)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r24 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r24, 0x40086607, &(0x7f0000000040)=0x8040800)

03:57:20 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xb00000000000000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

03:57:20 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0)

03:57:20 executing program 1:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{0x0, 0xffffffdd}], 0x1, 0x0)

03:57:20 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
getegid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000001880))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000001240)='team\x00')
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0)
accept4(r6, &(0x7f0000001280)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f0000001300)=0x80, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r8, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001340)={<r10=>0x0, @dev, @multicast1}, &(0x7f0000001380)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@empty, @in6=@empty}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000001700)=0xe8)
r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000940))
fstat(r11, &(0x7f00000017c0))
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r12, 0x1000008912, &(0x7f0000000400)="01dca5055e0bcfe47b")
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000017c0)={'rose0\x00', <r13=>0x0})
socket$kcm(0x11, 0x2, 0x300)
r14 = socket$kcm(0x11, 0x0, 0x300)
recvmsg(r14, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r15=>0x0}, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r16 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r16, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r17 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r17, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000827bd7000090000", @ANYRES32=r7, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000800", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000380001002b0001006e6f746966795f70656572735f696e74657276616c000000000000000000000008090300030000000800040002000000080001", @ANYRES32=r13, @ANYBLOB="2401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000400040038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00", @ANYRES32=0x0, @ANYBLOB="3c0102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040001000001020000008000200104000000020020340100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000008000300030000000800", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400"/89, @ANYRES32, @ANYRES32, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400400000003800010024000100616374697665706f7274000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800020074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400070002060800000005000881050000000500057f0900000007000106400000000300000205000000ff030106060000000001007652c900000000e3810800000040000100240001007072696f7269747900"/156, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009"], 0x26}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r18 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r19 = syz_open_procfs(0x0, 0x0)
preadv(r19, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r19, 0x4018620d, &(0x7f0000000180))
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x2c710, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'bond0\x00', <r21=>0x0})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r22})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r23=>0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r5, 0x348850bc54e6b6d4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r21}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x52}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x22}, 0x800)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r24 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r24, 0x40086607, &(0x7f0000000040)=0x8040800)

03:57:21 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0)

03:57:21 executing program 2:
gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
semget(0x3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:57:21 executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xb00000000000000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

03:57:21 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xb00000000000000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

[ 3014.221664][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3014.227465][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3014.281302][T24917] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[ 3014.366689][T24917] EXT4-fs warning (device sda1): ext4_group_extend:1771: will only finish group (524288 blocks, 256 new)
[ 3014.410642][T24923] netlink: 'syz-executor.5': attribute type 8 has an invalid length.
[ 3014.418907][T24917] EXT4-fs warning (device sda1): ext4_group_extend:1777: can't read last block, resize aborted
03:57:21 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0)

03:57:21 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xb00000000000000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

03:57:21 executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xb00000000000000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

[ 3014.619753][T24923] EXT4-fs warning (device sda1): ext4_group_extend:1771: will only finish group (524288 blocks, 256 new)
[ 3014.681936][T24923] EXT4-fs warning (device sda1): ext4_group_extend:1777: can't read last block, resize aborted
03:57:21 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
getegid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000001880))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000001240)='team\x00')
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0)
accept4(r6, &(0x7f0000001280)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f0000001300)=0x80, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r8, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001340)={<r10=>0x0, @dev, @multicast1}, &(0x7f0000001380)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@empty, @in6=@empty}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000001700)=0xe8)
r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000940))
fstat(r11, &(0x7f00000017c0))
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r12, 0x1000008912, &(0x7f0000000400)="01dca5055e0bcfe47b")
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000017c0)={'rose0\x00', <r13=>0x0})
socket$kcm(0x11, 0x2, 0x300)
r14 = socket$kcm(0x11, 0x0, 0x300)
recvmsg(r14, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r15=>0x0}, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r16 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r16, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r17 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r17, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000827bd7000090000", @ANYRES32=r7, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000800", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000380001002b0001006e6f746966795f70656572735f696e74657276616c000000000000000000000008090300030000000800040002000000080001", @ANYRES32=r13, @ANYBLOB="2401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000400040038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00", @ANYRES32=0x0, @ANYBLOB="3c0102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040001000001020000008000200104000000020020340100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000008000300030000000800", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400"/89, @ANYRES32, @ANYRES32, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400400000003800010024000100616374697665706f7274000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800020074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400070002060800000005000881050000000500057f0900000007000106400000000300000205000000ff030106060000000001007652c900000000e3810800000040000100240001007072696f7269747900"/156, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009"], 0x26}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r18 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r19 = syz_open_procfs(0x0, 0x0)
preadv(r19, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r19, 0x4018620d, &(0x7f0000000180))
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x2c710, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'bond0\x00', <r21=>0x0})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r22})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r23=>0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r5, 0x348850bc54e6b6d4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r21}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x52}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x22}, 0x800)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r24 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r24, 0x40086607, &(0x7f0000000040)=0x8040800)

03:57:21 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "ad7a424b5b902a38bd586c7aacc348f241a18ae89fdfe18f033315942460d389", "a4a63443a0e73fe67d4d5da474e99448a3f20b5e1a997c3a7f1ba2549c5cec80", "6b4e479641472a289f18c8672c08ea78d09a72d6ae93faf2a69976577584a52a", "13474527a950488f89416c8b8c84edeba5fe1da4cb81cd7278fb31556f65a002", "d58e01400b30399558d5d3a3f0efb648f7379fbb8a9b68b8ca0c4f086ee58129", "5e23f1b81742f03dcb70b800"}})

03:57:21 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000300)=ANY=[], 0x6)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:57:21 executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xb00000000000000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

03:57:22 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
getegid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000001880))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000001240)='team\x00')
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0)
accept4(r6, &(0x7f0000001280)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f0000001300)=0x80, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r8, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001340)={<r10=>0x0, @dev, @multicast1}, &(0x7f0000001380)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@empty, @in6=@empty}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000001700)=0xe8)
r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000940))
fstat(r11, &(0x7f00000017c0))
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r12, 0x1000008912, &(0x7f0000000400)="01dca5055e0bcfe47b")
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000017c0)={'rose0\x00', <r13=>0x0})
socket$kcm(0x11, 0x2, 0x300)
r14 = socket$kcm(0x11, 0x0, 0x300)
recvmsg(r14, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r15=>0x0}, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r16 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r16, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r17 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r17, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000827bd7000090000", @ANYRES32=r7, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000800", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000380001002b0001006e6f746966795f70656572735f696e74657276616c000000000000000000000008090300030000000800040002000000080001", @ANYRES32=r13, @ANYBLOB="2401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000400040038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00", @ANYRES32=0x0, @ANYBLOB="3c0102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040001000001020000008000200104000000020020340100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000008000300030000000800", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400"/89, @ANYRES32, @ANYRES32, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400400000003800010024000100616374697665706f7274000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800020074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400070002060800000005000881050000000500057f0900000007000106400000000300000205000000ff030106060000000001007652c900000000e3810800000040000100240001007072696f7269747900"/156, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009"], 0x26}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r18 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r19 = syz_open_procfs(0x0, 0x0)
preadv(r19, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r19, 0x4018620d, &(0x7f0000000180))
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x2c710, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'bond0\x00', <r21=>0x0})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r22})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r23=>0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r5, 0x348850bc54e6b6d4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r21}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x52}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x22}, 0x800)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r24 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r24, 0x40086607, &(0x7f0000000040)=0x8040800)

03:57:22 executing program 0:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

[ 3015.214435][T24958] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[ 3015.358250][T24958] EXT4-fs warning (device sda1): ext4_group_extend:1771: will only finish group (524288 blocks, 256 new)
03:57:22 executing program 2:
gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
semget(0x3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:57:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0xc, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000f00)={0x0, 0xffffffffffffff95, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1300000010000100000087c037d317e8f4bb0a00da000000160afffffff0000000000000641b0679ac00d5c81207000000202166f03174440b9c5e9848f2c8c50ddd7f42"], 0x33fe0}}, 0x0)

03:57:22 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000300)=ANY=[], 0x6)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 3015.442104][T24958] EXT4-fs warning (device sda1): ext4_group_extend:1777: can't read last block, resize aborted
[ 3015.505798][T24974] netlink: 'syz-executor.5': attribute type 8 has an invalid length.
[ 3015.597266][T24989] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
03:57:22 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
getegid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000001880))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000001240)='team\x00')
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0)
accept4(r6, &(0x7f0000001280)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f0000001300)=0x80, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r8, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001340)={<r10=>0x0, @dev, @multicast1}, &(0x7f0000001380)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@empty, @in6=@empty}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000001700)=0xe8)
r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000940))
fstat(r11, &(0x7f00000017c0))
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r12, 0x1000008912, &(0x7f0000000400)="01dca5055e0bcfe47b")
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000017c0)={'rose0\x00', <r13=>0x0})
socket$kcm(0x11, 0x2, 0x300)
r14 = socket$kcm(0x11, 0x0, 0x300)
recvmsg(r14, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r15=>0x0}, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r16 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r16, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r17 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r17, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000827bd7000090000", @ANYRES32=r7, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000800", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000380001002b0001006e6f746966795f70656572735f696e74657276616c000000000000000000000008090300030000000800040002000000080001", @ANYRES32=r13, @ANYBLOB="2401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000400040038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00", @ANYRES32=0x0, @ANYBLOB="3c0102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040001000001020000008000200104000000020020340100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000008000300030000000800", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400"/89, @ANYRES32, @ANYRES32, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400400000003800010024000100616374697665706f7274000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800020074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400070002060800000005000881050000000500057f0900000007000106400000000300000205000000ff030106060000000001007652c900000000e3810800000040000100240001007072696f7269747900"/156, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009"], 0x26}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r18 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r19 = syz_open_procfs(0x0, 0x0)
preadv(r19, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r19, 0x4018620d, &(0x7f0000000180))
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x2c710, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'bond0\x00', <r21=>0x0})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r22})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r23=>0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r5, 0x348850bc54e6b6d4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r21}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x52}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x22}, 0x800)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r24 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r24, 0x40086607, &(0x7f0000000040)=0x8040800)

[ 3015.703608][T24993] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
03:57:22 executing program 0:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

03:57:22 executing program 1:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

03:57:23 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000300)=ANY=[], 0x6)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:57:23 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
getegid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000001880))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000001240)='team\x00')
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0)
accept4(r6, &(0x7f0000001280)=@xdp={0x2c, 0x0, <r7=>0x0}, &(0x7f0000001300)=0x80, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r8, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001340)={<r10=>0x0, @dev, @multicast1}, &(0x7f0000001380)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@empty, @in6=@empty}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000001700)=0xe8)
r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000940))
fstat(r11, &(0x7f00000017c0))
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r12, 0x1000008912, &(0x7f0000000400)="01dca5055e0bcfe47b")
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000017c0)={'rose0\x00', <r13=>0x0})
socket$kcm(0x11, 0x2, 0x300)
r14 = socket$kcm(0x11, 0x0, 0x300)
recvmsg(r14, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp={0x2c, 0x0, <r15=>0x0}, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r16 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r16, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x2, 0x300)
r17 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r17, &(0x7f0000001c00)={&(0x7f0000000980)=@xdp, 0x80, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000827bd7000090000", @ANYRES32=r7, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000800", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000380001002b0001006e6f746966795f70656572735f696e74657276616c000000000000000000000008090300030000000800040002000000080001", @ANYRES32=r13, @ANYBLOB="2401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000400040038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00", @ANYRES32=0x0, @ANYBLOB="3c0102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040001000001020000008000200104000000020020340100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000008000300030000000800", @ANYRES32=r15, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400"/89, @ANYRES32, @ANYRES32, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400400000003800010024000100616374697665706f7274000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800020074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400070002060800000005000881050000000500057f0900000007000106400000000300000205000000ff030106060000000001007652c900000000e3810800000040000100240001007072696f7269747900"/156, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009"], 0x26}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r18 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r19 = syz_open_procfs(0x0, 0x0)
preadv(r19, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r19, 0x4018620d, &(0x7f0000000180))
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x2c710, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8}]]}}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'bond0\x00', <r21=>0x0})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r22})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r23=>0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r5, 0x348850bc54e6b6d4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r21}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x52}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x22}, 0x800)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@local, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r24 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r24, 0x40086607, &(0x7f0000000040)=0x8040800)

[ 3016.128991][T24997] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[ 3016.227295][T24997] EXT4-fs warning (device sda1): ext4_group_extend:1771: will only finish group (524288 blocks, 256 new)
03:57:23 executing program 2:
gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
semget(0x3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 3016.227332][T24997] EXT4-fs warning (device sda1): ext4_group_extend:1777: can't read last block, resize aborted
03:57:23 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000300)=ANY=[], 0x6)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:57:23 executing program 1:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

[ 3016.527333][T25016] netlink: 'syz-executor.5': attribute type 8 has an invalid length.
03:57:23 executing program 4:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

03:57:23 executing program 0:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

03:57:23 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0xa}, {}]}]}}, &(0x7f0000000040)=""/189, 0x3e, 0xbd, 0x8}, 0x20)

03:57:24 executing program 4:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

03:57:24 executing program 0:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

03:57:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
sync_file_range(r1, 0x0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
unshare(0x64000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={r2, 0x1c2}, &(0x7f0000000340)=0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00')
sync_file_range(r3, 0x0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)

[ 3017.143033][T25040] BPF:[1] FUNC_PROTO (anon) 
[ 3017.169884][T25044] BPF:[1] FUNC_PROTO (anon) 
[ 3017.201345][T25040] BPF:return=0 args=(
[ 3017.215111][T25044] BPF:return=0 args=(
[ 3017.247243][T25040] BPF:0 (invalid-name-offset)
[ 3017.290528][T25044] BPF:0 (invalid-name-offset)
[ 3017.296418][T25040] BPF:, 0 (invalid-name-offset)
[ 3017.314199][T25044] BPF:, 0 (invalid-name-offset)
03:57:24 executing program 1:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

[ 3017.342354][T25044] BPF:, vararg
[ 3017.361749][T25044] BPF:)
[ 3017.381484][T25044] BPF: 
[ 3017.381672][T25040] BPF:, vararg
[ 3017.406131][T25044] BPF:Invalid arg#1
[ 3017.407009][T25052] IPVS: ftp: loaded support on port[0] = 21
[ 3017.427813][T25044] BPF:
[ 3017.427813][T25044] 
[ 3017.470780][T25040] BPF:)
[ 3017.520840][T25040] BPF: 
[ 3017.545613][T25040] BPF:Invalid arg#1
[ 3017.549434][T25040] BPF:
[ 3017.549434][T25040] 
03:57:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x0)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000)
r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080))
dup3(r0, r1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
pipe(0x0)
r2 = socket(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
dup(r2)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0)
fchdir(r3)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)

03:57:24 executing program 4:
r0 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8)
recvmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/227, 0xe3}], 0x2, &(0x7f0000000100)=""/18, 0x12}, 0x60000000)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r5)
syz_open_dev$tty20(0xc, 0x4, 0x0)

03:57:24 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0xa}, {}]}]}}, &(0x7f0000000040)=""/189, 0x3e, 0xbd, 0x8}, 0x20)

03:57:24 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x70}}, 0x0)

[ 3017.733041][T25065] BPF:[1] FUNC_PROTO (anon) 
[ 3017.764246][T25065] BPF:return=0 args=(
[ 3017.769911][T25054] IPVS: ftp: loaded support on port[0] = 21
[ 3017.788488][T25065] BPF:0 (invalid-name-offset)
03:57:24 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x7c, 0x0, 0x0)

03:57:24 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0xa}, {}]}]}}, &(0x7f0000000040)=""/189, 0x3e, 0xbd, 0x8}, 0x20)

[ 3017.821112][T25065] BPF:, 0 (invalid-name-offset)
[ 3017.857589][T25065] BPF:, vararg
03:57:24 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x70}}, 0x0)

[ 3017.903623][T25065] BPF:)
[ 3017.923514][T15083] tipc: TX() has been purged, node left!
[ 3017.928033][T25065] BPF: 
[ 3017.957160][T25065] BPF:Invalid arg#1
[ 3017.980402][T25065] BPF:
[ 3017.980402][T25065] 
03:57:25 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_int(r0, 0x6, 0x13, &(0x7f00006ed000), &(0x7f00000000c0)=0x2)

[ 3018.212241][T25085] BPF:[1] FUNC_PROTO (anon) 
03:57:25 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x70}}, 0x0)

03:57:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x0)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000)
r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080))
dup3(r0, r1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
pipe(0x0)
r2 = socket(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
dup(r2)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0)
fchdir(r3)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)

[ 3018.272526][T25085] BPF:return=0 args=(
[ 3018.285996][T25085] BPF:0 (invalid-name-offset)
[ 3018.309399][T25085] BPF:, 0 (invalid-name-offset)
[ 3018.317409][T25085] BPF:, vararg
[ 3018.317414][T25085] BPF:)
[ 3018.317420][T25085] BPF: 
[ 3018.317427][T25085] BPF:Invalid arg#1
[ 3018.317432][T25085] BPF:
[ 3018.317432][T25085] 
03:57:26 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20}, 0x0)

03:57:26 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x12, 0x0, 0x0, 0x100000009}, 0x36e)

03:57:26 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0xa}, {}]}]}}, &(0x7f0000000040)=""/189, 0x3e, 0xbd, 0x8}, 0x20)

03:57:26 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x70}}, 0x0)

03:57:26 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x5, 0x0, 0x6, 0x0, 0x1}], {0x95, 0x2}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:57:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x0)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000)
r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080))
dup3(r0, r1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
pipe(0x0)
r2 = socket(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
dup(r2)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0)
fchdir(r3)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)

[ 3019.533362][T25111] BPF:[1] FUNC_PROTO (anon) 
[ 3019.560538][T25111] BPF:return=0 args=(
03:57:26 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x12, 0x0, 0x0, 0x100000009}, 0x36e)

03:57:26 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
eventfd(0x9)
fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x1)
r2 = socket(0x11, 0x800000003, 0x8)
bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10)
setsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000500)="8751f74daaefbb665de35c285157788de19083161b0c6cad6f1266cc61a36c8c4e4ce3ca452d14c2447f9e543573274624517bd328c4ae968f768c326eab7ec2f41af1ab492014d504b33af8cae57d5f7d990376d36a21d37d66395e63a03bed315a6d500d43f8bb26fd56afdca855004bd4bfeffa9519e0bc98239a7b93d65549ad08ee15cb191e17f9f7dbe87aa59241544081e4bbaf54cfae5ef695a54f496e98ab5f4e071d448a6adf653229282f72294f1c97fc77ff33d1013b3f06e05c32516c766e5e503699d15f127337b79a0ba6ec46445c0cf2664553accd2767656c19aa4d326cfc0ae37cafd21ebdf7820e3a", 0xf2)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000180)={0x0, 0xe, 0x9, "5fbbb5a7a1cacf27d488f97f8aa3e16f8759d323b24b5cef166813fb27064f46ec9464ef52b4dd48e2c2db5eedfb31312ca577bdfb67765c951cdc39", 0x22, "c03822d79ac18cd5a01e007556c1f74b29bc27cfd10718e4aa8044bc187096ee349065c45d3a2a3e2846d239e56aa6f8cf4552a67703437b26b87cfa", 0xaec7c72228e19454})
recvfrom$netrom(r3, &(0x7f0000001a00)=""/4096, 0x1000, 0x0, &(0x7f0000000480)={{0x3, @default, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48)
r4 = creat(&(0x7f0000000380)='./file0\x00', 0x160)
ftruncate(r4, 0x208200)
ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000600)={0x0, 0x3b, 0x7ff, [], &(0x7f0000000440)})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r5, 0x600004)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040), 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @timestamp, @timestamp, @window={0x3, 0x6, 0x7fc}], 0x4)
ftruncate(r6, 0x3ff)
r7 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x200, 0x0, 0x0, 0x1, 0x42a, 0xfffffff7, 0x6, 0x4, <r8=>0x0}, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000380)={r8, @in={{0x2, 0x4e23, @multicast1}}}, 0x84)

03:57:26 executing program 3:
r0 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
rmdir(&(0x7f0000000000)='./file0\x00')

[ 3019.584539][T25111] BPF:0 (invalid-name-offset)
[ 3019.596673][T25111] BPF:, 0 (invalid-name-offset)
[ 3019.608565][T25111] BPF:, vararg
[ 3019.613145][T25111] BPF:)
[ 3019.617400][T25111] BPF: 
[ 3019.620496][T25111] BPF:Invalid arg#1
[ 3019.626287][T25111] BPF:
[ 3019.626287][T25111] 
03:57:26 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xd5, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', 0x0, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x0, 0xffff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x3f, 0x9, "778cc818"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0xfffffffe, 0x1, @userptr=0x10000, 0x401}, 0x6353})
r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1c83, 0x400000)
mq_timedsend(r5, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0))
r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
fcntl$getown(r6, 0x9)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x7ff, "ee9999d5a2ecb2bad44a7852d4117b95f9493c8103d4186df94515a2d81e9785", 0x0, 0x6, 0x3, 0x45a6960f0f68f6f3, 0x4000812, 0x4})

03:57:26 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20}, 0x0)

03:57:26 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x12, 0x0, 0x0, 0x100000009}, 0x36e)

03:57:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x0)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000)
r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080))
dup3(r0, r1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
pipe(0x0)
r2 = socket(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
dup(r2)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0)
fchdir(r3)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)

03:57:26 executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f0000000b80)={0x0}}, 0x0)

03:57:27 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20}, 0x0)

03:57:27 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x12, 0x0, 0x0, 0x100000009}, 0x36e)

03:57:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x1d, 0xf31, 0x0, 0x0, {0x20}, [@generic='h']}, 0x18}}, 0x0)

03:57:27 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xd5, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', 0x0, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x0, 0xffff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x3f, 0x9, "778cc818"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0xfffffffe, 0x1, @userptr=0x10000, 0x401}, 0x6353})
r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1c83, 0x400000)
mq_timedsend(r5, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0))
r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
fcntl$getown(r6, 0x9)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x7ff, "ee9999d5a2ecb2bad44a7852d4117b95f9493c8103d4186df94515a2d81e9785", 0x0, 0x6, 0x3, 0x45a6960f0f68f6f3, 0x4000812, 0x4})

03:57:27 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xd5, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', 0x0, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x0, 0xffff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x3f, 0x9, "778cc818"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0xfffffffe, 0x1, @userptr=0x10000, 0x401}, 0x6353})
r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1c83, 0x400000)
mq_timedsend(r5, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0))
r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
fcntl$getown(r6, 0x9)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x7ff, "ee9999d5a2ecb2bad44a7852d4117b95f9493c8103d4186df94515a2d81e9785", 0x0, 0x6, 0x3, 0x45a6960f0f68f6f3, 0x4000812, 0x4})

03:57:27 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
eventfd(0x9)
fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x1)
r2 = socket(0x11, 0x800000003, 0x8)
bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10)
setsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000500)="8751f74daaefbb665de35c285157788de19083161b0c6cad6f1266cc61a36c8c4e4ce3ca452d14c2447f9e543573274624517bd328c4ae968f768c326eab7ec2f41af1ab492014d504b33af8cae57d5f7d990376d36a21d37d66395e63a03bed315a6d500d43f8bb26fd56afdca855004bd4bfeffa9519e0bc98239a7b93d65549ad08ee15cb191e17f9f7dbe87aa59241544081e4bbaf54cfae5ef695a54f496e98ab5f4e071d448a6adf653229282f72294f1c97fc77ff33d1013b3f06e05c32516c766e5e503699d15f127337b79a0ba6ec46445c0cf2664553accd2767656c19aa4d326cfc0ae37cafd21ebdf7820e3a", 0xf2)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000180)={0x0, 0xe, 0x9, "5fbbb5a7a1cacf27d488f97f8aa3e16f8759d323b24b5cef166813fb27064f46ec9464ef52b4dd48e2c2db5eedfb31312ca577bdfb67765c951cdc39", 0x22, "c03822d79ac18cd5a01e007556c1f74b29bc27cfd10718e4aa8044bc187096ee349065c45d3a2a3e2846d239e56aa6f8cf4552a67703437b26b87cfa", 0xaec7c72228e19454})
recvfrom$netrom(r3, &(0x7f0000001a00)=""/4096, 0x1000, 0x0, &(0x7f0000000480)={{0x3, @default, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48)
r4 = creat(&(0x7f0000000380)='./file0\x00', 0x160)
ftruncate(r4, 0x208200)
ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000600)={0x0, 0x3b, 0x7ff, [], &(0x7f0000000440)})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r5, 0x600004)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040), 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @timestamp, @timestamp, @window={0x3, 0x6, 0x7fc}], 0x4)
ftruncate(r6, 0x3ff)
r7 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x200, 0x0, 0x0, 0x1, 0x42a, 0xfffffff7, 0x6, 0x4, <r8=>0x0}, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000380)={r8, @in={{0x2, 0x4e23, @multicast1}}}, 0x84)

03:57:27 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20}, 0x0)

[ 3020.498451][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:57:27 executing program 2:
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000001580)='./file0\x00', 0x0, 0x3, &(0x7f0000001640)=[{&(0x7f0000000040)='XFSB', 0x4}, {0x0, 0x0, 0x8f18}, {&(0x7f0000001400)="3d8d243177a7a5725926e983059166e41e372669024409a9691ee5b167a1f9ceb33ddc21696c2955dba2217eb8d51c88c82ebe64238dcfa00c6c860d70022077c63895fec07a6eff39a92ffbe11bf813725d293278b0f18474c5c2830a58a0b4196998", 0x63, 0x4}], 0x0, 0x0)

[ 3020.576476][T25173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3020.701690][    C1] net_ratelimit: 24 callbacks suppressed
[ 3020.701700][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3020.713159][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:57:27 executing program 3:
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)

[ 3020.836987][T21647] XFS (loop2): bad version
[ 3020.841557][T25185] XFS (loop2): SB validate failed with error -22.
03:57:27 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000d11000), &(0x7f0000000080)=0x4)

03:57:27 executing program 3:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x110, 0x6, 0x0, &(0x7f0000000200)=0xffffffffffffff1e)

03:57:27 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xd5, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', 0x0, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x0, 0xffff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x3f, 0x9, "778cc818"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0xfffffffe, 0x1, @userptr=0x10000, 0x401}, 0x6353})
r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1c83, 0x400000)
mq_timedsend(r5, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0))
r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
fcntl$getown(r6, 0x9)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x7ff, "ee9999d5a2ecb2bad44a7852d4117b95f9493c8103d4186df94515a2d81e9785", 0x0, 0x6, 0x3, 0x45a6960f0f68f6f3, 0x4000812, 0x4})

03:57:28 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xd5, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', 0x0, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x0, 0xffff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x3f, 0x9, "778cc818"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0xfffffffe, 0x1, @userptr=0x10000, 0x401}, 0x6353})
r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1c83, 0x400000)
mq_timedsend(r5, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0))
r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
fcntl$getown(r6, 0x9)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x7ff, "ee9999d5a2ecb2bad44a7852d4117b95f9493c8103d4186df94515a2d81e9785", 0x0, 0x6, 0x3, 0x45a6960f0f68f6f3, 0x4000812, 0x4})

03:57:28 executing program 2:
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000001580)='./file0\x00', 0x0, 0x3, &(0x7f0000001640)=[{&(0x7f0000000040)='XFSB', 0x4}, {0x0, 0x0, 0x8f18}, {&(0x7f0000001400)="3d8d243177a7a5725926e983059166e41e372669024409a9691ee5b167a1f9ceb33ddc21696c2955dba2217eb8d51c88c82ebe64238dcfa00c6c860d70022077c63895fec07a6eff39a92ffbe11bf813725d293278b0f18474c5c2830a58a0b4196998", 0x63, 0x4}], 0x0, 0x0)

03:57:28 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000})
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000})

03:57:28 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYPTR], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080), 0x4)

03:57:28 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xd5, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', 0x0, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x0, 0xffff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x3f, 0x9, "778cc818"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0xfffffffe, 0x1, @userptr=0x10000, 0x401}, 0x6353})
r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1c83, 0x400000)
mq_timedsend(r5, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0))
r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
fcntl$getown(r6, 0x9)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x7ff, "ee9999d5a2ecb2bad44a7852d4117b95f9493c8103d4186df94515a2d81e9785", 0x0, 0x6, 0x3, 0x45a6960f0f68f6f3, 0x4000812, 0x4})

03:57:28 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
eventfd(0x9)
fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x1)
r2 = socket(0x11, 0x800000003, 0x8)
bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10)
setsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000500)="8751f74daaefbb665de35c285157788de19083161b0c6cad6f1266cc61a36c8c4e4ce3ca452d14c2447f9e543573274624517bd328c4ae968f768c326eab7ec2f41af1ab492014d504b33af8cae57d5f7d990376d36a21d37d66395e63a03bed315a6d500d43f8bb26fd56afdca855004bd4bfeffa9519e0bc98239a7b93d65549ad08ee15cb191e17f9f7dbe87aa59241544081e4bbaf54cfae5ef695a54f496e98ab5f4e071d448a6adf653229282f72294f1c97fc77ff33d1013b3f06e05c32516c766e5e503699d15f127337b79a0ba6ec46445c0cf2664553accd2767656c19aa4d326cfc0ae37cafd21ebdf7820e3a", 0xf2)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000180)={0x0, 0xe, 0x9, "5fbbb5a7a1cacf27d488f97f8aa3e16f8759d323b24b5cef166813fb27064f46ec9464ef52b4dd48e2c2db5eedfb31312ca577bdfb67765c951cdc39", 0x22, "c03822d79ac18cd5a01e007556c1f74b29bc27cfd10718e4aa8044bc187096ee349065c45d3a2a3e2846d239e56aa6f8cf4552a67703437b26b87cfa", 0xaec7c72228e19454})
recvfrom$netrom(r3, &(0x7f0000001a00)=""/4096, 0x1000, 0x0, &(0x7f0000000480)={{0x3, @default, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48)
r4 = creat(&(0x7f0000000380)='./file0\x00', 0x160)
ftruncate(r4, 0x208200)
ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000600)={0x0, 0x3b, 0x7ff, [], &(0x7f0000000440)})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r5, 0x600004)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040), 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @timestamp, @timestamp, @window={0x3, 0x6, 0x7fc}], 0x4)
ftruncate(r6, 0x3ff)
r7 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x200, 0x0, 0x0, 0x1, 0x42a, 0xfffffff7, 0x6, 0x4, <r8=>0x0}, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000380)={r8, @in={{0x2, 0x4e23, @multicast1}}}, 0x84)

[ 3021.728839][T25225] XFS (loop2): bad version
[ 3021.735078][T25225] XFS (loop2): SB validate failed with error -22.
03:57:28 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000})
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000})

03:57:28 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
r2 = dup2(r0, r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000080)={@dev, 0x0, r5})

03:57:28 executing program 2:
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000001580)='./file0\x00', 0x0, 0x3, &(0x7f0000001640)=[{&(0x7f0000000040)='XFSB', 0x4}, {0x0, 0x0, 0x8f18}, {&(0x7f0000001400)="3d8d243177a7a5725926e983059166e41e372669024409a9691ee5b167a1f9ceb33ddc21696c2955dba2217eb8d51c88c82ebe64238dcfa00c6c860d70022077c63895fec07a6eff39a92ffbe11bf813725d293278b0f18474c5c2830a58a0b4196998", 0x63, 0x4}], 0x0, 0x0)

03:57:28 executing program 1:
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
pipe2$9p(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4})
r2 = dup2(r1, r1)
mount$9p_fd(0x0, &(0x7f0000000100)='./control\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

03:57:29 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xd5, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', 0x0, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x0, 0xffff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x3f, 0x9, "778cc818"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0xfffffffe, 0x1, @userptr=0x10000, 0x401}, 0x6353})
r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1c83, 0x400000)
mq_timedsend(r5, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0))
r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
fcntl$getown(r6, 0x9)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x7ff, "ee9999d5a2ecb2bad44a7852d4117b95f9493c8103d4186df94515a2d81e9785", 0x0, 0x6, 0x3, 0x45a6960f0f68f6f3, 0x4000812, 0x4})

03:57:29 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
r2 = dup2(r0, r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000080)={@dev, 0x0, r5})

[ 3022.212082][T21647] XFS (loop2): bad version
[ 3022.219204][T25257] XFS (loop2): SB validate failed with error -22.
03:57:29 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
r2 = dup2(r0, r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000080)={@dev, 0x0, r5})

03:57:29 executing program 2:
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000001580)='./file0\x00', 0x0, 0x3, &(0x7f0000001640)=[{&(0x7f0000000040)='XFSB', 0x4}, {0x0, 0x0, 0x8f18}, {&(0x7f0000001400)="3d8d243177a7a5725926e983059166e41e372669024409a9691ee5b167a1f9ceb33ddc21696c2955dba2217eb8d51c88c82ebe64238dcfa00c6c860d70022077c63895fec07a6eff39a92ffbe11bf813725d293278b0f18474c5c2830a58a0b4196998", 0x63, 0x4}], 0x0, 0x0)

03:57:29 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x8, &(0x7f0000000100)=<r1=>0x0)
close(r0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000001, 0x1)
recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffffffffffff79, 0x0, 0x3b8}}], 0xfffffffffffffe86, 0x0, 0x0)
dup(r2)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}])

03:57:29 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000})
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000})

03:57:29 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
r2 = dup2(r0, r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000080)={@dev, 0x0, r5})

03:57:29 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
eventfd(0x9)
fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x1)
r2 = socket(0x11, 0x800000003, 0x8)
bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10)
setsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000500)="8751f74daaefbb665de35c285157788de19083161b0c6cad6f1266cc61a36c8c4e4ce3ca452d14c2447f9e543573274624517bd328c4ae968f768c326eab7ec2f41af1ab492014d504b33af8cae57d5f7d990376d36a21d37d66395e63a03bed315a6d500d43f8bb26fd56afdca855004bd4bfeffa9519e0bc98239a7b93d65549ad08ee15cb191e17f9f7dbe87aa59241544081e4bbaf54cfae5ef695a54f496e98ab5f4e071d448a6adf653229282f72294f1c97fc77ff33d1013b3f06e05c32516c766e5e503699d15f127337b79a0ba6ec46445c0cf2664553accd2767656c19aa4d326cfc0ae37cafd21ebdf7820e3a", 0xf2)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000180)={0x0, 0xe, 0x9, "5fbbb5a7a1cacf27d488f97f8aa3e16f8759d323b24b5cef166813fb27064f46ec9464ef52b4dd48e2c2db5eedfb31312ca577bdfb67765c951cdc39", 0x22, "c03822d79ac18cd5a01e007556c1f74b29bc27cfd10718e4aa8044bc187096ee349065c45d3a2a3e2846d239e56aa6f8cf4552a67703437b26b87cfa", 0xaec7c72228e19454})
recvfrom$netrom(r3, &(0x7f0000001a00)=""/4096, 0x1000, 0x0, &(0x7f0000000480)={{0x3, @default, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48)
r4 = creat(&(0x7f0000000380)='./file0\x00', 0x160)
ftruncate(r4, 0x208200)
ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000600)={0x0, 0x3b, 0x7ff, [], &(0x7f0000000440)})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r5, 0x600004)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040), 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @timestamp, @timestamp, @window={0x3, 0x6, 0x7fc}], 0x4)
ftruncate(r6, 0x3ff)
r7 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x200, 0x0, 0x0, 0x1, 0x42a, 0xfffffff7, 0x6, 0x4, <r8=>0x0}, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000380)={r8, @in={{0x2, 0x4e23, @multicast1}}}, 0x84)

03:57:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

03:57:29 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000))

[ 3022.882269][T21647] XFS (loop2): bad version
[ 3022.886851][T25295] XFS (loop2): SB validate failed with error -22.
03:57:29 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000240), 0x10)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={<r2=>0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0xa11, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "8a3bc256875797092cb456ebfadeca462fbce63d1f278d8a8d30d1cad9eaba1231435ec07a677e30909adc4d6cb906164664cdaf4ce101c5a6d8f4eb2a5ddf4e"}}, 0x80}}, 0x0)

[ 3023.039743][T25307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
03:57:30 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000007d80))

03:57:30 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000})
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000})

03:57:30 executing program 0:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000000580), 0xefee)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1b}}, 0x50)

03:57:30 executing program 5:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = socket$inet(0x2, 0x100000000003, 0x400000000001)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0703000000000000", 0xa)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

03:57:30 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r3, 0x0, 0x3, 0x0, &(0x7f0000000080)=0x4)

03:57:30 executing program 0:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000000580), 0xefee)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1b}}, 0x50)

03:57:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
read(r3, &(0x7f0000000180)=""/105, 0x69)
r4 = getpid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000))
dup3(r2, r3, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r4, 0x1000000000013)

03:57:30 executing program 5:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = socket$inet(0x2, 0x100000000003, 0x400000000001)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0703000000000000", 0xa)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

03:57:30 executing program 2:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = socket$inet(0x2, 0x100000000003, 0x400000000001)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0703000000000000", 0xa)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

03:57:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

03:57:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

03:57:30 executing program 0:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000000580), 0xefee)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1b}}, 0x50)

03:57:30 executing program 5:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = socket$inet(0x2, 0x100000000003, 0x400000000001)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0703000000000000", 0xa)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

03:57:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

[ 3024.049231][T25360] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
03:57:31 executing program 2:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = socket$inet(0x2, 0x100000000003, 0x400000000001)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0703000000000000", 0xa)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

03:57:31 executing program 5:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = socket$inet(0x2, 0x100000000003, 0x400000000001)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0703000000000000", 0xa)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

03:57:31 executing program 0:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000000580), 0xefee)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1b}}, 0x50)

03:57:31 executing program 2:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
r1 = socket$inet(0x2, 0x100000000003, 0x400000000001)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0703000000000000", 0xa)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

03:57:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x7, 0x2, &(0x7f0000000180)}, &(0x7f0000000000)="dd550280e696", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000})

03:57:31 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000003c0)=0x54)

03:57:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

03:57:31 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0x10)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, 0x0)
setfsuid(r1)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000300))
lstat(0x0, &(0x7f0000000380))
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

03:57:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

03:57:31 executing program 2:
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x7ff}], 0x0, 0x0)

03:57:31 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000800000000000000000004000000b8030000a00100000000000000000000d0000000e8020000e8020000e8020000e8020000e8020000e802000004000000", @ANYPTR, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001801480100000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000000000008001018532010108000400070001000600e1ff0100090000027c00010002000300a20007002800686c000000000000000000000000000000000000000000000000000000000303000000000000300053455400000000000000000000000000000000000000000000000000000202001f7f000000d607000000060200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fe"], 0x3)

03:57:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

[ 3025.057261][T25403] ip6t_REJECT: ECHOREPLY is not supported
[ 3025.166618][T25410] F2FS-fs (loop2): Unable to read 1th superblock
03:57:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

[ 3025.232820][T25410] F2FS-fs (loop2): Unable to read 2th superblock
03:57:32 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000001a80)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

[ 3025.371596][T25410] F2FS-fs (loop2): Unable to read 1th superblock
[ 3025.402703][T25410] F2FS-fs (loop2): Unable to read 2th superblock
[ 3025.512798][T25420] overlayfs: filesystem on './file0' not supported as upperdir
03:57:32 executing program 2:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:32 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/189, 0x0, 0xbd, 0x8}, 0x20)

03:57:32 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0x10)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, 0x0)
setfsuid(r1)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000300))
lstat(0x0, &(0x7f0000000380))
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[ 3025.802570][T25432] BPF:hdr_len not found
[ 3025.836039][T25437] BPF:hdr_len not found
03:57:32 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)

03:57:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

03:57:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
setfsgid(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
time(0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36)

03:57:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000880400fb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

[ 3025.994191][T25441] overlayfs: conflicting lowerdir path
[ 3026.067283][T25447] input: syz0 as /devices/virtual/input/input135
03:57:33 executing program 2:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:33 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0x10)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, 0x0)
setfsuid(r1)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000300))
lstat(0x0, &(0x7f0000000380))
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[ 3026.158165][T25452] netlink: 1030 bytes leftover after parsing attributes in process `syz-executor.0'.
03:57:33 executing program 3:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:33 executing program 0:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:33 executing program 2:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:33 executing program 0:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:33 executing program 3:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:33 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0x10)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, 0x0)
setfsuid(r1)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000300))
lstat(0x0, &(0x7f0000000380))
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

03:57:33 executing program 2:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:33 executing program 1:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x6)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37)

03:57:34 executing program 3:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:34 executing program 0:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3a073ab87e54d66704d26547290000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffff8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r3, @ANYBLOB="08000200ac1e0100"], 0x20}}, 0x0)

03:57:34 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
socket(0x0, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x2, 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1044142, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
sendfile(r0, r1, 0x0, 0x800000000018)
dup2(0xffffffffffffffff, r1)

03:57:34 executing program 1:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

03:57:34 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90b, 0x41)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0xfffffffb, &(0x7f00000000c0)})

03:57:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3a073ab87e54d66704d26547290000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffff8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r3, @ANYBLOB="08000200ac1e0100"], 0x20}}, 0x0)

[ 3027.652676][   T27] audit: type=1800 audit(2000001454.580:1205): pid=25522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16593 res=0
03:57:34 executing program 0:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)={[{@huge_within_size={'huge=within_size', 0x2c, '/dev/snapshot\x00'}}]})

03:57:34 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x4000000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180))
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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")
openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8, 0x20})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000440)='./file0\x00', 0x80)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x0, 0x20})
ppoll(&(0x7f0000000000)=[{}, {}, {}, {0xffffffffffffffff, 0x9318}], 0x4, 0x0, 0x0, 0x0)

[ 3027.758553][   T27] audit: type=1800 audit(2000001454.650:1206): pid=25522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16593 res=0
03:57:34 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
socket(0x0, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x2, 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1044142, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
sendfile(r0, r1, 0x0, 0x800000000018)
dup2(0xffffffffffffffff, r1)

03:57:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3a073ab87e54d66704d26547290000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffff8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r3, @ANYBLOB="08000200ac1e0100"], 0x20}}, 0x0)

[ 3027.883766][T25533] tmpfs: Unknown parameter '/dev/snapshot'
03:57:35 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:35 executing program 1:
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x403, 0x603)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20ab00, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x80000)
setns(r1, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000300)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1c, 0x9, 0x0, 0x2, 0x65, 0x34559c00cb09a644}})
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/140, 0x8c)
r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a", 0x29}], 0x2)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0)
sendfile(r3, r4, &(0x7f0000000140), 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc)

[ 3028.056189][T25533] tmpfs: Unknown parameter '/dev/snapshot'
[ 3028.083734][   T27] audit: type=1800 audit(2000001455.010:1207): pid=25541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16610 res=0
03:57:35 executing program 0:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a100900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a100900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)

03:57:35 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3a073ab87e54d66704d26547290000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffff8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r3, @ANYBLOB="08000200ac1e0100"], 0x20}}, 0x0)

[ 3028.399266][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3028.485138][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:57:35 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
socket(0x0, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x2, 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1044142, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
sendfile(r0, r1, 0x0, 0x800000000018)
dup2(0xffffffffffffffff, r1)

03:57:35 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:35 executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:35 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

[ 3028.821710][   T27] audit: type=1800 audit(2000001455.740:1208): pid=25580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16594 res=0
[ 3028.931988][   T27] audit: type=1800 audit(2000001455.740:1209): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16612 res=0
03:57:35 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:35 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:35 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:35 executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:36 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

[ 3029.071660][T24021] tipc: TX() has been purged, node left!
[ 3029.211684][T24021] tipc: TX() has been purged, node left!
03:57:36 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
socket(0x0, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x2, 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1044142, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
sendfile(r0, r1, 0x0, 0x800000000018)
dup2(0xffffffffffffffff, r1)

03:57:36 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:36 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:36 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

[ 3029.573278][   T27] audit: type=1800 audit(2000001456.500:1210): pid=25620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16610 res=0
03:57:36 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:36 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)={0x13, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601}, [@nested={0x18}]}, 0x2c}}, 0x0)

03:57:36 executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x20})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000})
write$cgroup_int(r0, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80020)

03:57:37 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:37 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:37 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:37 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0xac1, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400), {0x80000000, 0xffff, 0x52424752}})

03:57:37 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

03:57:37 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x180000)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffff)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0x0, 0x4, 0xf})
r1 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x20000860)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20000844)
r3 = dup2(r1, r2)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10)
inotify_init()
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844)
inotify_init()
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x20000844)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x400)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x60000094)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20000844)
ptrace(0x4207, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180))
rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00')
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

03:57:37 executing program 3:
socket(0x3, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000600), 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0)

03:57:37 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0xac1, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400), {0x80000000, 0xffff, 0x52424752}})

03:57:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@decompose='decompose'}, {@creator={'creator', 0x3d, '$\a\x00'}}]})

03:57:38 executing program 2:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x104, 0x2000000000011, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x104, 0x2000000000011, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x104, 0x2000000000011, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
pipe(&(0x7f0000000040))
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000001700)

03:57:38 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x20000401}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0)

[ 3031.289549][T25681] hfsplus: creator requires a 4 character value
03:57:38 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0xac1, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400), {0x80000000, 0xffff, 0x52424752}})

[ 3031.347986][T25681] hfsplus: unable to parse mount options
[ 3031.411530][T25671] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
03:57:38 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0xac1, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400), {0x80000000, 0xffff, 0x52424752}})

03:57:38 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

03:57:38 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5)
sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000000200)=@in={0x2, 0x4e23, @rand_addr=0x5f}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x113}], 0x10}}], 0x1, 0x0)

03:57:38 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[ 3031.751904][T25694] tipc: Started in network mode
[ 3031.756892][T25694] tipc: Own node identity fe8000000000000000000000000000aa, cluster identity 4711
[ 3031.779999][T25694] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
03:57:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x3, 0xc9)

03:57:38 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

03:57:38 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x84cbf1ec77ffa333, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)

[ 3031.991471][T25715] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
03:57:39 executing program 1:
gettid()
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

03:57:39 executing program 2:
getdents64(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
lstat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x8800000)

03:57:39 executing program 4:
r0 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000180007041dfffd947e610500022803001f000000040008000800150002011d7e280000001100ffffba16a0aa03800088b283061c090000000000001200470ec20df58ca8dca6aa3f", 0x4c}], 0x1}, 0x0)

03:57:39 executing program 5:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

03:57:39 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x84cbf1ec77ffa333, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)

[ 3032.376190][   T27] audit: type=1800 audit(2000001459.300:1211): pid=25741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16622 res=0
03:57:39 executing program 1:
gettid()
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

03:57:39 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x84cbf1ec77ffa333, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)

[ 3032.566989][   T27] audit: type=1800 audit(2000001459.490:1212): pid=25749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16622 res=0
[ 3032.670267][T25748] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[ 3032.711733][T25748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
03:57:39 executing program 2:
getdents64(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
lstat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x8800000)

03:57:39 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x84cbf1ec77ffa333, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)

03:57:39 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

03:57:39 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_read_part_table(0x0, 0x22e, &(0x7f0000003800)=[{&(0x7f0000001540)="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", 0x600, 0x800}])

03:57:39 executing program 5:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

03:57:39 executing program 1:
gettid()
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[ 3032.920518][   T27] audit: type=1800 audit(2000001459.840:1213): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16739 res=0
03:57:40 executing program 3:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

03:57:40 executing program 2:
getdents64(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
lstat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x8800000)

[ 3033.284387][T25779]  loop4: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 3033.303881][T25779] loop4: partition table partially beyond EOD, truncated
[ 3033.322527][T25779] loop4: p1 size 3238031214 extends beyond EOD, truncated
[ 3033.379592][T25779] loop4: p2 start 257770150 is beyond EOD, truncated
03:57:40 executing program 1:
gettid()
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[ 3033.458639][T24021] device bridge_slave_1 left promiscuous mode
[ 3033.519861][T24021] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3033.578318][   T27] audit: type=1800 audit(2000001460.500:1214): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17313 res=0
03:57:40 executing program 3:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

[ 3033.625923][T24021] device bridge_slave_0 left promiscuous mode
[ 3033.654193][T24021] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3033.725220][T24021] device bridge_slave_1 left promiscuous mode
[ 3033.740654][T24021] bridge0: port 2(bridge_slave_1) entered disabled state
03:57:40 executing program 5:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

[ 3033.815803][T24021] device bridge_slave_0 left promiscuous mode
[ 3033.824398][T24021] bridge0: port 1(bridge_slave_0) entered disabled state
03:57:40 executing program 2:
getdents64(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
lstat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x8800000)

[ 3033.938173][T24021] device veth1_vlan left promiscuous mode
[ 3034.000754][T24021] device veth0_vlan left promiscuous mode
03:57:41 executing program 1:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

[ 3034.046665][T24021] device veth1_vlan left promiscuous mode
[ 3034.078984][T24021] device veth0_vlan left promiscuous mode
03:57:41 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[ 3034.166653][   T27] audit: type=1800 audit(2000001461.090:1215): pid=25809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16594 res=0
03:57:41 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x4c}}, 0x0)

[ 3037.342127][T24021] device hsr_slave_0 left promiscuous mode
[ 3037.381751][T24021] device hsr_slave_1 left promiscuous mode
[ 3037.449325][T24021] team0 (unregistering): Port device team_slave_1 removed
[ 3037.460154][T24021] team0 (unregistering): Port device team_slave_0 removed
[ 3037.471194][T24021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3037.506168][T24021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3037.566415][T24021] bond0 (unregistering): Released all slaves
[ 3037.801990][T24021] device hsr_slave_0 left promiscuous mode
[ 3037.841722][T24021] device hsr_slave_1 left promiscuous mode
[ 3037.888464][T24021] team0 (unregistering): Port device team_slave_1 removed
[ 3037.898840][T24021] team0 (unregistering): Port device team_slave_0 removed
[ 3037.909138][T24021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3037.945115][T24021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3038.026051][T24021] bond0 (unregistering): Released all slaves
03:57:45 executing program 1:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

03:57:45 executing program 3:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

03:57:45 executing program 5:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

03:57:45 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000002600)=0x4)

03:57:45 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_read_part_table(0x0, 0x22e, &(0x7f0000003800)=[{&(0x7f0000001540)="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", 0x600, 0x800}])

[ 3038.155428][T25818] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
03:57:45 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
creat(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

03:57:45 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000420007feffffffffffffff00000000006f42fa0d5a108be9a86c255e78a4df744341dee7ecc322e765df7df565e25216ddb6", @ANYRES32=0x0, @ANYBLOB='\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

[ 3038.502417][T25837]  loop4: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 3038.509729][T25837] loop4: partition table partially beyond EOD, truncated
[ 3038.526601][T25837] loop4: p1 size 3238031214 extends beyond EOD, truncated
03:57:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
r1 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)={0x1000, 0x6, 0x4, 0x0, 0x0, {0x7, 0x2}, {}, 0xa})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='\'system(\x00'}, 0x30)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100))
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00')
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0)
sendfile(r4, r3, 0x0, 0x20000000000000da)

[ 3038.565152][T25837] loop4: p2 start 257770150 is beyond EOD, truncated
03:57:45 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone3(&(0x7f0000000300)={0x80a200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)

03:57:45 executing program 1:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616ed57975a16e676c65000000000000000000d0e1083f22afd3e50000000000000000000000000000000000520000cae9299cf1309ec1dc2133221ae54add79fb363d84ad2a7ce6d5b0ddabbea3d51f98c4e663de373d9278a46672400c11d9deaf28a47904a5a7e0341c3b9daff69e5f8ede1ddd144b093db0e7fc5346e331dc506c6f3e50b9a9ea623e9570bb3be6a965ed96d0ce64ae1353916f780c53505c2a1bfac530492b8e488dd66f8a3cee99d426ca070eb82c70b18bec75cb6bea165e20d1225730cfd057324653b9edc837d8c1c84a795a9a"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x401, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x200, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x54bc4cce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x15, 0x3d8})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="030a8a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe9f, 0x40004052, 0x0, 0xffffffffffffffa9)

03:57:45 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_read_part_table(0x0, 0x22e, &(0x7f0000003800)=[{&(0x7f0000001540)="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", 0x600, 0x800}])

03:57:46 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fchdir(0xffffffffffffffff)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)

03:57:46 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/nf_conntrack_expect\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
dup2(r1, r2)

03:57:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
r1 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)={0x1000, 0x6, 0x4, 0x0, 0x0, {0x7, 0x2}, {}, 0xa})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='\'system(\x00'}, 0x30)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100))
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00')
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0)
sendfile(r4, r3, 0x0, 0x20000000000000da)

[ 3039.282494][T25869]  loop4: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
03:57:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0)

[ 3039.353814][T25869] loop4: partition table partially beyond EOD, truncated
[ 3039.361031][T25869] loop4: p1 size 3238031214 extends beyond EOD, truncated
[ 3039.380527][T25869] loop4: p2 start 257770150 is beyond EOD, truncated
[ 3039.464895][   T27] audit: type=1804 audit(2000001466.390:1216): pid=25879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/82/file0/bus" dev="ramfs" ino=375332 res=1
[ 3039.606209][   T27] audit: type=1804 audit(2000001466.430:1217): pid=25876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/82/file0/bus" dev="ramfs" ino=375332 res=1
03:57:46 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x95, 0x0, 0x0, 0x0, 0x0, 0x80009a79}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000001580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x2000c040)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
write$dsp(r4, &(0x7f00000003c0), 0x0)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x0, 0x0, 0x8}, 0x6)
write$dsp(0xffffffffffffffff, &(0x7f00000003c0)="a2", 0x1)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f00000005c0)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r5, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80)

03:57:46 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_read_part_table(0x0, 0x22e, &(0x7f0000003800)=[{&(0x7f0000001540)="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", 0x600, 0x800}])

03:57:46 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fchdir(0xffffffffffffffff)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)

[ 3039.758894][   T27] audit: type=1804 audit(2000001466.450:1218): pid=25882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/82/file0/bus" dev="ramfs" ino=375332 res=1
03:57:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
r1 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)={0x1000, 0x6, 0x4, 0x0, 0x0, {0x7, 0x2}, {}, 0xa})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='\'system(\x00'}, 0x30)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100))
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00')
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0)
sendfile(r4, r3, 0x0, 0x20000000000000da)

[ 3039.951318][   T27] audit: type=1804 audit(2000001466.450:1219): pid=25876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/82/file0/bus" dev="ramfs" ino=375332 res=1
[ 3040.101421][T25901]  loop4: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 3040.154847][   T27] audit: type=1804 audit(2000001467.080:1220): pid=25910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/83/file0/bus" dev="ramfs" ino=375388 res=1
[ 3040.164960][T25901] loop4: partition table partially beyond EOD, truncated
[ 3040.214298][   T27] audit: type=1804 audit(2000001467.130:1221): pid=25910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/83/file0/bus" dev="ramfs" ino=375388 res=1
03:57:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0)

03:57:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0)

[ 3040.259780][T25901] loop4: p1 size 3238031214 extends beyond EOD, truncated
[ 3040.273429][T25901] loop4: p2 start 257770150 is beyond EOD, truncated
03:57:47 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x95, 0x0, 0x0, 0x0, 0x0, 0x80009a79}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000001580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x2000c040)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
write$dsp(r4, &(0x7f00000003c0), 0x0)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x0, 0x0, 0x8}, 0x6)
write$dsp(0xffffffffffffffff, &(0x7f00000003c0)="a2", 0x1)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f00000005c0)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r5, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80)

[ 3040.354392][   T27] audit: type=1804 audit(2000001467.140:1222): pid=25902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/83/file0/bus" dev="ramfs" ino=375388 res=1
03:57:47 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fchdir(0xffffffffffffffff)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)

[ 3040.474251][   T27] audit: type=1804 audit(2000001467.180:1223): pid=25902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/83/file0/bus" dev="ramfs" ino=375388 res=1
03:57:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
r1 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)={0x1000, 0x6, 0x4, 0x0, 0x0, {0x7, 0x2}, {}, 0xa})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='\'system(\x00'}, 0x30)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100))
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00')
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0)
sendfile(r4, r3, 0x0, 0x20000000000000da)

03:57:47 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10)

03:57:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0)

[ 3040.985188][   T27] audit: type=1804 audit(2000001467.910:1224): pid=25929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/84/bus" dev="sda1" ino=16747 res=1
03:57:47 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x95, 0x0, 0x0, 0x0, 0x0, 0x80009a79}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000001580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x2000c040)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
write$dsp(r4, &(0x7f00000003c0), 0x0)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x0, 0x0, 0x8}, 0x6)
write$dsp(0xffffffffffffffff, &(0x7f00000003c0)="a2", 0x1)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f00000005c0)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r5, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80)

03:57:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0)

[ 3041.128930][   T27] audit: type=1804 audit(2000001467.960:1225): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/84/bus" dev="sda1" ino=16747 res=1
03:57:48 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10)

03:57:48 executing program 3:
r0 = socket(0xa, 0x3, 0x5)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

03:57:48 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x95, 0x0, 0x0, 0x0, 0x0, 0x80009a79}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000001580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x2000c040)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
write$dsp(r4, &(0x7f00000003c0), 0x0)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x0, 0x0, 0x8}, 0x6)
write$dsp(0xffffffffffffffff, &(0x7f00000003c0)="a2", 0x1)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f00000005c0)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r5, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80)

03:57:48 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000480), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "afad0ba330c263d0"}}, 0x38}}, 0x0)

03:57:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0)

03:57:48 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10)

03:57:48 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fchdir(0xffffffffffffffff)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)

03:57:49 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000480), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "afad0ba330c263d0"}}, 0x38}}, 0x0)

03:57:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0)

03:57:49 executing program 1:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

03:57:49 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10)

03:57:49 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000480), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "afad0ba330c263d0"}}, 0x38}}, 0x0)

03:57:49 executing program 5:
syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000002c0)=0xa6, &(0x7f0000000380)=0x4)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000300)=0x2)
fcntl$getown(r0, 0x9)
r2 = syz_open_dev$loop(0x0, 0x0, 0x100082)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000100)=0x6)
r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
io_destroy(0x0)
sendfile(r2, r4, 0x0, 0x2000010200000f)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000004c0)=@urb_type_bulk={0x3, {0x9, 0x1}, 0x200, 0x4, &(0x7f0000000140)="ac53f19464d8df08bc375a0c753561e52e96f1eb8bf0a6c15d9313a02b4709646b88b3efac7cdf4b571f7413cf9d25aad99303a5e843bd34aa151227ed84e371d30466dae8d7be3324ec5c71", 0xffffffffffffff24, 0x6, 0x4, 0x20, 0xfffff5cf, 0xa0a, &(0x7f0000000200)="952c44811d2605c765fd24fbfa58ec7148d99ba9c1d3a9cb36fbc83a07c2d7f9d644b87e58f4c60de9045524e45de2c80d10e1aee4707d39b3499d92c9b776eebb67a6ab15001d14d334e126b10a1b99ed295be4314cb610a377c42a9ca46576821ad494de8ea936ba8629b20b92f7942cd98e7eaca1e1ac53850e06a1e1982ee114dc7b4c36cd7095fd497e"})

03:57:49 executing program 1:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

[ 3042.686272][T25994] ubi: mtd0 is already attached to ubi0
[ 3042.717503][T25994] ubi: mtd0 is already attached to ubi0
03:57:49 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000480), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "afad0ba330c263d0"}}, 0x38}}, 0x0)

03:57:49 executing program 0:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

03:57:49 executing program 4:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

[ 3042.980155][T25997] ubi: mtd0 is already attached to ubi0
03:57:50 executing program 1:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

03:57:50 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
r1 = socket(0x10, 0x80002, 0x0)
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000020}, 0xc)
sendfile(r1, r0, 0x0, 0xf0d)

03:57:50 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x1d9, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="c4000010", 0x4}, {&(0x7f0000000340)="c6", 0x1}], 0x347)

03:57:50 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000003c0)={0x8, 0x1}, 0x0)

03:57:50 executing program 0:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

03:57:50 executing program 4:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

03:57:50 executing program 1:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

03:57:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b33, &(0x7f0000000040))

03:57:50 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x1d9, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="c4000010", 0x4}, {&(0x7f0000000340)="c6", 0x1}], 0x347)

03:57:50 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

03:57:50 executing program 0:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

03:57:50 executing program 4:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_open_dev$vcsn(0x0, 0x0, 0x403080)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r2=>0x0})
rt_sigqueueinfo(r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000001})
getpgrp(0x0)
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="7cf928f509a440563834c4849e1ff7033179308591eb6f6ba2c4675410ada887e8264eacda371bb970e6ef0ce519dfbc1a20a12af7fb28ae8e43e2ebecd4ddb86470a5024ea7d2b0de6eca2f102da81e34d80d23cc9da74a6a0b1d57b8425c7ef57408a9cb97c17b22e5b8974b15146baaba57a9c90e8dff6d"], 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresgid(&(0x7f0000000580), 0x0, &(0x7f0000000980))

03:57:50 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x2ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e072b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10)

03:57:50 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000a40))

03:57:51 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x1d9, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="c4000010", 0x4}, {&(0x7f0000000340)="c6", 0x1}], 0x347)

03:57:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000280)={@empty}, 0x8)

03:57:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000001c008105e00f80ecdbc0b9f207c804a02e000000a30306000a0002000a0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0)

03:57:51 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x2ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e072b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10)

03:57:51 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x80802, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090868fe07002b00000001000a0425000000450300070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1)

03:57:51 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0)

03:57:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca3b0000003800000000ff00f7ffff"], 0x26)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:57:51 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETXW(r2, 0x4b40, &(0x7f0000000000))

03:57:51 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0)

03:57:51 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x2ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e072b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10)

03:57:51 executing program 3:
sendmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x1d9, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="c4000010", 0x4}, {&(0x7f0000000340)="c6", 0x1}], 0x347)

03:57:51 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)

03:57:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca3b0000003800000000ff00f7ffff"], 0x26)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:57:51 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0)

03:57:51 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x2ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e072b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10)

03:57:52 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETXW(r2, 0x4b40, &(0x7f0000000000))

03:57:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000002a00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001440)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x2, 0x0)

03:57:52 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
lremovexattr(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0xa)
r3 = socket$inet6(0xa, 0x2, 0x0)
dup3(r3, r2, 0x0)

03:57:52 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0)

03:57:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28)

03:57:52 executing program 1:
r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x7e, 0x0)
r1 = dup2(r0, r0)
write$FUSE_IOCTL(r1, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='com.apple.FinderInfo\x00')

03:57:52 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00')

03:57:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca3b0000003800000000ff00f7ffff"], 0x26)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:57:52 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
lremovexattr(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0xa)
r3 = socket$inet6(0xa, 0x2, 0x0)
dup3(r3, r2, 0x0)

03:57:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28)

03:57:52 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETXW(r2, 0x4b40, &(0x7f0000000000))

03:57:52 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
lremovexattr(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0xa)
r3 = socket$inet6(0xa, 0x2, 0x0)
dup3(r3, r2, 0x0)

03:57:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca3b0000003800000000ff00f7ffff"], 0x26)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:57:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000400e13495000000000000002ba7e1d30cb599e83f24a3aa81d36bb3019c13bd23212fb56f040026fbfefc41eab2a2c952d40a703c056bd8174b7960317142fa9ea41d8123741c4e345c652fbc1626cca2a2ad35806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965c39e9ef8f6e3968f200e011ea665c45a3449abe802f5ab3e89cf6d662ed4148d3b3e22278d00031e5388ee5c867de2ce211d6ececb0cd2b6d357b8580218ce740068720000074e468ee23f0300000000000000822775985bf31b405b433a8acd715f5888b2007f00000000000002000100000000000000000006a10f58faffde64533500000000000000000000000031000000000000000000e75a89faf697992ca4f72f62cfff01210cce39bf400000846c12423a164a33e680846f26dc7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d616116a6520655a80d608df4d433623c850af895abba14f6fbd7fbad2a431ab9142f3a06d54740a46792cbf4709646b6c5c29647d2f90000f8af78f32e3012799a91121bd5b89e7a767c35bd6007b9a27466842a36e87ddb3164e96eafbc5488f1e44c113bf040f1c5503c14420d6bf9464b0b45a8ab726ec6acfa1556fe911243271b593a416dbe894cf27b85bc1a079e2ed8f292debb90da6de949044bc52b10d480a24c86db8e7251d29a27087e55ef719f0033e91fa84d2f72c55dc3c05ff98dc04b2c0ee4064a82affd04e51c0cbdb78c03fdba835e1a5c4186f5edfc1d596b44a3912922a71450dcea0c7fb4737ae37bea34b28d9196d3047c221237480004934f4e1139350cff00"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28)

03:57:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28)

03:57:53 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
lremovexattr(&(0x7f0000000040)='./file0/file0/file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0xa)
r3 = socket$inet6(0xa, 0x2, 0x0)
dup3(r3, r2, 0x0)

03:57:53 executing program 0:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$FICLONE(r0, 0x40049409, r1)

03:57:53 executing program 1:
r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1)
request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='\x00}H\xbd8\xab\xb2ikC\x9e\x00\x00\x00\x00\x00', 0xfffffffffffffffe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x21a, r2)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

03:57:53 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00')

03:57:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400))

03:57:53 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETXW(r2, 0x4b40, &(0x7f0000000000))

03:57:53 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x7)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10010000, 0x0)
getcwd(0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000000001e, &(0x7f00000005c0)=0x3, 0x4)
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
r1 = dup2(r0, 0xffffffffffffffff)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x100)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x3302, 0x800000000005e, 0x6, 0x4, 0x400}, 0x10000000ff}, 0xa)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404010}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[]}}, 0x8001)
r3 = socket(0xa, 0x80005, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892})
openat$random(0xffffffffffffff9c, 0x0, 0x280801, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488d")

03:57:53 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000080), &(0x7f0000000000)=0x2c)

03:57:53 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0xfed1}], 0x1)

03:57:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400))

03:57:53 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
inotify_init1(0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff58)

03:57:53 executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write(r0, &(0x7f00000001c0)='(', 0x20000339)

03:57:54 executing program 0:
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x27c, &(0x7f0000000100), 0x10f}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

03:57:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400))

03:57:54 executing program 4:
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000200))

03:57:54 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00')

03:57:54 executing program 0:
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x27c, &(0x7f0000000100), 0x10f}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

03:57:54 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = accept(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xfff}]}, 0x78)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r3=>0x0})
r4 = socket(0x100000000011, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4c57660af3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf205bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0)

03:57:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)

03:57:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f0114240f78fa0f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffe]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x400130}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x98, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

03:57:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400))

[ 3047.820482][T26258] device veth1_to_bond entered promiscuous mode
03:57:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)

[ 3047.919675][T26258] lo: Cannot use loopback or non-ethernet device as HSR slave.
03:57:54 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200080})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

[ 3047.962416][T26266] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3047.982026][T26258] device veth1_to_bond left promiscuous mode
03:57:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206010000001a0000000000000000000900020073799a31000000000c00078008000840000000f005000100071600000500040000000000050005000200000010000300686173683a69702c6d61630049e52ba38740debdc715fd4784450df359938ac9a45248922b15aa679b572e07f92709a3d4556d43b72bc1953dfc679ab4adabb773b332f08d2675e3c8c9e3a165280204d8b2eb7085e82a74003895b92047b6c81a4abeb735ee4d5faff3e228b982dbe7e7da4d9160e6d2685acd9b563405ccb4863033701245e0c6ee556582c07a0215eeb79f110bc4682618acead912faf88660c6a1860f2dedb2158ecbdc35c3e47fd50cb11a7a4e2b76285819ff3fcc6c1b4adac062aa2754f9b2ba3a062bf85356f049093033a270a639b66a1f164565428b6e7439449ebee3510474ab4166c4ba60dc53d1904ead380ea0da88fd12b3f4edac348a0bfdeaa7f0913ccc"], 0x54}}, 0x0)

03:57:55 executing program 0:
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x27c, &(0x7f0000000100), 0x10f}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

03:57:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = accept(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xfff}]}, 0x78)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r3=>0x0})
r4 = socket(0x100000000011, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4c57660af3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf205bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0)

03:57:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f0114240f78fa0f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffe]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x400130}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x98, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 3048.426156][T26292] device veth1_to_bond entered promiscuous mode
[ 3048.479038][T26295] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3048.492570][T26292] lo: Cannot use loopback or non-ethernet device as HSR slave.
[ 3048.541951][T26292] device veth1_to_bond left promiscuous mode
03:57:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)

03:57:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f0114240f78fa0f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffe]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x400130}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x98, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

03:57:55 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/144, 0x90}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f00000008c0)=""/205, 0xcd}, {&(0x7f0000000ac0)=""/171, 0xab}], 0x3}}], 0x1, 0x0, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x2}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

03:57:55 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00')

03:57:55 executing program 0:
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x27c, &(0x7f0000000100), 0x10f}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

03:57:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = accept(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xfff}]}, 0x78)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r3=>0x0})
r4 = socket(0x100000000011, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4c57660af3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf205bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0)

03:57:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0xa}, 0x3c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000002, 0x4, 0x100000001, 0x0, r0}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18)

[ 3048.980869][T26312] device veth1_to_bond entered promiscuous mode
[ 3049.001199][T26301] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
03:57:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f0114240f78fa0f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffe]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x400130}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x98, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 3049.048011][T26312] lo: Cannot use loopback or non-ethernet device as HSR slave.
03:57:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0xa}, 0x3c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000002, 0x4, 0x100000001, 0x0, r0}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18)

[ 3049.105371][T26312] device veth1_to_bond left promiscuous mode
03:57:56 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
fallocate(r3, 0x40, 0x0, 0x28120001)

03:57:56 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = accept(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xfff}]}, 0x78)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r3=>0x0})
r4 = socket(0x100000000011, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4c57660af3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf205bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0)

03:57:56 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)

[ 3049.298421][T26322] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
03:57:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0xa}, 0x3c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000002, 0x4, 0x100000001, 0x0, r0}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18)

[ 3049.546062][T26336] device veth1_to_bond entered promiscuous mode
[ 3049.628120][T26336] lo: Cannot use loopback or non-ethernet device as HSR slave.
[ 3049.691803][T26336] device veth1_to_bond left promiscuous mode
03:57:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0xa}, 0x3c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000002, 0x4, 0x100000001, 0x0, r0}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18)

03:57:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_STATS_ENABLED={0x8}]}}}]}, 0x3c}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xd3, 0x0)

03:57:56 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000780))

03:57:56 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)

03:57:56 executing program 5:
sched_setattr(0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42800)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[ 3049.870682][T26352] netlink: 'syz-executor.0': attribute type 41 has an invalid length.
03:57:56 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000780))

03:57:56 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
pread64(r2, &(0x7f00000001c0)=""/250, 0x200002ba, 0x0)

03:57:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20)
pipe(&(0x7f0000000080))
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

03:57:57 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
close(r0)
io_setup(0x6, &(0x7f0000000140)=<r1=>0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0xc0201, 0x0)
io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x10189}])

03:57:57 executing program 5:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x40096100, &(0x7f0000000280)={'\x00', {0x2, 0x0, @dev}})

03:57:57 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)

03:57:57 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

03:57:57 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000780))

03:57:57 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x10, 0x1, 0x0, r1, 0x0}])

03:57:57 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x3, 0x0, 0x0)

03:57:57 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0xfffffffffffbffc7, &(0x7f0000000080))

03:57:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20)
pipe(&(0x7f0000000080))
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

03:57:57 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000780))

03:57:57 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b70200000d400000bfa300000000000007020000fffeffff7a03f0fff8ffffff79a4f0ff00000000b7060000ffffebff2d640500000000007502faff070000000404000001007d60b7030000001000006a0a00fe000000008500000026000000b70000000000004295000000000000001da5ad3548ebb63d18db6a1cd1b31c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c1dc908abb6e7325ec1956bd8660bf36628dff1a15750ab9a780001000000800000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8eb040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb30a5bb8c13d5b47975b4b13b9f35e4f41a62df9b4c03e53466fac6b76c12aadd308fc0b0212c8d944f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75bb32935f542127a8f8438fe957ea206ad5becbb1c757f7169f006f3f5c9d429fbd0b14b3625962905ef911785c8cc0c4a11cb136d8a6084d62ac5cda076d8ef8aa6ecc2d32e3f4ee367e0a769c0a606636c9f4a4413c098f4fcc9661c80c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8f32b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)

03:57:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20)
pipe(&(0x7f0000000080))
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

03:57:57 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[{0x10, 0x110, 0x9}, {0x10, 0x110, 0x9}], 0x20}}], 0x2, 0x0)

03:57:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001740)=@newlink={0xb0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x88, 0x2b, [@IFLA_XDP_FD={0x7c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}}, 0x0)

03:57:58 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x6840, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x30}}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18)
memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<1-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\f\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd5;\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec\x13#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081806)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r6)
recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[@ANYPTR], 0x5)
msgsnd(0x0, &(0x7f0000000240)={0x2, "fe770faa075e52df1995f3963b0416bbb1e9e7e7aa35bccbbd0c0504698bf81872cce0cf75900e16d87e336777494b97398e30bc44992520e20491139e3f4d8a9c69da8a5e12677a8e3e051f0a87c64d5429fd75500b0e358a2671658c2542339ebd5c7b239b94c685553b3cd064985528f182b49c535b9c3df68a4e5c7161685250b144ab1611001edca196791d088a60d471f66a5e4312acdb30fb10c4ebb8e1eb183f2d0a97f62ba3678299b9ab954dc4dcfac2e74b379d5983090d8f"}, 0xc6, 0x0)
listen(r0, 0x800)

03:57:58 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6a00001a227faa51f989223ebb"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[ 3051.336811][T26418] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 3051.366944][T26418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
03:57:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20)
pipe(&(0x7f0000000080))
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

03:57:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20)
pipe(&(0x7f0000000080))
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

03:57:58 executing program 0:
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="cefaad1b", 0x4}, {0x0, 0x0, 0x14e}], 0x8010, 0x0)

03:57:58 executing program 3:
r0 = memfd_create(&(0x7f0000000040)='On\xc4\xd0\xee\x127\xd8\xa2\x8a\x80Tc-\xfe9%\x14\x95d;\xe6\xe8\xad.$\xc4\xb8\xa8\xa96\x0e\xebi6\x9e\xbd\x8b\xb9^B{\x8d\xa0\xdf\xbc\x02l\xb8\x84Q\\\r\xc5\xb5(\xd1\xf7\xf7\xc2\xc0\xef\xee6X;I\xd6\xc2\xf9\xfcS\xb1\xdbKth\x1eh\x1f\r\x92\xf7\x1c\x15\xebU\x99\xeb\xfdu\xfc\x03p\xe5\xb0\xaf\x81\x00'/109, 0x3)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
fcntl$addseals(r2, 0x409, 0x4)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8})

03:57:58 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x6840, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x30}}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18)
memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<1-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\f\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd5;\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec\x13#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081806)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r6)
recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[@ANYPTR], 0x5)
msgsnd(0x0, &(0x7f0000000240)={0x2, "fe770faa075e52df1995f3963b0416bbb1e9e7e7aa35bccbbd0c0504698bf81872cce0cf75900e16d87e336777494b97398e30bc44992520e20491139e3f4d8a9c69da8a5e12677a8e3e051f0a87c64d5429fd75500b0e358a2671658c2542339ebd5c7b239b94c685553b3cd064985528f182b49c535b9c3df68a4e5c7161685250b144ab1611001edca196791d088a60d471f66a5e4312acdb30fb10c4ebb8e1eb183f2d0a97f62ba3678299b9ab954dc4dcfac2e74b379d5983090d8f"}, 0xc6, 0x0)
listen(r0, 0x800)

[ 3051.834482][T26425] overlayfs: filesystem on './file0' not supported as upperdir
[ 3051.844814][T26441] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0
03:57:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20)
pipe(&(0x7f0000000080))
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

[ 3052.067763][T26441] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0
03:57:59 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x6840, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x30}}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18)
memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<1-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\f\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd5;\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec\x13#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081806)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r6)
recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[@ANYPTR], 0x5)
msgsnd(0x0, &(0x7f0000000240)={0x2, "fe770faa075e52df1995f3963b0416bbb1e9e7e7aa35bccbbd0c0504698bf81872cce0cf75900e16d87e336777494b97398e30bc44992520e20491139e3f4d8a9c69da8a5e12677a8e3e051f0a87c64d5429fd75500b0e358a2671658c2542339ebd5c7b239b94c685553b3cd064985528f182b49c535b9c3df68a4e5c7161685250b144ab1611001edca196791d088a60d471f66a5e4312acdb30fb10c4ebb8e1eb183f2d0a97f62ba3678299b9ab954dc4dcfac2e74b379d5983090d8f"}, 0xc6, 0x0)
listen(r0, 0x800)

03:57:59 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6a00001a227faa51f989223ebb"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

03:57:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20)
pipe(&(0x7f0000000080))
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

03:57:59 executing program 0:
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="cefaad1b", 0x4}, {0x0, 0x0, 0x14e}], 0x8010, 0x0)

03:57:59 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x6840, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x30}}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18)
memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<1-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\f\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd5;\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec\x13#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081806)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r6)
recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[@ANYPTR], 0x5)
msgsnd(0x0, &(0x7f0000000240)={0x2, "fe770faa075e52df1995f3963b0416bbb1e9e7e7aa35bccbbd0c0504698bf81872cce0cf75900e16d87e336777494b97398e30bc44992520e20491139e3f4d8a9c69da8a5e12677a8e3e051f0a87c64d5429fd75500b0e358a2671658c2542339ebd5c7b239b94c685553b3cd064985528f182b49c535b9c3df68a4e5c7161685250b144ab1611001edca196791d088a60d471f66a5e4312acdb30fb10c4ebb8e1eb183f2d0a97f62ba3678299b9ab954dc4dcfac2e74b379d5983090d8f"}, 0xc6, 0x0)
listen(r0, 0x800)

[ 3052.408721][T26464] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0
03:57:59 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0)
clone3(&(0x7f0000000340)={0x0, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x50)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x480}]})

03:57:59 executing program 0:
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="cefaad1b", 0x4}, {0x0, 0x0, 0x14e}], 0x8010, 0x0)

03:57:59 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x6840, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x30}}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18)
memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<1-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\f\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd5;\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec\x13#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081806)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r6)
recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[@ANYPTR], 0x5)
msgsnd(0x0, &(0x7f0000000240)={0x2, "fe770faa075e52df1995f3963b0416bbb1e9e7e7aa35bccbbd0c0504698bf81872cce0cf75900e16d87e336777494b97398e30bc44992520e20491139e3f4d8a9c69da8a5e12677a8e3e051f0a87c64d5429fd75500b0e358a2671658c2542339ebd5c7b239b94c685553b3cd064985528f182b49c535b9c3df68a4e5c7161685250b144ab1611001edca196791d088a60d471f66a5e4312acdb30fb10c4ebb8e1eb183f2d0a97f62ba3678299b9ab954dc4dcfac2e74b379d5983090d8f"}, 0xc6, 0x0)
listen(r0, 0x800)

[ 3052.847873][T26474] overlayfs: conflicting lowerdir path
03:57:59 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x6840, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x30}}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18)
memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<1-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\f\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd5;\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec\x13#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081806)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r6)
recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[@ANYPTR], 0x5)
msgsnd(0x0, &(0x7f0000000240)={0x2, "fe770faa075e52df1995f3963b0416bbb1e9e7e7aa35bccbbd0c0504698bf81872cce0cf75900e16d87e336777494b97398e30bc44992520e20491139e3f4d8a9c69da8a5e12677a8e3e051f0a87c64d5429fd75500b0e358a2671658c2542339ebd5c7b239b94c685553b3cd064985528f182b49c535b9c3df68a4e5c7161685250b144ab1611001edca196791d088a60d471f66a5e4312acdb30fb10c4ebb8e1eb183f2d0a97f62ba3678299b9ab954dc4dcfac2e74b379d5983090d8f"}, 0xc6, 0x0)
listen(r0, 0x800)

[ 3052.907252][T26485] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0
03:58:00 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00')
truncate(&(0x7f0000000040)='./bus/file0\x00', 0x0)

03:58:00 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6a00001a227faa51f989223ebb"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

03:58:00 executing program 0:
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="cefaad1b", 0x4}, {0x0, 0x0, 0x14e}], 0x8010, 0x0)

03:58:00 executing program 4:
prctl$PR_SET_MM(0x29, 0x0, &(0x7f0000ffb000/0x1000)=nil)

03:58:00 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x6840, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x30}}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18)
memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<1-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\f\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd5;\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec\x13#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081806)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r6)
recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[@ANYPTR], 0x5)
msgsnd(0x0, &(0x7f0000000240)={0x2, "fe770faa075e52df1995f3963b0416bbb1e9e7e7aa35bccbbd0c0504698bf81872cce0cf75900e16d87e336777494b97398e30bc44992520e20491139e3f4d8a9c69da8a5e12677a8e3e051f0a87c64d5429fd75500b0e358a2671658c2542339ebd5c7b239b94c685553b3cd064985528f182b49c535b9c3df68a4e5c7161685250b144ab1611001edca196791d088a60d471f66a5e4312acdb30fb10c4ebb8e1eb183f2d0a97f62ba3678299b9ab954dc4dcfac2e74b379d5983090d8f"}, 0xc6, 0x0)
listen(r0, 0x800)

[ 3053.354894][T26509] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0
03:58:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:00 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x31, &(0x7f0000000180), 0x4)

03:58:00 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

[ 3053.927805][T26528] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
03:58:01 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0)
clone3(&(0x7f0000000340)={0x0, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x50)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x480}]})

03:58:01 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6a00001a227faa51f989223ebb"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

03:58:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x8ab, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

03:58:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000000c0)=""/79, 0xffa0)

03:58:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 3054.661761][T26675] tipc: TX() has been purged, node left!
03:58:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000000c0)=""/79, 0xffa0)

03:58:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x8ab, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

03:58:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:02 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0)
clone3(&(0x7f0000000340)={0x0, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x50)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x480}]})

03:58:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000000c0)=""/79, 0xffa0)

[ 3055.673949][T26594] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 3056.142276][T26675] device bridge_slave_1 left promiscuous mode
[ 3056.148553][T26675] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3056.202108][T26675] device bridge_slave_0 left promiscuous mode
[ 3056.208289][T26675] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3056.234782][T26675] device veth1_vlan left promiscuous mode
[ 3056.240582][T26675] device veth0_vlan left promiscuous mode
03:58:03 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

03:58:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x8ab, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

03:58:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000000c0)=""/79, 0xffa0)

03:58:03 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0)
clone3(&(0x7f0000000340)={0x0, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x50)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x480}]})

03:58:04 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

[ 3057.139650][T26628] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
03:58:04 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

03:58:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x8ab, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

03:58:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:05 executing program 2:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)

[ 3058.387484][T26675] device hsr_slave_0 left promiscuous mode
[ 3058.442227][T26675] device hsr_slave_1 left promiscuous mode
[ 3058.454727][T26684] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 3058.499918][T26675] team0 (unregistering): Port device team_slave_1 removed
[ 3058.531601][T26675] team0 (unregistering): Port device team_slave_0 removed
[ 3058.555835][T26675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3058.616873][T26675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3058.682107][T26675] bond0 (unregistering): Released all slaves
03:58:06 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

03:58:06 executing program 2:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)

03:58:06 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="33000000190081ae08060c04000f000480207f03fe0400058701546f170003004000000000006596bc014e18bbdfede6efb408", 0x33}], 0x1, 0x0, 0x0, 0xf00}, 0x0)

03:58:06 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

03:58:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:07 executing program 2:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)

[ 3060.078651][T26700] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
03:58:07 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)

[ 3060.287578][T26705] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
03:58:07 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

03:58:07 executing program 2:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)

03:58:07 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x4, 0x16}]}}}]}, 0x38}}, 0x0)

[ 3060.771299][T26738] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
03:58:07 executing program 2:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="77690addcfbe1ffb66ec", 0xff3b}], 0x1000000000000002, 0xf)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080005"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

03:58:07 executing program 3:
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x3})
close(r0)

03:58:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

03:58:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]})
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

03:58:10 executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r1, 0x0, 0x0)
lstat(0x0, &(0x7f0000000180))
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r2, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
setgroups(0x1, &(0x7f0000000240)=[0x0])
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x35a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r4, &(0x7f0000000600)="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", 0x200)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x600)
sendfile(r4, r5, 0x0, 0x7fffffa7)

03:58:10 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x282140, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc89e2aab01fd93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x7fffffff, 0x1}, r0, 0xffffffffffffffff, r1, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
r2 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r2, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x4)
bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc4c85513, 0x400007)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
renameat2(r2, &(0x7f0000000000)='./file1/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2)

03:58:10 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

[ 3063.400796][   T27] kauditd_printk_skb: 6 callbacks suppressed
[ 3063.400817][   T27] audit: type=1800 audit(2000001490.320:1232): pid=26772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1624 res=0
[ 3063.437615][T26767] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 3063.494012][   T27] audit: type=1804 audit(2000001490.370:1233): pid=26779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/116/file0/file0" dev="loop2" ino=1624 res=1
[ 3063.544072][T26772] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 3063.553157][T26772] FAT-fs (loop2): Filesystem has been set read-only
[ 3063.562456][T26772] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 17)
03:58:10 executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r1, 0x0, 0x0)
lstat(0x0, &(0x7f0000000180))
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r2, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
setgroups(0x1, &(0x7f0000000240)=[0x0])
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x35a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r4, &(0x7f0000000600)="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", 0x200)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x600)
sendfile(r4, r5, 0x0, 0x7fffffa7)

03:58:10 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x282140, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc89e2aab01fd93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x7fffffff, 0x1}, r0, 0xffffffffffffffff, r1, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
r2 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r2, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x4)
bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc4c85513, 0x400007)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
renameat2(r2, &(0x7f0000000000)='./file1/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2)

03:58:10 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'\x00', 0x1801})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000000000004)
ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x3ff}, 0x8)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0xffffffffffffffbd)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x3, 0x0, 0xffffffff, 0x7})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff30b, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x7768, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x9, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1677}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x400, 0x0)

[ 3063.885806][   T27] audit: type=1800 audit(2000001490.810:1234): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1625 res=0
[ 3063.961766][T26806] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 3063.970515][T26806] FAT-fs (loop2): Filesystem has been set read-only
[ 3063.993764][T26806] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 17)
[ 3064.035792][   T27] audit: type=1804 audit(2000001490.820:1235): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/117/file0/file0" dev="loop2" ino=1625 res=1
03:58:11 executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r1, 0x0, 0x0)
lstat(0x0, &(0x7f0000000180))
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r2, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
setgroups(0x1, &(0x7f0000000240)=[0x0])
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x35a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r4, &(0x7f0000000600)="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", 0x200)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x600)
sendfile(r4, r5, 0x0, 0x7fffffa7)

03:58:11 executing program 5:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

03:58:11 executing program 5:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

03:58:11 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x282140, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc89e2aab01fd93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x7fffffff, 0x1}, r0, 0xffffffffffffffff, r1, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
r2 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r2, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x4)
bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc4c85513, 0x400007)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
renameat2(r2, &(0x7f0000000000)='./file1/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2)

[ 3064.485629][   T27] audit: type=1800 audit(2000001491.410:1236): pid=26829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1626 res=0
[ 3064.538132][   T27] audit: type=1804 audit(2000001491.440:1237): pid=26829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/118/file0/file0" dev="loop2" ino=1626 res=1
[ 3064.581950][T26829] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 3064.590993][T26829] FAT-fs (loop2): Filesystem has been set read-only
[ 3064.602966][T26829] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 17)
03:58:13 executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r1, 0x0, 0x0)
lstat(0x0, &(0x7f0000000180))
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r2, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
setgroups(0x1, &(0x7f0000000240)=[0x0])
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x35a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r4, &(0x7f0000000600)="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", 0x200)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x600)
sendfile(r4, r5, 0x0, 0x7fffffa7)

03:58:13 executing program 5:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

03:58:13 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x282140, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc89e2aab01fd93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x7fffffff, 0x1}, r0, 0xffffffffffffffff, r1, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00')
r2 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r2, &(0x7f0000000380)='./file1/file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x4, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x4)
bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc4c85513, 0x400007)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
renameat2(r2, &(0x7f0000000000)='./file1/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2)

03:58:13 executing program 1:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

03:58:13 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001080)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6)

03:58:13 executing program 1:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

03:58:13 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001080)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6)

[ 3066.498872][   T27] audit: type=1800 audit(2000001493.420:1238): pid=26858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1627 res=0
[ 3066.593776][   T27] audit: type=1804 audit(2000001493.510:1239): pid=26858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir637362776/syzkaller.83419z/119/file0/file0" dev="loop2" ino=1627 res=1
[ 3066.676057][T26858] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 3066.685124][T26858] FAT-fs (loop2): Filesystem has been set read-only
[ 3066.693901][T26858] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 17)
03:58:13 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x2})

03:58:13 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001080)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6)

03:58:13 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xe2f1, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, 0x26, 0x400000000000109}, 0x14}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

03:58:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0)

03:58:14 executing program 5:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

03:58:14 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001080)='/dev/ttyS3\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6)

[ 3067.178380][T26889] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
03:58:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x80002, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000070a495500"/20], 0x14}}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

03:58:14 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c)
socket(0x10, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0), 0x4)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100a1123d", @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = dup2(r2, r1)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000ca01ae3180000000000000000000000100000000001460f1512c0000000000d4fdffff000000ffff599abba20367830a6e722d975815bcececfc6e9b65af114bae8cae53154cb92ad3cf72ec06133310ba653c04b619fe3d9ddb73c6107bcee853af773c2838a04bdb4e7534ad32ec74ad919d47c764b0e8335331642521d6791483a9d46be17b46aba109422303ad98b18676257c7e0ce4742d7b1f5b913ffa0495011b9db28799fc75fd44806f8e68d1cc"], 0x28)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7, 0x8f, 0x5, 0x4, 0x0, 0x0, 0xa0120, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5c, 0x5, @perf_config_ext={0x3}, 0x40, 0x7, 0x7, 0x3, 0xde3c, 0x2783, 0x1}, r0, 0x9, r4, 0x9)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x0, 0xfff, 0x34})
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
dup2(r7, r6)
getpid()

[ 3067.250330][T26893] device bond1 entered promiscuous mode
03:58:14 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x800000003, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f6d6430009e57025eabeb195f09f771dac82d3003dfc253b17321e99c53a882e45592064882a0bdc24e819752e7c855260fa1cc921a33760c43d7a078dd20d5b2189dbada7f00d9868032533ca04c50e2abb7902fc03549473f7ad6d96bccbdbb27033f144c967e31eb00bcdf4b226225306e5b4bfac576e1574606a40cd5bd02c9b0eb60f6d85dd28c7eae137c8f35b03c7d3ddc28acd1a46e3fea0bee3d0107ca7cb0c2315aaead5750297711e3e994"], 0x0, &(0x7f0000000340)='squashfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x2000, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1000000000000010, 0x80802, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1a960c876daf944a})
r1 = socket(0x0, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000300), &(0x7f0000000540)=0x4)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

[ 3067.297744][T26893] 8021q: adding VLAN 0 to HW filter on device bond1
[ 3067.334061][T26889] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
03:58:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0)

03:58:14 executing program 1:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 3067.533299][T26906] fuse: Unknown parameter '
'
[ 3067.564099][T26910] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
03:58:14 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000002a00)='/dev/input/mouse#\x00', 0x0, 0xb4952169a51c2d7d)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="080db5055e0bcfe8696071")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
dup2(r2, r0)

[ 3067.689166][T26915] device bond2 entered promiscuous mode
[ 3067.708953][T26915] 8021q: adding VLAN 0 to HW filter on device bond2
03:58:14 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000002c0)=""/106)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0x9299)

03:58:14 executing program 3:
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x68002100, 0x0, 0x0, 0x0, 0x0)

[ 3067.972821][T26906] fuse: Unknown parameter '
'
03:58:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0)

03:58:15 executing program 1:
r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000040)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0)

[ 3068.130396][T26932] IPVS: ftp: loaded support on port[0] = 21
03:58:15 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c)
socket(0x10, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0), 0x4)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100a1123d", @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = dup2(r2, r1)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000ca01ae3180000000000000000000000100000000001460f1512c0000000000d4fdffff000000ffff599abba20367830a6e722d975815bcececfc6e9b65af114bae8cae53154cb92ad3cf72ec06133310ba653c04b619fe3d9ddb73c6107bcee853af773c2838a04bdb4e7534ad32ec74ad919d47c764b0e8335331642521d6791483a9d46be17b46aba109422303ad98b18676257c7e0ce4742d7b1f5b913ffa0495011b9db28799fc75fd44806f8e68d1cc"], 0x28)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7, 0x8f, 0x5, 0x4, 0x0, 0x0, 0xa0120, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5c, 0x5, @perf_config_ext={0x3}, 0x40, 0x7, 0x7, 0x3, 0xde3c, 0x2783, 0x1}, r0, 0x9, r4, 0x9)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x0, 0xfff, 0x34})
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
dup2(r7, r6)
getpid()

[ 3068.191775][T26935] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[ 3068.228348][T26937] device bond3 entered promiscuous mode
[ 3068.238307][T26937] 8021q: adding VLAN 0 to HW filter on device bond3
03:58:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0)

[ 3068.301661][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3068.307452][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3068.381665][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3068.387462][    C0] protocol 88fb is buggy, dev hsr_slave_1
03:58:15 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c)
socket(0x10, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0), 0x4)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100a1123d", @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = dup2(r2, r1)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000ca01ae3180000000000000000000000100000000001460f1512c0000000000d4fdffff000000ffff599abba20367830a6e722d975815bcececfc6e9b65af114bae8cae53154cb92ad3cf72ec06133310ba653c04b619fe3d9ddb73c6107bcee853af773c2838a04bdb4e7534ad32ec74ad919d47c764b0e8335331642521d6791483a9d46be17b46aba109422303ad98b18676257c7e0ce4742d7b1f5b913ffa0495011b9db28799fc75fd44806f8e68d1cc"], 0x28)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7, 0x8f, 0x5, 0x4, 0x0, 0x0, 0xa0120, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5c, 0x5, @perf_config_ext={0x3}, 0x40, 0x7, 0x7, 0x3, 0xde3c, 0x2783, 0x1}, r0, 0x9, r4, 0x9)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x0, 0xfff, 0x34})
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
dup2(r7, r6)
getpid()

03:58:15 executing program 1:
r0 = socket$inet(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000090a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0)

03:58:15 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x800000003, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f6d6430009e57025eabeb195f09f771dac82d3003dfc253b17321e99c53a882e45592064882a0bdc24e819752e7c855260fa1cc921a33760c43d7a078dd20d5b2189dbada7f00d9868032533ca04c50e2abb7902fc03549473f7ad6d96bccbdbb27033f144c967e31eb00bcdf4b226225306e5b4bfac576e1574606a40cd5bd02c9b0eb60f6d85dd28c7eae137c8f35b03c7d3ddc28acd1a46e3fea0bee3d0107ca7cb0c2315aaead5750297711e3e994"], 0x0, &(0x7f0000000340)='squashfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x2000, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1000000000000010, 0x80802, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1a960c876daf944a})
r1 = socket(0x0, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000300), &(0x7f0000000540)=0x4)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

[ 3068.513916][T26951] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[ 3068.546388][T26952] device bond4 entered promiscuous mode
[ 3068.564710][T26952] 8021q: adding VLAN 0 to HW filter on device bond4
[ 3068.623824][T26961] IPVS: ftp: loaded support on port[0] = 21
03:58:15 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000}, 0x28)

03:58:15 executing program 3:
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x68002100, 0x0, 0x0, 0x0, 0x0)

[ 3068.765202][T26956] fuse: Unknown parameter '
'
[ 3068.874735][T31025] tipc: TX() has been purged, node left!
03:58:15 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0)
io_setup(0x9, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="100000000100"/16, 0x10}])

[ 3068.975913][T26971] IPVS: ftp: loaded support on port[0] = 21
[ 3069.139898][T26962] fuse: Unknown parameter '
'
03:58:16 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c", 0x46}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

03:58:16 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c)
socket(0x10, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0), 0x4)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100a1123d", @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = dup2(r2, r1)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000ca01ae3180000000000000000000000100000000001460f1512c0000000000d4fdffff000000ffff599abba20367830a6e722d975815bcececfc6e9b65af114bae8cae53154cb92ad3cf72ec06133310ba653c04b619fe3d9ddb73c6107bcee853af773c2838a04bdb4e7534ad32ec74ad919d47c764b0e8335331642521d6791483a9d46be17b46aba109422303ad98b18676257c7e0ce4742d7b1f5b913ffa0495011b9db28799fc75fd44806f8e68d1cc"], 0x28)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7, 0x8f, 0x5, 0x4, 0x0, 0x0, 0xa0120, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5c, 0x5, @perf_config_ext={0x3}, 0x40, 0x7, 0x7, 0x3, 0xde3c, 0x2783, 0x1}, r0, 0x9, r4, 0x9)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x0, 0xfff, 0x34})
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
dup2(r7, r6)
getpid()

03:58:16 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x800000003, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f6d6430009e57025eabeb195f09f771dac82d3003dfc253b17321e99c53a882e45592064882a0bdc24e819752e7c855260fa1cc921a33760c43d7a078dd20d5b2189dbada7f00d9868032533ca04c50e2abb7902fc03549473f7ad6d96bccbdbb27033f144c967e31eb00bcdf4b226225306e5b4bfac576e1574606a40cd5bd02c9b0eb60f6d85dd28c7eae137c8f35b03c7d3ddc28acd1a46e3fea0bee3d0107ca7cb0c2315aaead5750297711e3e994"], 0x0, &(0x7f0000000340)='squashfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x2000, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1000000000000010, 0x80802, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1a960c876daf944a})
r1 = socket(0x0, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000300), &(0x7f0000000540)=0x4)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

03:58:16 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000}, 0x28)

[ 3069.609995][T26988] fuse: Unknown parameter '
'
03:58:16 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c)
socket(0x10, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0), 0x4)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100a1123d", @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = dup2(r2, r1)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000ca01ae3180000000000000000000000100000000001460f1512c0000000000d4fdffff000000ffff599abba20367830a6e722d975815bcececfc6e9b65af114bae8cae53154cb92ad3cf72ec06133310ba653c04b619fe3d9ddb73c6107bcee853af773c2838a04bdb4e7534ad32ec74ad919d47c764b0e8335331642521d6791483a9d46be17b46aba109422303ad98b18676257c7e0ce4742d7b1f5b913ffa0495011b9db28799fc75fd44806f8e68d1cc"], 0x28)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7, 0x8f, 0x5, 0x4, 0x0, 0x0, 0xa0120, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5c, 0x5, @perf_config_ext={0x3}, 0x40, 0x7, 0x7, 0x3, 0xde3c, 0x2783, 0x1}, r0, 0x9, r4, 0x9)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x0, 0xfff, 0x34})
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
dup2(r7, r6)
getpid()

03:58:16 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x800000003, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f6d6430009e57025eabeb195f09f771dac82d3003dfc253b17321e99c53a882e45592064882a0bdc24e819752e7c855260fa1cc921a33760c43d7a078dd20d5b2189dbada7f00d9868032533ca04c50e2abb7902fc03549473f7ad6d96bccbdbb27033f144c967e31eb00bcdf4b226225306e5b4bfac576e1574606a40cd5bd02c9b0eb60f6d85dd28c7eae137c8f35b03c7d3ddc28acd1a46e3fea0bee3d0107ca7cb0c2315aaead5750297711e3e994"], 0x0, &(0x7f0000000340)='squashfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x2000, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1000000000000010, 0x80802, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1a960c876daf944a})
r1 = socket(0x0, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000300), &(0x7f0000000540)=0x4)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

03:58:16 executing program 3:
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x68002100, 0x0, 0x0, 0x0, 0x0)

[ 3069.880421][T26995] IPVS: ftp: loaded support on port[0] = 21
[ 3070.036197][T26998] fuse: Unknown parameter '
'
03:58:17 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000}, 0x28)

[ 3070.407472][T27003] fuse: Bad value for 'fd'
03:58:17 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c)
socket(0x10, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0), 0x4)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100a1123d", @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = dup2(r2, r1)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000ca01ae3180000000000000000000000100000000001460f1512c0000000000d4fdffff000000ffff599abba20367830a6e722d975815bcececfc6e9b65af114bae8cae53154cb92ad3cf72ec06133310ba653c04b619fe3d9ddb73c6107bcee853af773c2838a04bdb4e7534ad32ec74ad919d47c764b0e8335331642521d6791483a9d46be17b46aba109422303ad98b18676257c7e0ce4742d7b1f5b913ffa0495011b9db28799fc75fd44806f8e68d1cc"], 0x28)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7, 0x8f, 0x5, 0x4, 0x0, 0x0, 0xa0120, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5c, 0x5, @perf_config_ext={0x3}, 0x40, 0x7, 0x7, 0x3, 0xde3c, 0x2783, 0x1}, r0, 0x9, r4, 0x9)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x0, 0xfff, 0x34})
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
dup2(r7, r6)
getpid()

03:58:17 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000}, 0x28)

03:58:17 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c)
socket(0x10, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0), 0x4)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100a1123d", @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = dup2(r2, r1)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000ca01ae3180000000000000000000000100000000001460f1512c0000000000d4fdffff000000ffff599abba20367830a6e722d975815bcececfc6e9b65af114bae8cae53154cb92ad3cf72ec06133310ba653c04b619fe3d9ddb73c6107bcee853af773c2838a04bdb4e7534ad32ec74ad919d47c764b0e8335331642521d6791483a9d46be17b46aba109422303ad98b18676257c7e0ce4742d7b1f5b913ffa0495011b9db28799fc75fd44806f8e68d1cc"], 0x28)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7, 0x8f, 0x5, 0x4, 0x0, 0x0, 0xa0120, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5c, 0x5, @perf_config_ext={0x3}, 0x40, 0x7, 0x7, 0x3, 0xde3c, 0x2783, 0x1}, r0, 0x9, r4, 0x9)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0x0, 0xfff, 0x34})
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
dup2(r7, r6)
getpid()

[ 3070.738252][T27007] fuse: Unknown parameter '
'
03:58:17 executing program 3:
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x68002100, 0x0, 0x0, 0x0, 0x0)

[ 3071.074145][T27016] IPVS: ftp: loaded support on port[0] = 21
[ 3071.089959][T27013] fuse: Unknown parameter '
'
[ 3072.231659][T31025] tipc: TX() has been purged, node left!
03:58:19 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c", 0x46}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

03:58:19 executing program 4:
pipe(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x80000001, @local, 0x13}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x101}, 0x1, [0xa6, 0x2, 0x2, 0x80000001, 0x0, 0x9, 0x0, 0x80000000]}, 0x5c)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc)

03:58:19 executing program 0:
syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@quota_quantum={'quota_quantum'}}]})

03:58:19 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, 0x1, 0x9, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7)
splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0)

03:58:19 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000780)='attr/current\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[ 3072.402573][T31025] tipc: TX() has been purged, node left!
[ 3072.532646][T27034] gfs2: quota_quantum mount option requires a positive numeric argument
[ 3072.553743][T31025] tipc: TX() has been purged, node left!
[ 3072.644114][T27034] gfs2: quota_quantum mount option requires a positive numeric argument
[ 3072.751768][T31025] tipc: TX() has been purged, node left!
[ 3072.871699][T31025] tipc: TX() has been purged, node left!
[ 3072.996709][T27053] IPVS: ftp: loaded support on port[0] = 21
[ 3073.048276][T27053] chnl_net:caif_netlink_parms(): no params data found
[ 3073.109070][T27053] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3073.116198][T27053] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3073.123966][T27053] device bridge_slave_0 entered promiscuous mode
[ 3073.131522][T27053] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3073.138736][T27053] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3073.146670][T27053] device bridge_slave_1 entered promiscuous mode
[ 3073.330939][T27053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3073.341865][T27053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3073.389454][T27053] team0: Port device team_slave_0 added
[ 3073.396331][T27053] team0: Port device team_slave_1 added
[ 3073.453683][T27053] device hsr_slave_0 entered promiscuous mode
[ 3073.492240][T27053] device hsr_slave_1 entered promiscuous mode
[ 3073.595344][T27053] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3073.602401][T27053] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3073.609682][T27053] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3073.616725][T27053] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3073.675281][T27053] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3073.687071][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3073.695680][ T1687] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3073.704720][ T1687] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3073.713896][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 3073.727066][T27053] 8021q: adding VLAN 0 to HW filter on device team0
[ 3073.773828][T21648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3073.782262][T21648] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3073.789266][T21648] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3073.797309][T21648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3073.805672][T21648] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3073.812734][T21648] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3073.826884][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3073.835488][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3073.882524][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3073.891839][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3073.900193][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3073.913188][T27053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3073.929104][T21648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3073.936652][T21648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3073.976678][T27053] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3074.005621][T31025] device bridge_slave_1 left promiscuous mode
[ 3074.012202][T31025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3074.032550][T31025] device bridge_slave_0 left promiscuous mode
[ 3074.038719][T31025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3074.084937][T31025] device veth1_vlan left promiscuous mode
[ 3074.090706][T31025] device veth0_vlan left promiscuous mode
[ 3074.932060][T31025] device hsr_slave_0 left promiscuous mode
[ 3074.971792][T31025] device hsr_slave_1 left promiscuous mode
[ 3075.007990][T31025] team0 (unregistering): Port device team_slave_1 removed
[ 3075.018220][T31025] team0 (unregistering): Port device team_slave_0 removed
[ 3075.028380][T31025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3075.065551][T31025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3075.134144][T31025] bond0 (unregistering): Released all slaves
[ 3075.262240][T21646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3075.271024][T21646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3075.283446][T27053] device veth0_vlan entered promiscuous mode
[ 3075.290296][T15022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3075.298586][T15022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3075.307476][T15022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3075.315576][T15022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3075.432469][T27053] device veth1_vlan entered promiscuous mode
[ 3075.661693][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3075.667476][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3075.671730][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3075.678986][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3075.911734][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3075.917517][    C1] protocol 88fb is buggy, dev hsr_slave_1
03:58:23 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus/file2\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus/file2'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}]})

03:58:23 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000780)='attr/current\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

03:58:23 executing program 4:
pipe(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x80000001, @local, 0x13}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x101}, 0x1, [0xa6, 0x2, 0x2, 0x80000001, 0x0, 0x9, 0x0, 0x80000000]}, 0x5c)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc)

03:58:23 executing program 0:
pipe(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x80000001, @local, 0x13}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x101}, 0x1, [0xa6, 0x2, 0x2, 0x80000001, 0x0, 0x9, 0x0, 0x80000000]}, 0x5c)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc)

03:58:23 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c", 0x46}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

03:58:23 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a91877b5ea0bdc9e158bd830000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725560a6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x49c, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000100)="cf", 0x1, r2)
keyctl$dh_compute(0x17, &(0x7f0000000180)={r3, r1, r3}, &(0x7f0000000440)=""/243, 0x389, &(0x7f0000000080)={&(0x7f0000000240)={'crc32c-intel\x00\x03\x00\x00\x00\x00\x00\x01\x00'}})

03:58:23 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000780)='attr/current\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[ 3076.301818][T21649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3076.314769][T21649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3076.329295][T27085] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
03:58:23 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus/file2\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus/file2'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}]})

03:58:23 executing program 4:
pipe(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x80000001, @local, 0x13}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x101}, 0x1, [0xa6, 0x2, 0x2, 0x80000001, 0x0, 0x9, 0x0, 0x80000000]}, 0x5c)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc)

03:58:23 executing program 5:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

03:58:23 executing program 0:
pipe(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x80000001, @local, 0x13}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x101}, 0x1, [0xa6, 0x2, 0x2, 0x80000001, 0x0, 0x9, 0x0, 0x80000000]}, 0x5c)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc)

03:58:23 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000780)='attr/current\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

03:58:23 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

03:58:24 executing program 0:
pipe(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x80000001, @local, 0x13}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x101}, 0x1, [0xa6, 0x2, 0x2, 0x80000001, 0x0, 0x9, 0x0, 0x80000000]}, 0x5c)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc)

03:58:24 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus/file2\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus/file2'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}]})

03:58:24 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3077.251810][T31025] tipc: TX() has been purged, node left!
[ 3078.364312][T31025] device bridge_slave_1 left promiscuous mode
[ 3078.370597][T31025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3078.402650][T31025] device bridge_slave_0 left promiscuous mode
[ 3078.408827][T31025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3078.465649][T31025] device veth1_vlan left promiscuous mode
[ 3078.471389][T31025] device veth0_vlan left promiscuous mode
03:58:26 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c", 0x46}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

03:58:26 executing program 4:
pipe(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x80000001, @local, 0x13}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x101}, 0x1, [0xa6, 0x2, 0x2, 0x80000001, 0x0, 0x9, 0x0, 0x80000000]}, 0x5c)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc)

03:58:26 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus/file2\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus/file2'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}]})

03:58:26 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730})
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r6, 0xffffffffffffffff}})
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r7 = socket(0x0, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x0, 0xb}}, 0xf)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
gettid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)

03:58:26 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f", @ANYRES32=0x0], 0x2}}, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

03:58:26 executing program 0:
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de67fbeae0bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e7485376103c1bbea4e2fdb04501f4dd94f3ef34b913fe591ad6403100"/74, 0x4a, r0)
r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

03:58:26 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x5, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000080)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

03:58:26 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @multicast2}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, 0x0)

[ 3079.682940][T31025] device hsr_slave_0 left promiscuous mode
[ 3079.745652][T31025] device hsr_slave_1 left promiscuous mode
[ 3079.822609][T31025] team0 (unregistering): Port device team_slave_1 removed
[ 3079.863753][T31025] team0 (unregistering): Port device team_slave_0 removed
[ 3079.889206][T31025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3079.955495][T31025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3080.044615][T31025] bond0 (unregistering): Released all slaves
[ 3080.150329][T27135] IPVS: ftp: loaded support on port[0] = 21
[ 3080.355757][T27135] chnl_net:caif_netlink_parms(): no params data found
[ 3080.425972][T27135] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3080.436412][T27135] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3080.444815][T27135] device bridge_slave_0 entered promiscuous mode
[ 3080.453008][T27135] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3080.460289][T27135] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3080.468946][T27135] device bridge_slave_1 entered promiscuous mode
[ 3080.491092][T27135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3080.502579][T27135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3080.526667][T27135] team0: Port device team_slave_0 added
[ 3080.533854][T27135] team0: Port device team_slave_1 added
[ 3080.607019][T27135] device hsr_slave_0 entered promiscuous mode
[ 3080.661914][T27135] device hsr_slave_1 entered promiscuous mode
[ 3080.739633][T27135] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3080.746822][T27135] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3080.754144][T27135] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3080.761213][T27135] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3080.798270][T27135] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3080.810451][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3080.818560][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3080.826598][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3080.840620][T27135] 8021q: adding VLAN 0 to HW filter on device team0
[ 3080.852354][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3080.861140][ T1687] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3080.868285][ T1687] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3080.886919][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3080.895771][T12336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3080.902893][T12336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3080.921465][T27135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 3080.932195][T27135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3080.946282][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3080.957590][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3080.968436][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3080.978227][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3080.996123][T27135] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3081.003349][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3081.010726][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3081.018393][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3081.026523][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3081.084710][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3081.097759][T21646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3081.106841][T21646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3081.114880][T21646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3081.124841][T27135] device veth0_vlan entered promiscuous mode
[ 3081.135095][T27135] device veth1_vlan entered promiscuous mode
[ 3081.154644][T21646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3081.162729][T21646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
03:58:29 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730})
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r6, 0xffffffffffffffff}})
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r7 = socket(0x0, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x0, 0xb}}, 0xf)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
gettid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)

03:58:29 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0xe00}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

03:58:29 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c)
r0 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000))
read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/170, 0xaa)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04e1ffffff000000080000003b0d31e441f7356030474b038fcd6254e97fddf97edb5cedada906b14a7dd0b35f0336409cac167b63c0842b8d590a88345152f7807d011b", @ANYRES32=0x0, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYPTR, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0xf, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1'])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r3, &(0x7f0000000100)=@unspec, 0xc)
close(0xffffffffffffffff)
open(&(0x7f0000000740)='./file0\x00', 0x40, 0x92)
socket$inet6(0xa, 0x400000000001, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0)
open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff", 0x2e9)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000700))
r4 = open(0x0, 0x143042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)
openat$cgroup_subtree(r4, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={0x0, 0x73}, 0x8)

03:58:29 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xf17, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
recvfrom$packet(r0, 0x0, 0xfffffffffffffd9e, 0x22020, 0x0, 0x175)

03:58:29 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730})
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r6, 0xffffffffffffffff}})
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r7 = socket(0x0, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x0, 0xb}}, 0xf)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
gettid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)

03:58:29 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730})
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r6, 0xffffffffffffffff}})
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r7 = socket(0x0, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x0, 0xb}}, 0xf)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
gettid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)

03:58:29 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f000000a000))

03:58:29 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0xe00}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

[ 3082.508979][T27188] overlayfs: filesystem on './file0' not supported as upperdir
[ 3082.550400][T27200] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
03:58:29 executing program 1:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x4000051, 0x0, 0x0)

[ 3082.591758][T27200] Error parsing options; rc = [-22]
03:58:29 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0xe00}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

03:58:29 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0)

03:58:29 executing program 1:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x4000051, 0x0, 0x0)

03:58:31 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730})
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r6, 0xffffffffffffffff}})
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r7 = socket(0x0, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x0, 0xb}}, 0xf)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
gettid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)

03:58:31 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0xe00}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

03:58:31 executing program 1:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x4000051, 0x0, 0x0)

03:58:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000d80)=[{0x0, 0xa00100}], 0x1}}], 0x48}, 0x0)

03:58:31 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730})
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r6, 0xffffffffffffffff}})
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r7 = socket(0x0, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x0, 0xb}}, 0xf)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
gettid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)

03:58:31 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730})
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r6, 0xffffffffffffffff}})
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r7 = socket(0x0, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x0, 0xb}}, 0xf)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
gettid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)

03:58:31 executing program 3:
lseek(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80801, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150)
listxattr(0x0, &(0x7f0000000280)=""/189, 0xbd)

03:58:31 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000632000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r2)
quotactl(0x2080000201, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='7')

03:58:31 executing program 1:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x4000051, 0x0, 0x0)

03:58:31 executing program 3:
lseek(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80801, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150)
listxattr(0x0, &(0x7f0000000280)=""/189, 0xbd)

03:58:31 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000632000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r2)
quotactl(0x2080000201, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='7')

03:58:31 executing program 1:
lseek(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x80801, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150)
listxattr(0x0, &(0x7f0000000280)=""/189, 0xbd)

[ 3085.661965][T27239] ==================================================================
[ 3085.670111][T27239] BUG: KCSAN: data-race in file_update_time / generic_update_time
[ 3085.677909][T27239] 
[ 3085.680245][T27239] read to 0xffff88812aad23e0 of 8 bytes by task 27244 on cpu 1:
[ 3085.687882][T27239]  file_update_time+0xbb/0x300
[ 3085.692657][T27239]  filemap_page_mkwrite+0xae/0x1d0
[ 3085.697778][T27239]  do_page_mkwrite+0x100/0x210
[ 3085.702551][T27239]  __handle_mm_fault+0x1e45/0x2e00
[ 3085.707669][T27239]  handle_mm_fault+0x21b/0x530
[ 3085.712437][T27239]  __get_user_pages+0x485/0x1130
[ 3085.717378][T27239]  get_user_pages_unlocked+0x221/0x3f0
[ 3085.722839][T27239]  get_user_pages_fast+0x307/0x340
[ 3085.727952][T27239]  iov_iter_get_pages+0x1d3/0x8aa
[ 3085.732984][T27239]  bio_iov_iter_get_pages+0x100/0x5a0
[ 3085.738362][T27239]  blkdev_direct_IO+0x5ec/0xac0
[ 3085.743205][T27239]  generic_file_read_iter+0x1b0/0x1440
[ 3085.748644][T27239]  blkdev_read_iter+0xb2/0xe0
[ 3085.753302][T27239]  do_iter_readv_writev+0x54b/0x5b0
[ 3085.758480][T27239]  do_iter_read+0x1fc/0x3d0
[ 3085.762965][T27239]  vfs_readv+0x9c/0xf0
[ 3085.767026][T27239]  do_preadv+0x131/0x1d0
[ 3085.771256][T27239]  __x64_sys_preadv+0x61/0x80
[ 3085.775966][T27239]  do_syscall_64+0xcc/0x3a0
[ 3085.780454][T27239]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3085.786321][T27239] 
[ 3085.788634][T27239] write to 0xffff88812aad23e0 of 16 bytes by task 27239 on cpu 0:
[ 3085.796514][T27239]  generic_update_time+0x109/0x270
[ 3085.801613][T27239]  file_update_time+0x237/0x300
[ 3085.806495][T27239]  filemap_page_mkwrite+0xae/0x1d0
[ 3085.811587][T27239]  do_page_mkwrite+0x100/0x210
[ 3085.816349][T27239]  __handle_mm_fault+0x1e45/0x2e00
[ 3085.821469][T27239]  handle_mm_fault+0x21b/0x530
[ 3085.826234][T27239]  __get_user_pages+0x485/0x1130
[ 3085.831174][T27239]  get_user_pages_unlocked+0x221/0x3f0
[ 3085.836636][T27239]  get_user_pages_fast+0x307/0x340
[ 3085.841857][T27239]  iov_iter_get_pages+0x1d3/0x8aa
[ 3085.846894][T27239]  bio_iov_iter_get_pages+0x100/0x5a0
[ 3085.852261][T27239]  blkdev_direct_IO+0x5ec/0xac0
[ 3085.857108][T27239]  generic_file_read_iter+0x1b0/0x1440
[ 3085.862556][T27239]  blkdev_read_iter+0xb2/0xe0
[ 3085.867232][T27239]  do_iter_readv_writev+0x54b/0x5b0
[ 3085.872531][T27239]  do_iter_read+0x1fc/0x3d0
[ 3085.877031][T27239]  vfs_readv+0x9c/0xf0
[ 3085.881095][T27239]  do_preadv+0x131/0x1d0
[ 3085.885331][T27239]  __x64_sys_preadv+0x61/0x80
[ 3085.890001][T27239]  do_syscall_64+0xcc/0x3a0
[ 3085.894513][T27239]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3085.900384][T27239] 
[ 3085.902700][T27239] Reported by Kernel Concurrency Sanitizer on:
[ 3085.908852][T27239] CPU: 0 PID: 27239 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
[ 3085.917513][T27239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3085.927560][T27239] ==================================================================
[ 3085.935610][T27239] Kernel panic - not syncing: panic_on_warn set ...
[ 3085.942189][T27239] CPU: 0 PID: 27239 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
[ 3085.950842][T27239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3085.960882][T27239] Call Trace:
[ 3085.964174][T27239]  dump_stack+0x11d/0x181
[ 3085.968531][T27239]  panic+0x210/0x640
[ 3085.972435][T27239]  ? vprintk_func+0x8d/0x140
[ 3085.977031][T27239]  kcsan_report.cold+0xc/0xd
[ 3085.981628][T27239]  kcsan_setup_watchpoint+0x3fe/0x460
[ 3085.987000][T27239]  __tsan_unaligned_write16+0xc7/0x110
[ 3085.992453][T27239]  generic_update_time+0x109/0x270
[ 3085.997561][T27239]  ? file_modified+0x80/0x80
[ 3086.002149][T27239]  file_update_time+0x237/0x300
[ 3086.007001][T27239]  filemap_page_mkwrite+0xae/0x1d0
[ 3086.012222][T27239]  do_page_mkwrite+0x100/0x210
[ 3086.016986][T27239]  __handle_mm_fault+0x1e45/0x2e00
[ 3086.022109][T27239]  handle_mm_fault+0x21b/0x530
[ 3086.026871][T27239]  __get_user_pages+0x485/0x1130
[ 3086.031813][T27239]  get_user_pages_unlocked+0x221/0x3f0
[ 3086.037272][T27239]  get_user_pages_fast+0x307/0x340
[ 3086.042384][T27239]  iov_iter_get_pages+0x1d3/0x8aa
[ 3086.047398][T27239]  ? __rcu_read_unlock+0x66/0x3d0
[ 3086.052424][T27239]  bio_iov_iter_get_pages+0x100/0x5a0
[ 3086.057794][T27239]  ? __rcu_read_unlock+0x66/0x3d0
[ 3086.062823][T27239]  blkdev_direct_IO+0x5ec/0xac0
[ 3086.067676][T27239]  ? __sb_end_write+0xbe/0x100
[ 3086.072441][T27239]  ? touch_atime+0x83/0x190
[ 3086.076947][T27239]  generic_file_read_iter+0x1b0/0x1440
[ 3086.082409][T27239]  ? __read_once_size+0x5a/0xe0
[ 3086.087259][T27239]  ? fsnotify+0x6a9/0x7d0
[ 3086.091584][T27239]  blkdev_read_iter+0xb2/0xe0
[ 3086.096278][T27239]  do_iter_readv_writev+0x54b/0x5b0
[ 3086.101485][T27239]  do_iter_read+0x1fc/0x3d0
[ 3086.105989][T27239]  ? import_iovec+0x17a/0x220
[ 3086.110669][T27239]  vfs_readv+0x9c/0xf0
[ 3086.114736][T27239]  ? apic_timer_interrupt+0xa/0x20
[ 3086.119856][T27239]  do_preadv+0x131/0x1d0
[ 3086.124096][T27239]  __x64_sys_preadv+0x61/0x80
[ 3086.128771][T27239]  do_syscall_64+0xcc/0x3a0
[ 3086.133278][T27239]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3086.139159][T27239] RIP: 0033:0x45af49
[ 3086.143055][T27239] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3086.162657][T27239] RSP: 002b:00007fabd3aacc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 3086.171076][T27239] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045af49
[ 3086.179052][T27239] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 000000000000000a
[ 3086.187016][T27239] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3086.194988][T27239] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabd3aad6d4
[ 3086.202949][T27239] R13: 00000000004c954e R14: 00000000004e2220 R15: 00000000ffffffff
[ 3086.212275][T27239] Kernel Offset: disabled
[ 3086.216606][T27239] Rebooting in 86400 seconds..