z_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:52 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:52 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c) 16:57:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c) 16:57:52 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c) 16:57:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x7) 16:57:53 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:53 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x20000a5c) 16:57:53 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:53 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x9, 0x3f}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xa8) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000180)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200000) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)) rmdir(&(0x7f0000000100)='./file0\x00') write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) 16:57:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xffff, 0xfd, 0x9, 0x8}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:54 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:54 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:54 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:57:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) 16:57:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:54 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) 16:57:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x130) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000cc0)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x6, &(0x7f0000000540)=[{&(0x7f0000000100)="ca53b23dfe1610110c2d00f282a79712689ba94cd98dce1da1c62677cfd243463bcebdbc685f39c1908abb7a28df3a6956ec114d22586e1df59b3ac3fc62709a7a30c47c357fa4b6eaa59f951e0afaef06046d8039eaaa383cc21afb57a08a5489f250e081072a7d3b9dfa8e42ffe4b74f931779032c31c9d2e45e1701517061cccb7b3ca9db8079f1f185fd0020aeee33a79f1101754dd1aeb367a5d6f015f5da07dc6d393bef03bd89ec289e91e8bee1e342d7bf57107abac49293e0edb7fe38a233c7237290485cae8e71f0f3e67d63fd", 0xd2, 0x3}, {&(0x7f0000000240)="1bca0b62c1602a722f9f0546f6efda317f98220ebc6961e2cd3ad719b9241896b0eae1bb82718d801e16d2d41a5ab0f6e3339d4ab840215ead73148225ce4e7973c1fb3b49b2b57ecc409cc32057334d1f922366ca63fe13a41b3ae55d793cdceab316f27cca8af7ce7b0e5fb83292ec7167c9f5748ae0b36e83c214d66bcc1c74fe661c6561f7e6006899b88c06291cd602f2a5ba", 0x95, 0x8}, {&(0x7f0000000300)="6ebb0972be4691e441bf9db33871d944ab2d6be4613184eac816ae7b2525c43616c086fccd05eebc433f51d3b18a0f5521b8b17d0d2ec1df32d91e9642728f9e7c2db6ac9f5daa19df8cf800dde36a6e90ab7ca2e0e99e75d45d33ac4e315e89007f1068b72addc3c939157b8927a96a13561627595c9c6a56c6f17a95441c46f2397e64640f", 0x86}, {&(0x7f00000003c0)="8232d762e81a945256b5fadb70f4e7ab802df39569e2abbe7c3916e4380d8e06acedfee511b5ffe14cbf3b72c0aba0bbda61b4ddbb28ccfe8107744ac0b09334e5049aa4e17e4403d6f2e846ce8df6d2a1c545f073489175ec98bcd346553465ac81d924e778fa1d66800db378ca93904d412687a9a7f0424ed2", 0x7a, 0x5af6042c}, {&(0x7f0000000440)="4b942e396e711faa1589c5859431b2c922071f242de65b6390de3fa25b44dbcdab2b9c6224f9b73345554032c4f90059", 0x30, 0x100}, {&(0x7f0000000480)="11e723f396c9f96854a62e9faafd97dc8b1756e696a0597e6000f8eaf0e63529fe288ada390a797002edb42afd72b76cbd1b9b291fb7e404ca8fff338d804ca0f957037e5735f6f708518caeacf26e1c43f551418ae7dda3df27e636a2b2d9a8971a", 0x62, 0x5}], 0xc0006, &(0x7f0000000d00)={[{@commit={'commit', 0x3d, 0x29}}], [{@obj_type={'obj_type', 0x3d, 'vboxnet1'}}, {@permit_directio='permit_directio'}, {@pcr={'pcr', 0x3d, 0x38}}, {@obj_role={'obj_role', 0x3d, '\f'}}, {@audit='audit'}, {@hash='hash'}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000dc0)={0x20, 0x6, 0x4, 0x572ffe92, 0x3ff}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 16:57:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000080)={0x9659, 0x40}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x92800, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x736) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x9) 16:57:55 executing program 2: 16:57:55 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x3, 0x200) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)={0x24c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x249}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3395, @rand_addr="d528a1821acb500b23f0a4cedefa1a7e", 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x67}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6b09d906}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x713}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec65}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}]}]}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x36, @loopback, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x25}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:55 executing program 0: 16:57:55 executing program 2: 16:57:55 executing program 1: 16:57:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x7a, &(0x7f00000000c0), &(0x7f00000002c0)=0x14) 16:57:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) 16:57:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000800)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000180)}) 16:57:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x65}) socket$inet_udp(0x2, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) unshare(0x0) ptrace(0x11, r0) dup(0xffffffffffffffff) 16:57:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 16:57:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x480100, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={0x0}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000100)={r4, 0x80000, r5}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0x3, 0xa9, 0x7, 0x10001}, {0x7, 0x8000, 0x4, 0xaef5}, {0x7fff, 0x1000, 0xbdad, 0x9}, {0xfffffffffffffffc, 0x6aa5, 0x3, 0x8}, {0x1, 0xffffffffffffffff, 0x5, 0x2}, {0x64, 0x7242, 0x4, 0x4}, {0x5, 0x9, 0x3, 0x1}]}, 0x10) 16:57:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") uselib(0x0) 16:57:55 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 1151.124396][ T2945] binder: release 2944:2945 transaction 10 out, still active [ 1151.159755][ T2945] binder: undelivered TRANSACTION_COMPLETE 16:57:55 executing program 2: [ 1151.183225][ T2964] binder_alloc: binder_alloc_mmap_handler: 2944 20001000-20004000 already mapped failed -16 [ 1151.232726][ T2945] binder: BINDER_SET_CONTEXT_MGR already set [ 1151.242871][ T2945] binder: 2944:2945 ioctl 40046207 0 returned -16 [ 1151.249586][ T3049] binder_alloc: 2944: binder_alloc_buf, no vma [ 1151.256026][ T3049] binder: 2944:3049 transaction failed 29189/-3, size 0-0 line 3147 [ 1151.264693][T31397] binder: send failed reply for transaction 10, target dead 16:57:55 executing program 2: 16:57:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x4, 0x0, &(0x7f0000000480)="f27aec43"}) 16:57:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)=0xae) 16:57:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1151.283648][T31397] binder: undelivered TRANSACTION_ERROR: 29189 [ 1151.378288][ T3144] binder: BINDER_SET_CONTEXT_MGR already set [ 1151.385316][ T3184] binder_alloc: binder_alloc_mmap_handler: 3138 20001000-20004000 already mapped failed -16 [ 1151.415012][ T3144] binder: 3140:3144 ioctl 40046207 0 returned -16 [ 1151.438579][ T3144] binder_alloc: 3138: binder_alloc_buf, no vma [ 1151.452024][ T3144] binder: 3140:3144 transaction failed 29189/-3, size 0-0 line 3147 [ 1151.458999][ T3142] binder: BINDER_SET_CONTEXT_MGR already set [ 1151.465548][ T3144] binder: undelivered TRANSACTION_ERROR: 29189 [ 1151.490357][ T3142] binder: 3138:3142 ioctl 40046207 0 returned -16 [ 1151.513031][ T3184] binder_alloc: 3138: binder_alloc_buf, no vma [ 1151.526562][ T3184] binder: 3138:3184 transaction failed 29189/-3, size 0-0 line 3147 [ 1151.546871][T31633] binder: release 3138:3142 transaction 13 out, still active [ 1151.576273][T31633] binder: undelivered TRANSACTION_COMPLETE 16:57:56 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) 16:57:56 executing program 3: r0 = socket(0x10, 0x80003, 0xc) write(r0, &(0x7f00000000c0)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 16:57:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x4000, 0x0) 16:57:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) 16:57:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) [ 1151.601609][T31633] binder: undelivered TRANSACTION_ERROR: 29189 [ 1151.629052][T31633] binder: send failed reply for transaction 13, target dead 16:57:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) 16:57:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 16:57:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:57:56 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 16:57:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) [ 1151.874901][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.881151][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:57:56 executing program 0: r0 = open(&(0x7f0000000280)='./file1\x00', 0x400040, 0x0) getgid() close(r0) recvfrom$unix(0xffffffffffffffff, 0x0, 0xd6b755b61e7df6b0, 0x0, 0x0, 0x7c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, 0x0) stat(0x0, &(0x7f0000000780)) getresuid(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003500), &(0x7f0000003540)=0xc) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000050c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) stat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 16:57:56 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) close(r0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x14) 16:57:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000015, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x7, 0x7, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x80, 0x38f, &(0x7f00001a7f05)=""/251}, 0x48) 16:57:56 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2718, 0x0, &(0x7f000033bffc)) [ 1152.274922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.280717][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:57:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) 16:57:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x12, 0x44143) sendmsg$xdp(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="983c0724848654f4e463058ea997b95f34a2278c4e9e5e65a132b860539dbe315acb508abaaace9a30c3d1b24eea4ae78a6ee24f6757a2eb07cb1a61f5098826ca1f6c710f23ba622b3648bcedb4f804ef2e32889f165c61c2281e4a497070a048593b4deb6dc698f627f9d29c1b06f25245a61ae6b116d5c5fe5c5ffc4a8e4123cb907fff05e41dee5cfb63347fe742fad1fdba40f39ffecf008c60569db342518a57e8f42af988f391e1ff3ea1b0fb1fbb00ceadfabcb7bfd630bec33dca3ee2e52de454f22afe9885f1563998f4746572039a4a977c245fae2edf6d5668872a1a695bd5c0980473b7590762579427e629e53524ed4dbe3f6e2d46c7bf5c82daeadbdf105855963e232b512f82a52895daf68802e46bf7116bd8e3a0cde9a42a5a3a557072d29f2392edeeecfbaa2e505aace99d319a33b6fe1205b0141310b3d91dbe604dc962ae85e197cf468d774894848ea621976153f06931a1494345570bd67c921ab3c49c02f90e9fe637c70bafbb6b9da92881666b4abddc1463a33ee41820efbdd6282a7694dbd0c8745501b5183c4f5343882015bb55511f8bda92ed96154658cbc0572e1e304c0884555543a2b79b134d57ca2f17ec4b1ad82015e46b51f256aa961483144546d091be8bb051020026cc951836d5ea076746d61678eb600bd05753c3cae655b3c8d6847481b5b1a11c0fe0799b4cd5b12721be58a527d5443eed81ffc998700ac9539155d2d40e15dbe3d60e53df66fed296296752b7e3fb9d7645b01b4f7e8e4e6f80b904d2ab6eee6259a58b213c1120bd68961a35dea0190e95b79df2c07ac9d6d6989656d5b2031ea27e89ac9c3f358226b450b90814fa167bc4587e12c85aa978e77f98251af08055f655624dac5e1791925b3a75156c435845371e98a826fced1220347f7791a8def344d789e559ee3e746d2628600ab66fbf68d2a80a49247b08c576352ca2b98ee9757867a1bca9ccaf91908d2561ac447fc402b407520d2b65bbff5203092b709570e3108fd511b5891c305008e544bbf1139a096aefa941a813332c54abcf2653502b3df3660a270fcc6aaadb9aa402715b9b8a766122417a5873d5d001f5ad582f885baed407367683b629013fd97b5c00aa19fff246fc9b6aec027a78c1d5f3defbbdd4f6d69a9b225fa76b07f3d510fe938393a547a3927c4f5acbedd84e04e4e4b980d64bb0c17476662d089a5dc5a9dadc1ee45e1701aad9bcec80f227e79d3b1fdfb2ffd3d221d40997ed90a3e7e3434f48568d68ec3f45d7a7b09ffa56583dcfacbc36afc630df95cd40f35763d5dca7d073d137d3f9fbcc4af76c0960289a73f14d8e7c86df410850df665590e384184ed884b47c6afd2e374de212b0c982dec96af64c0f7edcee0fd93155e6294cb4d8042a126aa2587fa44b6d64d1ac69eb29f5ca3b2e3f297984206c26547180774577bc5f6bb28305bd29f26e328947e7a54f823726e6aa662b7b980a316d74ce2b3f9393e7c886b750cdd5f2b231ebb28045c95c7587cbf8d3d1cb859fda34ae85aa7b4a1b50d400c37ae86c715dd445aab564a048b9529498b96fd7179c55ee82d468a18295838b4210dea9b1a510d8aeb50dc569b98ed55962c5a243361bc96d4f32b8d7a5cd43f7f947352e0920547005bf2483221de5f0b64656984918b8988393cf461d059198ebe372e010711bdd529985888c0110c760733061de3a63ce9ac576fb1f045cf8d0345cabf3303076656a170fb6e0139b7ba5284acf612b04c558086d43fe5380b8b8249abeb3310dc7429f8090cab88a5abb2ccda35573344d70d300a475551c3dae559bccd92133ee446cf0fc3fa8666a6e7133343d4f39b37ae7f32538ad6f56eb2d7a157d04a43df41daf17198e9c9488c7064d3a55a22a877270a9b41fa4a2f81ed6ca1727158fd18b1686faaf9b687c5ac80de84aa7cdf7dff8bb8e23968d67c8079ff803c38a0ade2439bf84cb1b8c3aaa5bbf0fcbf4b2a93056bb094d1b38b8813ff4efc044e9cddb364d384beacf5833c18db4fab8a851a0d27ce9d3c8044a3b7d02998ee4335444bc8332993349a81cbaec8fff3b6a9b306148ee90ba875acd9dfd1a15ce6e9897cf289c4988741c40ee43788703ce5656548d87c33a76fc80889e0ee73b751f394cd8cc94730f1bf9766684a4deff15987c5d15b0f6631b54681746c1c3c9f7b342acc53582933f381fe427fab8a3c0d6ee2a77f6497d1e3ab51206ba2fff8a66cf144787a1acd257c7c95608cf505fc00897bdda0af95a747038634a6c66b5b19a23383f10c84c9056425d9fd2ef3c3d9a8bb8d88dd7aee310f48d9a29041dc5a222ba9e2e9799357c6e2443571ef1a7aaf00f52a10e3f6b950e405594512731fb4f8edb18a1d792b6ee799a3c8e051daf3711b3335740b5070638695f58f10bf36714a2439f1ce6906c856df685b6eac748c54378dcfa4e2c939a450d01d454be37a250565dcb91e9676b694787453e6413209691bda2256143b37e46275179743a7d3e09910e45994036917a0abc3c3ede71b777e6ef2b6b9143d73e6487a29a8d24752327c5f98fcbe5e18739c417b79ea5956adf3e3369505b8d65cfb276b601c5f39b71c8ed9ce017cc12386cce652294003fc646910bf8d71d4b6fd0ef8bc121179536c6fdc9e36db1bb40675a26ef3f75ee6564186978754ce33ee0387c43f12346fe0ae3215f2e401511f843fe4f9110895c12aeb28013623875ce09c0398da4da68158ca6eab16adc07c2d0e51bf331d33777a2aadd04096bc7a58b185fd2792f8d1f4d9d52ad05613e51ad9a16fea20a0ba7bcdf94301078d5aaefa94b14e1cfb286560d3b5e8ff7b7312b0fc884be880ede0a85d828af5315627c8b9d5e0b65e9f164b2153e6c2797c824f55d0e454254cd8c4832ce1bc5cf4e79c07178a5011f02aa18fa917f41d995e9eb881ddffd7ef562f7a9e0b44f1fd1943f54e82d0986202d76e1d75e5bbc2507033ec4006998f2508cabc852413271b8a731b6080f5ac0bcf78f9db61c61084d4ca072177bb08b2e1410a5317ab2f3a907ec25c1092d9e84fd91722defa315ce63f4393ba06539c0f5281a5d40a077c75746d732bd5bb3d9780989e2b29735d7a17d13979d34dc85c40a351ed192b85cf31e5b04fa1fc8cee4077cd6f8a8044017d0375f50de712f422bedd70a7e03f3cf54b42d3aa340232b03d7872f6a7c54e0b99db5f00e1e1c654d91f3e11ee92d7a9ea39d6060a195f8ff72643e593312b39c509162a69ef86bea7f9dc418a2bc8c090052e55f3a5df8cea0c5a07cb916c186b5f081fb6d2e3db2409f80152d53208ed8743cc810dec96313283b955e36a760ea79ebacac81712a601d86ad359a42807cce9178dd8b90c33d425dfd6eb09619e92deeff862b4d3b66dc1aa403a2da7115953f41aa1bfafaf22c6a3ec9ab48ac828fa1476107d5581ed8fda119cbcf29e8d5ac6853d5a00cf42d95ac6eddeaeb4616f903ecbed24f27d5528386c198c295a8ce6432a56832bbf05e39eddf4c3293496a5f3832465a535f15d8e1818308f37e5e5bc1928f706c02e802c1024361653d894c51f3a43e650ffdfd743c8e6d5e781d059ac50616b86dfaa3efcf486ed076d5d8034c72fc08de2ce4e54b718515801f82f43b4a19f0e0db15c63cd28aab0a5e8d1b1af228df189b4a6c6362d56785a308517b6a9c423757b1403d1ca54d61831bd296b6f113673e9d11e9d4056b5062dc115f97af9687b54ed12af751c6bf225e0426bd5fde0311ab762e220ebeea4df1a99e25dfbaa8b6af8dee2af850121434a4a2c5dbae414c3cd309ff30da8c16c175d7e9acb77a9423a91d0a9429516d9eb8df80685f365f0765160ea0f35570b9c0e44e700544365ad0d3610ada1158599246b60e6336a251e3f4cb72f49c7708e336c3b98842032aa64576bc4494e4971bb7bba9ceaca360c918481a9422993c26c9fd2e2118a732d415baa104fbadfa8a5fcf3b348900b300e3eda373ca969da6e853efd300873025fc1ca9e5665f90b2366637f0fa5fdf09959187b7e5ad9eb0461ecab00e83189f4c1d008b5893c224b7c8fb8f235640debbdcbf42adc224b0cb95295652c171b0c4852497cef600d57d4a164d5ba0580b5d34f8a3ac1e5dbcfcf45d257e7fcbc138b5d7ff40e6bb1fe751667e3abee403ae7c036c8dda24126e05d903e9d6aa727a6aeaa9c538c243e60249ca3d27cabdec9e8662bbc94a2a49a2beabbc34cdb8fc2ff8cee254f7e40e1fb44c20e839fcab4576a0195203748d41a83ace756cfc2ba14e0196e4d80fb98ee29185e41cf6756e5e91f0fc376dbbc3b0d66459113db3048e308d2686fbf8192403739b2ef36dd84f49d25fe0a0f3928b2c92c3ed924d1581eddd2acfcfed43a74fe8d969b2a8050f2743c1212341a7d33ad8fd21e14cf7f6c54032ff92558584d9ad0cf7552db97b78a85d2e872bcd80698ac74510272aad361786c57123c89e088237a6bd224a9ba5b651ea3c1f963af728706695dde7df0201393a77af25d376c0c9ec2e240e1d5ca24838368a83939dd5ecfe221f53ca65efa8adbac86019404287e8934780d53a0ca24a22da9598d07f8cf8f4b53d6446841ace71e7a880c1bd67abfcda0aede31bd3fe950aedda5d02d0762827a39689b54ef6a53968efea860a4875fb5c7bda175759b0f965455c26a88e3a000997b0ff8fb517ed2422e6356bbf284c54f8e4a146e66b49681f693acd6c015578b360a22cf2265601f5c1cee3a6e15ebf0a1e65e50e0593a6cbe952137fae286549a30cdadcd8deeb757fdd39c7392a678b185e7d58c89083a69c81e0e10c0fcfbe7626a3e78e5766010a693dc728fdcb9d78ccb52caec4129b9e8fb35ca3d9cb2f0104470321a3578735560879fb26649fc5b0a0ea819579d5e2fad869384c249975f0646ceffe8513b7f416cbbafedf95772714597950f2b66b01b337ac196b18a4310d77c76cf1e3f370d8975628ade11164e2d7ca6545cdff418829e3b1b20a2dc9d7f3e6e7706b151be6d424a52a102364d96064ab126bd9c0317dc3dfe6064113da9b40b242308383f0667ad8876c527949b9ffb9accfde1a0323bb574423db39992af48bfeb5405173ca1847cc19cdb3a5a07f68ff3bc4363be0d283acc0a0023df5c794753751ce6f09f51c87f73aa04347989c8ec2d9d9ef767b3eb898193fe57851e2b4871a38afd44fe55f1890d60643db20e29293ce56d0143e7fb87aa29c8519f16c628477f86504a8e8f372c2256a45c87692603377eac6f31c29dff7af334006195382eff12e97f2c79d42d21fec98bc7fee9e7e3a27f2e5ac15adfded857c41eefa39a3a87159f6b411cef51b49975ea7e80b64d76d753e08afe34b9f5a86f039bc8ec92db74df1ce0fac76010d7d6a7a0e41011908f4776f8f00cc129429c4c453ae60a9c5c443b52012e35dfd75d64b13b00f7ce51bb83dcdf16d48bba1a73a6d8c46c500fec645283fae382f34e1655bb710c89cf1bcdd55ce1ba94bdae757e9c2ce7fb0dc2efe87d8f85cedee2cd9d25efa5ca90affb437f6c9565a35bcbf75f8449817c2d0379d3a5f2550c2b9011ec1e8a5b129c798bfbbbdc82d99dc16a4617774382fd4499d1d60b0a118bfbd56b497f7a68e6af28cff4d9efe49313df67099fab1142e7e35885d4f78c4c3adb6d463d0fe3d66b13dc3e5baad43febe8a57db466325be8324e2632a9c4a8fdc8d89ecff4b4a2525b51616f83cedefe5dd3f14ded393", 0x1000}, {&(0x7f0000000240)="60843620ef00c51cb667326503718b44ff11e3f10b037d320258cdd407d30de7b715258be51b7b3055619855de305b59521f5b256a66b93f8488a7d30ec8994e32d3441321e6753aae1570a9b2b0d072f116a21e16a54d7a769ee5ec421ccc01baa87b0ef6ed5330aaf44c4290c235409ab3939ca0315c5c564e60d681926b07b040835514e18c9e90fb68536f07f312d6d38a1adcc06f416f35b2bdf8f5e06572615d48969818dadb9c5747bbdb94eaa05b5577358ef70e2424a1ecc315612c2c4395379ad8f316cf600f75f0cc", 0xce}, {&(0x7f0000000180)="6ed6a15a794bc7ee83371fe39c7f4214ca2895ce26915258aeac5ba2a477fec77ee8448db7f16104825103f4321898783c803e0563814610b7fea5c6b003bdc50fb876260953480ba795ca58ca0ecd161ffd7bad8bf21cb13c7fc0b9b4e9bbe5a59ba2ccd315b4d3fed2f24c92412a4f6d69f38311", 0x75}, {&(0x7f0000000340)="5bf61c1116787d9ad12dca035aa30403dbccbe9b81c07de8f3231f8891b38f7c90a7d964b1accdcdcc3da4d3ba41019153b9108646e34724f8b00872eb440d6cd2337b8fbe5f5c74f9fb24fd4f4f19e456fb6719b43032c10e02befc411b275238d2a479d64bae801cac3830ed82dba95a4d3375ba636de2fc4944a40f60550980ceaceb774c57f6839ecbf3594eeb5b6778d246276901f79abf985a5c970caf933560", 0xa3}], 0x5}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0xffff}) 16:57:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) 16:57:56 executing program 5: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, 0x0) r1 = socket(0x0, 0x0, 0x1) unshare(0x8020000) semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x400240, 0x0) fcntl$dupfd(r0, 0xfffffffffffffffe, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000000, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x06\x00\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x03N\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 1152.445662][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.451707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.074953][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.080787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.475256][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.481313][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:57:58 executing program 2: r0 = socket(0x20000000000000a, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x0, r1}) recvmsg(r3, &(0x7f00000001c0)={0x0, 0xaa, 0x0}, 0x0) dup2(r2, r3) r4 = gettid() tkill(r4, 0x16) 16:57:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) 16:57:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) r2 = syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x0, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) write$P9_RGETATTR(r1, &(0x7f00000007c0)={0xa0, 0x19, 0x1, {0x0, {0xb, 0x3, 0x900000000000000}, 0x3, 0x0, 0x0, 0x4e, 0x20, 0x9, 0x6, 0xffffffffffffff96, 0x9, 0xf401, 0x101, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x401}}, 0xa0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000340)=""/35) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@loopback, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) ioctl$RTC_AIE_ON(r2, 0x7001) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000600)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) write$vhci(r1, &(0x7f0000000980)=@HCI_EVENT_PKT={0x4, "143e39c8061184d12d3792a1a53ab2fb306ee2de57b523797345f0a0edb816c86d3f12d904cfe764fe62664a5feed7d160b0c30e7155a4946fee224f7026b2ecac2ece6b9e368b38f8859f3f10f7779d83d6de4860bdfc1b44909a1b3a6a4a26374c4c539eaf0cada157efdfe50a4b5e352820ea2ba40a16e673d359f1e01dcb165cd54cb219068c0986be9b1e71e054ff6fac47807629827990241423a78142bc3446f3d24f37f7431baf852266122af5640d591ac8cb2070301a44420d4dffdf9eb526"}, 0xc5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x14000) ioctl$VT_RELDISP(r4, 0x5605) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000004060501ff0080fffdffff2e0a0081c37611f04385ff03007d0a00010c0000000000000000000000"], 0x2c}}, 0x0) 16:57:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) 16:57:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006e80)='/dev/dlm_plock\x00', 0x4000, 0x0) bind$x25(r2, &(0x7f0000006ec0)={0x9, @remote={[], 0x1}}, 0x12) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r3 = epoll_create1(0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000006f00)={0xfffffffffffffffd, 0xc, 0x4, 0x4008, {0x77359400}, {0x7, 0xd, 0x1000, 0x8, 0xfffffffffffffffd, 0x2, "2ed86710"}, 0x100000001, 0x3, @offset=0x2, 0x4}) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000000)=0x200, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='syz1\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) recvmmsg(0xffffffffffffff9c, &(0x7f0000006c00)=[{{&(0x7f0000000100)=@caif=@dgm, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x3}, 0xfffffffffffeffff}, {{&(0x7f0000000300)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000001a80)=""/241, 0xf1}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000002b80)=""/208, 0xd0}, {&(0x7f0000002c80)=""/197, 0xc5}, {&(0x7f0000002d80)=""/204, 0xcc}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000540)=""/181, 0xb5}, {&(0x7f0000002e80)=""/100, 0x64}], 0xa, &(0x7f0000002fc0)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003fc0)=@alg, 0x80, &(0x7f0000004300)=[{&(0x7f0000004040)=""/65, 0x41}, {&(0x7f00000040c0)=""/53, 0x35}, {&(0x7f0000004100)=""/29, 0x1d}, {&(0x7f0000004140)=""/44, 0x2c}, {&(0x7f0000004180)=""/149, 0x95}, {&(0x7f0000004240)=""/65, 0x41}, {&(0x7f00000042c0)=""/13, 0xd}], 0x7, &(0x7f0000004380)=""/12, 0xc}, 0x401}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000043c0)=""/39, 0x27}, {&(0x7f0000004400)=""/99, 0x63}, {&(0x7f0000004480)=""/99, 0x63}, {&(0x7f0000004500)=""/145, 0x91}, {&(0x7f00000045c0)=""/36, 0x24}], 0x5, &(0x7f0000004680)=""/215, 0xd7}, 0x3ff}, {{&(0x7f0000004780)=@ax25={{0x3, @bcast}, [@default, @default, @netrom, @default, @remote, @null, @null, @bcast]}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000004800)=""/108, 0x6c}, {&(0x7f0000004880)=""/105, 0x69}, {&(0x7f0000004900)=""/62, 0x3e}, {&(0x7f0000004940)=""/253, 0xfd}, {&(0x7f0000004a40)=""/216, 0xd8}, {&(0x7f0000004b40)=""/4096, 0x1000}], 0x6}, 0x2}, {{&(0x7f0000005bc0)=@caif, 0x80, &(0x7f0000006000)=[{&(0x7f0000005c40)=""/155, 0x9b}, {&(0x7f0000005d00)=""/158, 0x9e}, {&(0x7f0000005dc0)=""/98, 0x62}, {&(0x7f0000005e40)=""/85, 0x55}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/37, 0x25}], 0x6, &(0x7f0000006080)=""/192, 0xc0}, 0x40}, {{&(0x7f0000006140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000006500)=[{&(0x7f00000061c0)=""/251, 0xfb}, {&(0x7f00000062c0)=""/202, 0xca}, {&(0x7f00000063c0)=""/236, 0xec}, {&(0x7f00000064c0)=""/18, 0x12}], 0x4, &(0x7f0000006540)=""/78, 0x4e}, 0x26}, {{&(0x7f00000065c0)=@isdn, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000006640)=""/250, 0xfa}, {&(0x7f0000006740)=""/226, 0xe2}, {&(0x7f0000006840)=""/155, 0x9b}, {&(0x7f0000006900)=""/226, 0xe2}, {&(0x7f0000006a00)=""/112, 0x70}, {&(0x7f0000006a80)=""/29, 0x1d}], 0x6, &(0x7f0000006b40)=""/155, 0x9b}, 0x7f}], 0x8, 0x2000, &(0x7f0000006e00)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000006e40)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}], 0x10) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:58 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getegid() perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 16:57:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl(r0, 0x5, &(0x7f0000000040)="fc") ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) clock_nanosleep(0x1, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0xff02, [0x40000106]}) 16:57:58 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getegid() perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc0000000000000000000", 0x4b}], 0x1}, 0x0) 16:57:58 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x31) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) [ 1154.113231][ T3969] FS-Cache: Duplicate cookie detected [ 1154.118786][ T3969] FS-Cache: O-cookie c=000000003c1fc2b5 [p=0000000017c839f1 fl=222 nc=0 na=1] [ 1154.127864][ T3969] FS-Cache: O-cookie d=000000002335b6ac n=0000000092db0dd4 [ 1154.135134][ T3969] FS-Cache: O-key=[10] '02000200000002000000' [ 1154.141240][ T3969] FS-Cache: N-cookie c=00000000cddcd90e [p=0000000017c839f1 fl=2 nc=0 na=1] [ 1154.150111][ T3969] FS-Cache: N-cookie d=000000002335b6ac n=0000000010fa780d [ 1154.157356][ T3969] FS-Cache: N-key=[10] '02000200000002000000' 16:57:58 executing program 2: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, 0x0) socket(0x9, 0x0, 0x1) ioctl(0xffffffffffffffff, 0x0, 0x0) unshare(0x8020000) semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x400240, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000000, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x06\x00\xdc\r') 16:57:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x10000000000002, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 16:57:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bc070") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r1, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001900)="83", 0x1}], 0x1}, 0x0) 16:57:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr2', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000180)=0x6d) 16:57:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x40400) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={@initdev, 0x0}, &(0x7f0000000400)=0x14) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000480)={0x5, 0x0, [{0x25f, 0x0, 0x7}, {0x834, 0x0, 0x4}, {0xc0011bff, 0x0, 0x3}, {0xbff, 0x0, 0x8}, {0xab3, 0x0, 0xcb03}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@local, @in6=@rand_addr="6441d68fa94e813648036c7b4e07be96", 0x4e23, 0x5, 0x4e24, 0x1ff, 0xa, 0x20, 0x80, 0xff, 0x0, r5}, {0x800, 0xffffffff, 0x1, 0x1, 0x2, 0x0, 0x6, 0x100}, {0x1, 0x9, 0x3, 0xee1}, 0x7ff, 0x6e6bbc, 0x2, 0x1, 0x3, 0x3}, {{@in6=@rand_addr="d5d226243aedef33247f786100154a23", 0x4d2, 0xff}, 0x0, @in6=@ipv4={[], [], @broadcast}, 0x34ff, 0x2, 0x2, 0x1, 0x80000001, 0x5, 0x7}}, 0xe8) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c0000001500000028bd7000fedbdf25ac141426000000000000000000000000fe8000000000000000000000000000bb4e2000004e20cc1f0a00808021000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="ba6b6e000100000028001a00ff0100000001fe8000000000000000001d0a007fef08001d00080000000c000f000100000000000000000000000000000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x1}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) 16:57:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr2', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 16:57:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bc070") unshare(0x400) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="b7", 0x1}], 0x1, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7350b4ddebe2956fbaf863178c4a6966adfd59767c92f9c817c3397a64f6267c2b1596e6effab742857d3e4355824eb944badae15d4a000000000000000000"], 0x3f) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000007, 0x0) 16:57:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0xfffffffffffffffd) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x3ff, 0x0, 0x10001, 0x4}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={r3, 0x6}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:59 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffffffffffd}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20002000}) setsockopt$inet6_int(r2, 0x29, 0x800000000004, &(0x7f0000000200)=0x8dc0, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r4 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000050000008100000000000000eb0000000400000056556036227c15baba503deae33bb9142454beb8a1b80409a4453d754ceee5eaa6cab1da270951c031f7c7da369b06063cae6193e73d1e3fbe7522ef5b0878424232e77855ca810b0cc44b871238710e677ce38631688c943ab86a7aa19016592ff01618104a8975066b56e0161c8e519c7c77d8ce06b6475140dae09feee4aff3b925fc415fe98cdcfbb746fc81669959e663ea54c2630535debcdc9b732017b2daaba3c2d05ced724e0b66e87d7bd88a7e2fcac76d832e97b2d85ebbcbf3ef66f57052e9f80bf991d77cd9e50e6c20b800000000"], 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x4e20, @remote}}) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab16, 0x0) 16:57:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40, 0x0) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000100)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f00000002c0)=""/215, 0xd7}], 0x3, &(0x7f00000003c0)=""/173, 0xad}, 0x40) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000040)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0xb, 0x1, 0x7, 0x0, 0x9e8f, 0x81e, 0x8}]}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:59 executing program 2: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, 0x0) socket(0x9, 0x0, 0x1) ioctl(0xffffffffffffffff, 0x0, 0x0) unshare(0x8020000) semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x400240, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000000, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x06\x00\xdc\r') 16:57:59 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x3ba, &(0x7f0000000100)}], 0x492492492492805, 0x0) 16:57:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x440000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r2, 0x4, 0x3}, 0x10) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:57:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x0, 0x0, 0xffffffffffffff06) 16:57:59 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623690400080004000c0816000b000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8", 0x4b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x89, 0x0) 16:57:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1155.431700][ T4626] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 16:58:00 executing program 0: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) accept$inet(r0, 0x0, &(0x7f0000000400)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240)=0x28, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000716000)=@in, 0x80, &(0x7f0000685000)=[{&(0x7f0000001480)="b5887200000000000000000057a2d327", 0x10}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="a3c0f7f541e5dc1a55924e734ced56fa9c2968e37081f63bb8dd1190f016d2a8c5e38dd63dd5b77313710a21d5ce6e5bf09a9f8f8924038fef2d6b9041a8650ed2283394b2680965b0eb489712035b9287f62ca72620", 0x56, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="858a030000000000000057ac008f6f4a34328382df63dd04ba734e91f3813956096a5fb2bf3f35be7ac08e0cd1d437da19970180000000000000f8d9e89bcbdd527b6d20602febf51a3c8ed0b2e8ebb8fc864b21856fa37d6e75250490540dab3c98836e20dd8181a2610ad4df0000000000000000000021d17ee438a394598d9469d84905ac6e2739c2acd632f99bd9a87ad8a42b5b507288f2d2d816761c2c041a9fb32ff39fdb6819bc7d906a9acfcd231a20e4173186f1fc91223429ab7133b0ca1e210eb05041006dc490af04390d2a103c9ab5682086635d28c1c6f7f714360dac61"], 0xe5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000280)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {}, 'nlmon0\x00'}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xfffffe47) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0xf04, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendto$inet(r0, &(0x7f00000001c0)="d4", 0x1, 0x20000001, 0x0, 0x0) 16:58:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'v[th1_\x10\x00\x00\x00\x00\x02 \x00', 0x8}, 0x18) ioctl(r0, 0x8936, &(0x7f0000000000)) 16:58:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1013686a1fcd618673f9c69471d0f84f614989c68429e089e720f133a5543bf57002c48d527c4cf06c0e4d13bb7b1e69461bfe2f74025772dd0544b208ca60be391f123242282e11aacd6ad1b81d2c0aae92799ea73683ab0e23b6547022cb3fa8fe533349403236492557607f1c66a436306b296b2ddb5dcfe947c479eddf140f0acd3be3190d609ed57cf4b4000000000000000000"], 0x96) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) fallocate(r4, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:00 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 16:58:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 16:58:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 16:58:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:00 executing program 5: r0 = socket(0x8000000010, 0x80803, 0x0) write(r0, &(0x7f0000000040)="120000001a002517ffa9811d042dbabe04fe", 0x12) 16:58:00 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000000c0), 0x1000001d1) tee(r1, r0, 0xffffffeffffffff9, 0x0) 16:58:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa000000000100000000000070"], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 16:58:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f00000003c0), 0x268) 16:58:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 16:58:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x7f, 0x1}, 0x546) dup(0xffffffffffffffff) r3 = semget$private(0x0, 0x3, 0x80) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000180)=""/161) 16:58:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 16:58:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x5f68d3dd372e04fb, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x10000000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) 16:58:01 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) open(0x0, 0x0, 0x0) utimes(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)) 16:58:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000009) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r0, 0x0, 0x0) 16:58:01 executing program 0: r0 = memfd_create(0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x1040800) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x0) set_robust_list(&(0x7f00000015c0)={&(0x7f0000000640)={&(0x7f0000000440)}, 0x8}, 0x18) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x2c0, 0x0) creat(0x0, 0x100) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x90000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000001c0)=0x3) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) fremovexattr(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast2, 0x4e22, 0x4, 'wrr\x00', 0x2, 0x8, 0x5b}, 0x2c) write$9p(r1, 0x0, 0x0) flock(0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) 16:58:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 16:58:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x4, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:01 executing program 5: socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000480)={0x0, 0x2710}) 16:58:01 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x9e96) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'tunl0\x00', 0x3ff}) 16:58:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='cmdline\x00') r1 = semget$private(0x0, 0x2, 0x8a) semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x3, 0x3}], 0x2) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) 16:58:02 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) 16:58:02 executing program 3: syz_mount_image$vfat(&(0x7f00000016c0)='vfat\x00', &(0x7f0000001700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:58:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000500)) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x40) write$P9_RWALK(r2, &(0x7f0000000040)={0x23, 0x6f, 0x1, {0x2, [{0x10, 0x2}, {0x8, 0x1, 0x4}]}}, 0x23) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz1\x00'}, 0x45c) [ 1157.654211][ T5635] FAT-fs (loop3): bogus number of reserved sectors [ 1157.689942][ T5635] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1157.749413][ T5635] FAT-fs (loop3): bogus number of reserved sectors [ 1157.764937][ T5635] FAT-fs (loop3): Can't find a valid FAT filesystem 16:58:02 executing program 5: timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) 16:58:02 executing program 0: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x0, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(0x0, 0x20) sendmmsg(r1, 0x0, 0x2c7, 0x87) 16:58:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = epoll_create1(0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x88, @multicast1, 0x4e20, 0x0, 'dh\x00', 0x10, 0x420b, 0x1b}, 0x2c) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syz1\x00', 0x5, 0x1) 16:58:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 16:58:02 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 16:58:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) [ 1158.002620][ T5656] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 16:58:02 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000100), 0x4) 16:58:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/\x00~WMzU\xed\xbb\xc8\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xb1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\x19sT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6d\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\xf7\xff\xff\xff\xff\xff\xff\xff\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xecv:\x1ba=\xd7G\xd5)\xeap\xef\x02\x98\xff\xf5f\x160\xb9\x9ay\xec\x82i\xaf\x9b\xe1x\xae\xca\x17\xfe\xfb\x14\xfd=\x00\x97Z\x99\x9dy\xba\x89M\xba\xe4\xc1\xa6\x06\x00\x00\x00\x00\x00\x00\x00x\"m\a\xe6:?E\x96~\x0e\xe8Y\xbbn\x0f0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:02 executing program 5: 16:58:02 executing program 2: 16:58:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 16:58:03 executing program 0: 16:58:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:03 executing program 2: 16:58:03 executing program 5: 16:58:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000c80)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d00)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000d40)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e00)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000f80)={{{@in6=@ipv4, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000001080)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000010c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000001100)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001180)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000001280)=0xe8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004940)={&(0x7f00000012c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004780)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/208, 0xd0}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/228, 0xe4}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/59, 0x3b}, {&(0x7f0000004580)=""/134, 0x86}, {&(0x7f0000004640)=""/170, 0xaa}, {&(0x7f0000004700)=""/125, 0x7d}], 0x9, &(0x7f0000004840)=""/238, 0xee}, 0x2023) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004980)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000004a80)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000004b80)={0x0, @rand_addr, @initdev}, &(0x7f0000004bc0)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004c40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000006f40)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000007040)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000007600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21082900}, 0xc, &(0x7f00000075c0)={&(0x7f0000007080)={0x518, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff8362}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x224, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x13ca}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x25}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r20}}}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x880}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x10001) 16:58:03 executing program 5: 16:58:03 executing program 2: 16:58:03 executing program 0: 16:58:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:03 executing program 2: 16:58:03 executing program 0: 16:58:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:03 executing program 5: 16:58:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x3ffffffd}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@ipv4={[], [], @loopback}, @mcast2, @mcast1, 0x200, 0x3, 0x71, 0x100, 0x200, 0x1020000, r4}) 16:58:03 executing program 2: 16:58:03 executing program 0: 16:58:04 executing program 5: 16:58:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:04 executing program 0: 16:58:04 executing program 2: 16:58:04 executing program 5: 16:58:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x100000000000000, r1}) r2 = epoll_create1(0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x401, 0x141200) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000100)=0xffffffffffffff1d) mq_open(&(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x80, &(0x7f0000000040)={0x5, 0x3800000000000000, 0x23a, 0x9, 0x8, 0x0, 0x7, 0x9}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r3, &(0x7f00000003c0)={0x90, 0x0, 0x8, {0x1, 0x2, 0x8ff3, 0x80000001, 0xfffffffffffffff9, 0x7, {0x3, 0x1f, 0x7, 0x101, 0x5, 0x5, 0x2, 0x1, 0x7, 0x0, 0xffffffff80000001, r4, r5, 0x2, 0x9}}}, 0x90) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:04 executing program 0: 16:58:04 executing program 2: 16:58:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:04 executing program 5: 16:58:04 executing program 2: 16:58:04 executing program 0: 16:58:04 executing program 5: 16:58:04 executing program 2: 16:58:04 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x7fffd) r3 = dup(r2) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:04 executing program 0: 16:58:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:04 executing program 5: 16:58:04 executing program 2: 16:58:04 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:04 executing program 0: 16:58:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "79e3fc12e97b76e4"}) r2 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) connect$netrom(r2, &(0x7f0000000240)={{0x3, @default, 0x8}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x100, 0x5, 0x8000, 0x4, 0x5, 0x2, 0x0, 0xad3, 0x3, 0x8, 0x7}, 0xb) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = epoll_create1(0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00\x00\x00\x00\x01\x00', 0x19, 0x1, 0x90, [0x20000300, 0x0, 0x0, 0x20000330, 0x20000360], 0x20000000, 0x0, &(0x7f0000000300)=[{}, {}, {}]}, 0x108) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='syz1\x00') write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:04 executing program 2: 16:58:04 executing program 5: 16:58:04 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:04 executing program 0: 16:58:04 executing program 5: 16:58:04 executing program 2: 16:58:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:05 executing program 0: 16:58:05 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:05 executing program 5: 16:58:05 executing program 2: 16:58:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x700, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:05 executing program 2: 16:58:05 executing program 0: 16:58:05 executing program 5: 16:58:05 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:05 executing program 0: 16:58:05 executing program 5: 16:58:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x80000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:06 executing program 2: 16:58:06 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:06 executing program 0: 16:58:06 executing program 5: 16:58:06 executing program 0: 16:58:06 executing program 2: 16:58:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:06 executing program 5: 16:58:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x1, 0x8, 0x5068, 0x1}, {0x5, 0x1000, 0x56b4, 0x5}, {0x4, 0x3, 0x6, 0x10001}, {0x7fffffff, 0x9, 0x6e91, 0x4bc2}, {0x81, 0x10001, 0x4, 0x9135}, {0x9, 0x7, 0x81, 0xfffffffffffffffc}, {0x9, 0x4, 0x0, 0x100000001}, {0xc2b, 0x0, 0xffffffffffff8000, 0x10001}, {0xc568, 0x7, 0x3, 0xffffffffffff0001}]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:06 executing program 2: 16:58:06 executing program 5: 16:58:06 executing program 0: 16:58:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:06 executing program 2: 16:58:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x2, r1}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:07 executing program 2: 16:58:07 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x53a}], 0x1, 0x1) getrandom(0x0, 0x0, 0x0) r2 = gettid() r3 = memfd_create(0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) readlink(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x666}, 0x8) r5 = socket$inet(0x2, 0x0, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r5, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) kcmp(r2, r2, 0x0, r6, r4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000000000c000500000000006000d8ffffffffff7cff020000000000000050438934a5abbbab7b8dd07e7a9dc214181cb56e5793ea5fcdc5e42c2030a9ec1d21e095a8df52b3f3bb9f85f6268427de735ffdba750f653b70bc6aa85b4f893a31eebb2475bc78c0011da408805d68a0bd975f2c6561cf8d011529286fec73df9659c75b14c9d81cd8586f78a155d9eb6979e3661e43fd4b64e09a8e49d550d169ddd05d98fbdbadcb666e8dcd8256435a6e6b517042c99a8fc0fdb4a75bbc4d0579197500331dfb09cb2a0a8f1e31a2065c46a3dc892920dd0deb41a6389a3a"]) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='!-\x00', 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x1f, 0x4, 0x10001, 0x6}) ioctl$RTC_VL_CLR(r4, 0x7014) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f00000005c0)=""/143) request_key(&(0x7f0000000980)='user\x00', &(0x7f0000000c00)={'syz', 0x1}, &(0x7f0000000c40)='\x00', 0xfffffffffffffffc) close(r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000000)=0xe8) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000040)=@can={0x1d, r7}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="d36abf44d0cdd67d4dc93ef4a80dbab6059ec4e55cea965d2765fb1165a766f459ad67782c2eb4807c403ce656c06bb6435bbbe9cc9f8b49", 0x38}], 0x1}, 0x40000) 16:58:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'nr0\x00', {0x2, 0x0, @dev}}) 16:58:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 16:58:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000040)=""/127, &(0x7f0000000100)=0x7f) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000140)=0x1, 0x4) clock_nanosleep(0x7, 0x0, &(0x7f0000000000), 0x0) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:07 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 16:58:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x4f) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 16:58:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getresuid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) write$P9_RSTATu(r3, &(0x7f00000002c0)={0x78, 0x7d, 0x2, {{0x0, 0x62, 0x72, 0x6, {0x0, 0x2, 0x6}, 0x86010000, 0x80, 0x7f, 0x1ff, 0x8, '\x01:GPL{)&', 0x11, '/dev/vhost-vsock\x00', 0x5, 'syz1\x00', 0x11, '/dev/vhost-vsock\x00'}, 0x1, '$', r4, r5, r6}}, 0x78) 16:58:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1013686a1fcd618673f9c69471d0f84f614989c68429e089e720f133a5543bf57002c48d527c4cf06c0e4d13bb7b1e69461bfe2f74025772dd0544b208ca60be391f123242282e11aacd6ad1b81d2c0aae92799ea73683ab0e23b6547022cb3fa8fe533349403236492557607f1c66a436306b296b2ddb5dcfe947c479eddf140f0acd3be3190d609ed57cf4b4000000000000000000"], 0x96) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) fallocate(r4, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80000, 0x0) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000180)=0x3ff, 0x4) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={[], 0x8000, 0x1, 0x5, 0x5, 0x7ff, r5}) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:08 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) 16:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, 0x0) 16:58:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x4060, 0x480001) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x105000, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x301000, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x200081, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x8040, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000300)={0x0, 0x9, [{r4, 0x0, 0x0, 0x1000000}, {r5, 0x0, 0x0, 0xfffffffff0000000}, {r6, 0x0, 0x1004000, 0xc000}, {r7, 0x0, 0xfffff000, 0x90f1499ad2d1a686}, {r8, 0x0, 0x0, 0xfffff000}, {r9, 0x0, 0x1000000, 0x100000000}, {r10, 0x0, 0x10000}, {r11, 0x0, 0xfffffffff0000000, 0x8000}, {r12}]}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, 0x0) 16:58:09 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:09 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:09 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, 0x0) 16:58:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) epoll_create1(0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x60000000}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:09 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 16:58:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffffffffffc) r2 = getpgrp(0x0) r3 = getpid() tgkill(r2, r3, 0x18) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r4 = epoll_create1(0x0) socket$vsock_dgram(0x28, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, [], [{0x0, 0x0, 0x7f, 0xc09, 0x5, 0x2}, {0xe2, 0x0, 0x6, 0x2, 0xea, 0xc7}], [[], [], [], [], [], [], [], []]}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xe6, 0x2, 0x4, "9fcb81139835aad8475f1d231409ad27", "bcd2f6c2a17d622c21fa43e738e8923f8c05ce62f73c638e2f6cd789965f649ffb236a72fff401fff204a8205d5f83652871f8d750440c8594a32fbb7da507039d634f9e142e8db0db0c5aacb6c9191dee2d13f8e2e6566fbec2e4f5c86edf8df0bfeb5c6c9ed2f0710433066d43ccda041269d97d5ed12b0f615b15466ab0993ec87549a7a1395d5e9d9f3a9e965454ad1a12e99eaefe1124ecef3bc01905c95440775f0d9b7483f23e7cdfd9cdc4e914538f87de6384d4eba6015ae01d831d0c81a521d807b2e884bec06f66653ea9e7"}, 0xe6, 0x3) r5 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x4, 0xa0000) write$P9_ROPEN(r5, &(0x7f0000000540)={0x18, 0x71, 0x1, {{0x0, 0x2, 0x8}, 0x1}}, 0x18) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f0000000040)=""/52, 0x34) r2 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:10 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:10 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) 16:58:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400300, 0x100) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100)=0xff, 0x4) r3 = epoll_create1(0x0) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$setperm(0x5, r4, 0xffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10003, 0x40}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000180)={0x6, r5}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:10 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:10 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = fanotify_init(0x4, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x802, 0x0) fanotify_mark(r1, 0x1, 0x8000000, r2, &(0x7f0000000100)='./file0\x00') ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='team_slave_0\x00') r4 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x1a69839, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r5, 0x6, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x84) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000500)) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000040)) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00'}, 0x45c) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000a80)={0x8, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) 16:58:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) write(r0, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r3 = signalfd(r2, &(0x7f0000000000)={0x3}, 0x8) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0x80000000, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000100)={0x7fffffff, r5, 0x2}) 16:58:11 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000100)={'vlan0\x00', 0x1}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10100, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000040)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x1, 0x200000) 16:58:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]}) statx(r1, &(0x7f0000000040)='./file0\x00', 0x5000, 0x2, &(0x7f0000000100)) statx(r1, &(0x7f0000000280)='./file0\x00', 0x0, 0x800, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:11 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:11 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r0+30000000}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:11 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) 16:58:11 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) fcntl$getown(r0, 0x9) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:12 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) 16:58:12 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x100) write$capi20(r0, &(0x7f0000000100)={0x10, 0x5, 0x8f, 0x83, 0x7fff, 0x7}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) fallocate(r3, 0x4, 0x8, 0x20) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00'}, 0x45c) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x5, 0x9, 0x701f, 0x1, 0xc, 0x7, 0x2, 0x5}}) 16:58:12 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r0+30000000}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000340)) r3 = epoll_create1(0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x10, &(0x7f00000001c0)={&(0x7f0000000100)=""/184, 0xb8, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/145, 0x91, r4}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:12 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:12 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) vmsplice(r2, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 16:58:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, [], [{0x7, 0xffffffff, 0xffffffff8b15c983, 0x52d, 0x80000000, 0x9}, {0x35, 0x7fff, 0x2, 0x2, 0x9, 0x9}], [[]]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:13 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r0+30000000}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) [ 1168.526461][ T7347] Unknown ioctl 1074025684 [ 1168.547299][ T7352] Unknown ioctl 1074025684 16:58:13 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x103, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x1, r1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc0c, 0x200000) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000040)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000500)={0xfffffffffffffffd}) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff]}, 0x45c) 16:58:13 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:13 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) 16:58:13 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x4000000080000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) socketpair(0xb, 0x800, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000100)={0x6, 0x70, 0xb9, 0x5, 0x1, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x2, 0x8001, 0x3, 0x2, 0x8, 0x8001, 0x4, 0x200, 0x2, 0x6, 0xfffffffffffff000, 0x81, 0xff, 0x1, 0x220f, 0x40, 0x32c808e7, 0x10001, 0x8bb, 0x8, 0x2, 0x8, 0x3f, 0x200, 0x8001, 0x7, 0xff, 0x6, 0x4, 0x0, 0x2, 0x1, @perf_config_ext={0x1f, 0x625}, 0x10000, 0x8, 0x5, 0x0, 0x81, 0x9, 0xffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x3, r5, 0x100000000) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r6 = semget(0x2, 0x7, 0x306) semctl$GETNCNT(r6, 0x6, 0xe, &(0x7f0000000240)=""/254) 16:58:13 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x45c) 16:58:13 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3}, 0x2a8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffff01]}}}}, 0x90) 16:58:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x200000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000140)={0x8, 0x0, 0x1004, 0x0, 0x2, 0xea, 0x1}) connect(r3, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000100)={0x200, 0x5, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:13 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3}, 0x2a8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}}, 0x90) 16:58:13 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3}, 0x2a8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}}}}, 0x90) 16:58:13 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:13 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3}, 0x2a8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x2]}}}}, 0x90) 16:58:14 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x22) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) sync() 16:58:14 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) 16:58:14 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3}, 0x2a8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4000]}}}}, 0x90) 16:58:14 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d40)={0xffff, 0x9, 0x410, 0x80000001}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r2, r2, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x0, @bcast, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$binfmt_elf64(r1, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0], 0x1261) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000007718f17f07477b5389d593ff7e84000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"], 0x2a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x8}}, 0x5, 0x41, 0x0, 0xc, 0x1}, &(0x7f0000000c80)=0x98) mlock(&(0x7f0000c3e000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0xfffffffffffffff8, 0x6, 0x1, 0x3, 0x7, 0x3, 0x0, 0x4e, r3}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e634000000000000000000000000000000000000000000000000"], 0x90) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/video37\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x80000001}, 0x1c) syz_open_dev$video(&(0x7f0000000e40)='/dev/video#\x00', 0x4, 0x501000) fstat(r2, &(0x7f0000000f00)) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1c, 0x100000001, 0x1, 0x1, 0xffffffff, 0x100000000, 0x2d435ba4}}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$loop(&(0x7f0000000f80)='/dev/loop#\x00', 0x100000000, 0x218000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@empty, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000e80)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4a6b5db0e3659fe4b7392cdb2c327ed865a7b81a4291492f7fd8f3e7d07c4ff915b2bf04659bc12038035e26939d5ca6127e69b60cdc12b2bd44e6261ab1f8a8ea723abb76979867a4ef511abcbb1a2e96b7f117e3238250a39cb222a6efa0222dcb75dd44d5d8206f2329eaaa46bfc375a7adc8c2e5061e0137b2dbe4710fd11b037d5cbd7aa0b01868318afb8db864691f1eb46940f5684efaff6c45d7bfe0fbbf81"], 0xf) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 16:58:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x80\x00'}, 0x45c) 16:58:14 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:14 executing program 2 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:14 executing program 0 (fault-call:3 fault-nth:0): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1169.758363][ T7662] FAULT_INJECTION: forcing a failure. [ 1169.758363][ T7662] name failslab, interval 1, probability 0, space 0, times 0 16:58:14 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) write$nbd(r0, &(0x7f0000000100)={0x67446698, 0x0, 0x4, 0x4, 0x2, "c39b3e919e01055c252498d2b713ce266a91003fafee590dab35007de970f40ababab3a5b0a6f5b8e1bf03737ce2cd62367b7f457ecb72f6477d65f79dca486141531820d48d31ca94bcdc90a391baf8bfe9acb56c468e57d9cebd47a8cc97da1c5bb837b6c1e0919c72d225dfda65ba3f2c8c6287"}, 0x85) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x44, "116b4499e950fbcad870b99ef1f86c8db8ece77ce4bf8ade6182b608b894629b5a7fbd7b84ba221daee384bc897f0931fe076c1efc1931d9e997f3479889829d0a56d953"}, &(0x7f00000001c0)=0x4c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={r2, 0x71, "4ed2de871ae6e00f696ee6077057214b24fee08047aebff29c12e397a495d4151c52c556d1ab4b9ff8df4864cc19bf744a7943ad18805c4820fc41e4169053a82c7a2c0f8ab292ef819537fda6ffc973b48819dcb3e365107a104d2de9a389550b3f33d3ffbeef7726aee5de5082e60e5d"}, &(0x7f00000002c0)=0x79) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00'}, 0x45c) [ 1169.805715][ T7662] CPU: 0 PID: 7662 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1169.814310][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.817813][ T7717] FAULT_INJECTION: forcing a failure. [ 1169.817813][ T7717] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.824363][ T7662] Call Trace: [ 1169.824433][ T7662] dump_stack+0x172/0x1f0 [ 1169.824461][ T7662] should_fail.cold+0xa/0x15 [ 1169.840314][ T7662] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1169.849210][ T7662] ? ___might_sleep+0x163/0x280 [ 1169.849231][ T7662] __should_failslab+0x121/0x190 [ 1169.849250][ T7662] should_failslab+0x9/0x14 [ 1169.849273][ T7662] kmem_cache_alloc+0x2b2/0x6f0 [ 1169.874180][ T7662] ? kasan_check_write+0x14/0x20 [ 1169.879145][ T7662] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1169.884716][ T7662] getname_flags+0xd6/0x5b0 [ 1169.889239][ T7662] getname+0x1a/0x20 [ 1169.893199][ T7662] do_sys_open+0x2c9/0x5d0 [ 1169.897633][ T7662] ? filp_open+0x80/0x80 [ 1169.901904][ T7662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1169.907374][ T7662] ? do_syscall_64+0x26/0x610 [ 1169.912060][ T7662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1169.918132][ T7662] ? do_syscall_64+0x26/0x610 [ 1169.922826][ T7662] __x64_sys_open+0x7e/0xc0 [ 1169.927352][ T7662] do_syscall_64+0x103/0x610 [ 1169.931952][ T7662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1169.937845][ T7662] RIP: 0033:0x412011 [ 1169.941739][ T7662] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1169.961339][ T7662] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1169.969751][ T7662] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1169.977722][ T7662] RDX: 00007f32beb39be2 RSI: 0000000000000002 RDI: 00007f32beb39bd0 [ 1169.985693][ T7662] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1169.993667][ T7662] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1170.001635][ T7662] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 [ 1170.009635][ T7717] CPU: 1 PID: 7717 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1170.018242][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.028296][ T7717] Call Trace: [ 1170.031594][ T7717] dump_stack+0x172/0x1f0 [ 1170.035943][ T7717] should_fail.cold+0xa/0x15 [ 1170.040546][ T7717] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1170.046369][ T7717] ? ___might_sleep+0x163/0x280 [ 1170.051236][ T7717] __should_failslab+0x121/0x190 [ 1170.056185][ T7717] should_failslab+0x9/0x14 [ 1170.060721][ T7717] kmem_cache_alloc_node+0x264/0x710 [ 1170.066039][ T7717] ? lock_downgrade+0x880/0x880 [ 1170.070918][ T7717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1170.077184][ T7717] __alloc_skb+0xd5/0x5e0 [ 1170.081522][ T7717] ? skb_trim+0x190/0x190 [ 1170.085976][ T7717] vhci_write+0xc4/0x470 [ 1170.090226][ T7717] new_sync_write+0x4c7/0x760 [ 1170.094885][ T7717] ? default_llseek+0x2e0/0x2e0 [ 1170.099732][ T7717] ? common_file_perm+0x238/0x720 [ 1170.104741][ T7717] ? __fget+0x381/0x550 [ 1170.108881][ T7717] ? apparmor_file_permission+0x25/0x30 [ 1170.114413][ T7717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1170.120819][ T7717] ? security_file_permission+0x94/0x380 [ 1170.126432][ T7717] __vfs_write+0xe4/0x110 [ 1170.130744][ T7717] vfs_write+0x20c/0x580 [ 1170.134972][ T7717] ksys_write+0xea/0x1f0 [ 1170.139211][ T7717] ? __ia32_sys_read+0xb0/0xb0 [ 1170.143965][ T7717] ? do_syscall_64+0x26/0x610 [ 1170.148622][ T7717] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.154666][ T7717] ? do_syscall_64+0x26/0x610 [ 1170.159347][ T7717] __x64_sys_write+0x73/0xb0 [ 1170.163929][ T7717] do_syscall_64+0x103/0x610 [ 1170.168501][ T7717] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.174375][ T7717] RIP: 0033:0x457f29 [ 1170.178248][ T7717] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1170.197835][ T7717] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 16:58:14 executing program 5 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:14 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1170.206230][ T7717] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1170.214195][ T7717] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1170.222147][ T7717] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1170.230098][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1170.238052][ T7717] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 16:58:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:14 executing program 2 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:14 executing program 0 (fault-call:3 fault-nth:1): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:14 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) io_setup(0xe725, &(0x7f0000000000)=0x0) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xffffffffffff0001, r0, &(0x7f0000000040)="b1106883dac4f6c580b5192c5d516c967ad2e1dd0b430ae99991a7da7ced30abd9b27403a92ab97dd001d76dc8b5a25b26aa7604e76998acc60eeaf6fe92a2a855b45ccc7ee74c7f3b591ace2d2ab990c51d7b2b1b91d123961493edb0b2a6dc32b89519576a6f0ed1c7280ebde7a7", 0x6f, 0x6, 0x0, 0x2, r1}, &(0x7f0000000140)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1170.415143][ T7886] FAULT_INJECTION: forcing a failure. [ 1170.415143][ T7886] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1170.428380][ T7886] CPU: 1 PID: 7886 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1170.436966][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.447023][ T7886] Call Trace: [ 1170.450342][ T7886] dump_stack+0x172/0x1f0 [ 1170.454703][ T7886] should_fail.cold+0xa/0x15 [ 1170.459316][ T7886] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1170.465146][ T7886] ? __lock_acquire+0x548/0x3fb0 [ 1170.470173][ T7886] should_fail_alloc_page+0x50/0x60 [ 1170.475390][ T7886] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1170.480779][ T7886] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1170.486507][ T7886] ? find_held_lock+0x35/0x130 [ 1170.489523][ T7893] FAULT_INJECTION: forcing a failure. [ 1170.489523][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.491306][ T7886] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1170.491330][ T7886] cache_grow_begin+0x9c/0x860 [ 1170.491347][ T7886] ? getname_flags+0xd6/0x5b0 [ 1170.491364][ T7886] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1170.491385][ T7886] kmem_cache_alloc+0x62d/0x6f0 [ 1170.491402][ T7886] ? kasan_check_write+0x14/0x20 [ 1170.491423][ T7886] getname_flags+0xd6/0x5b0 [ 1170.539703][ T7886] getname+0x1a/0x20 [ 1170.543624][ T7886] do_sys_open+0x2c9/0x5d0 [ 1170.548083][ T7886] ? filp_open+0x80/0x80 [ 1170.552345][ T7886] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1170.557812][ T7886] ? do_syscall_64+0x26/0x610 [ 1170.562498][ T7886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.568576][ T7886] ? do_syscall_64+0x26/0x610 [ 1170.573271][ T7886] __x64_sys_open+0x7e/0xc0 [ 1170.577785][ T7886] do_syscall_64+0x103/0x610 [ 1170.582390][ T7886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.588284][ T7886] RIP: 0033:0x412011 [ 1170.592182][ T7886] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 16:58:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1170.611786][ T7886] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1170.620199][ T7886] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1170.628176][ T7886] RDX: 00007f32beb39be2 RSI: 0000000000000002 RDI: 00007f32beb39bd0 [ 1170.636152][ T7886] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1170.644131][ T7886] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1170.652108][ T7886] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 [ 1170.660114][ T7893] CPU: 0 PID: 7893 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1170.668705][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.678776][ T7893] Call Trace: [ 1170.682071][ T7893] dump_stack+0x172/0x1f0 [ 1170.686418][ T7893] should_fail.cold+0xa/0x15 [ 1170.691018][ T7893] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1170.696833][ T7893] ? ___might_sleep+0x88/0x280 [ 1170.701606][ T7893] ? ___might_sleep+0x163/0x280 [ 1170.706469][ T7893] __should_failslab+0x121/0x190 [ 1170.711407][ T7893] should_failslab+0x9/0x14 16:58:15 executing program 2 (fault-call:2 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1170.715920][ T7893] kmem_cache_alloc_node_trace+0x270/0x720 [ 1170.721741][ T7893] __kmalloc_node_track_caller+0x3d/0x70 [ 1170.727409][ T7893] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1170.732788][ T7893] __alloc_skb+0x10b/0x5e0 [ 1170.737215][ T7893] ? skb_trim+0x190/0x190 [ 1170.741564][ T7893] vhci_write+0xc4/0x470 [ 1170.743132][ T7907] FAULT_INJECTION: forcing a failure. [ 1170.743132][ T7907] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.745821][ T7893] new_sync_write+0x4c7/0x760 [ 1170.745841][ T7893] ? default_llseek+0x2e0/0x2e0 [ 1170.745860][ T7893] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1170.745884][ T7893] ? common_file_perm+0x238/0x720 [ 1170.778419][ T7893] ? apparmor_file_permission+0x25/0x30 [ 1170.783974][ T7893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1170.790220][ T7893] ? security_file_permission+0x94/0x380 [ 1170.795858][ T7893] __vfs_write+0xe4/0x110 [ 1170.800204][ T7893] vfs_write+0x20c/0x580 [ 1170.804454][ T7893] ksys_write+0xea/0x1f0 [ 1170.808700][ T7893] ? __ia32_sys_read+0xb0/0xb0 [ 1170.813483][ T7893] __x64_sys_write+0x73/0xb0 [ 1170.818076][ T7893] ? do_syscall_64+0x5b/0x610 [ 1170.822755][ T7893] do_syscall_64+0x103/0x610 [ 1170.827354][ T7893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.833247][ T7893] RIP: 0033:0x457f29 [ 1170.837144][ T7893] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1170.856747][ T7893] RSP: 002b:00007f6c354ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1170.865160][ T7893] RAX: ffffffffffffffda RBX: 00007f6c354ccc90 RCX: 0000000000457f29 [ 1170.873299][ T7893] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1170.881271][ T7893] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.889239][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354cd6d4 [ 1170.897211][ T7893] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1170.905212][ T7907] CPU: 1 PID: 7907 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1170.913808][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.923856][ T7907] Call Trace: [ 1170.923882][ T7907] dump_stack+0x172/0x1f0 [ 1170.931492][ T7907] should_fail.cold+0xa/0x15 [ 1170.936196][ T7907] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1170.942283][ T7907] ? ___might_sleep+0x163/0x280 [ 1170.947259][ T7907] __should_failslab+0x121/0x190 [ 1170.952199][ T7907] should_failslab+0x9/0x14 [ 1170.956828][ T7907] kmem_cache_alloc+0x2b2/0x6f0 [ 1170.961828][ T7907] ? __save_stack_trace+0x8a/0xf0 [ 1170.966854][ T7907] __alloc_file+0x27/0x300 [ 1170.971492][ T7907] alloc_empty_file+0x72/0x170 [ 1170.976383][ T7907] path_openat+0xef/0x46e0 [ 1170.980931][ T7907] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1170.986880][ T7907] ? kasan_slab_alloc+0xf/0x20 [ 1170.991652][ T7907] ? kmem_cache_alloc+0x11a/0x6f0 [ 1170.996937][ T7907] ? getname_flags+0xd6/0x5b0 [ 1171.001611][ T7907] ? getname+0x1a/0x20 [ 1171.005686][ T7907] ? do_sys_open+0x2c9/0x5d0 [ 1171.010273][ T7907] ? __x64_sys_open+0x7e/0xc0 [ 1171.014949][ T7907] ? do_syscall_64+0x103/0x610 [ 1171.019707][ T7907] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.025777][ T7907] ? __lock_acquire+0x548/0x3fb0 [ 1171.030960][ T7907] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1171.036518][ T7907] ? __alloc_fd+0x430/0x530 [ 1171.041021][ T7907] do_filp_open+0x1a1/0x280 [ 1171.045522][ T7907] ? may_open_dev+0x100/0x100 [ 1171.050199][ T7907] ? lock_downgrade+0x880/0x880 [ 1171.055158][ T7907] ? kasan_check_read+0x11/0x20 [ 1171.060007][ T7907] ? do_raw_spin_unlock+0x57/0x270 [ 1171.065113][ T7907] ? _raw_spin_unlock+0x2d/0x50 [ 1171.069962][ T7907] ? __alloc_fd+0x430/0x530 [ 1171.074480][ T7907] do_sys_open+0x3fe/0x5d0 [ 1171.078905][ T7907] ? filp_open+0x80/0x80 [ 1171.083153][ T7907] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1171.088611][ T7907] ? do_syscall_64+0x26/0x610 [ 1171.093484][ T7907] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.099547][ T7907] ? do_syscall_64+0x26/0x610 [ 1171.104226][ T7907] __x64_sys_open+0x7e/0xc0 [ 1171.108731][ T7907] do_syscall_64+0x103/0x610 [ 1171.113320][ T7907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.119206][ T7907] RIP: 0033:0x412011 [ 1171.123102][ T7907] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1171.142704][ T7907] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1171.151112][ T7907] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1171.159077][ T7907] RDX: 00007f32beb39be2 RSI: 0000000000000002 RDI: 00007f32beb39bd0 16:58:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendto$isdn(r2, &(0x7f0000000100)={0x8, 0x9, "52a6261e034ae2be748a4f823753265f6895bf2c43ff7eff307d99cc60bd49affc5c70a94bd57b2d3ea2f96e962e0760f10fe3ca7dd0ac8b4e056697c249b4b49aea757aae301f1aac0a203a44617e727197d81f66513441d9eb2f7b20356c13bb16901a05b4"}, 0x6e, 0x80, &(0x7f0000000080)={0x22, 0x10000, 0x7, 0x401, 0x8000}, 0x6) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1171.167041][ T7907] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1171.175006][ T7907] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1171.182974][ T7907] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 16:58:15 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r1, 0x9}}, 0x10) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 16:58:15 executing program 2 (fault-call:2 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:15 executing program 0 (fault-call:3 fault-nth:2): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='statm\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000540)={0x100, 0x0, 0x300f, 0xd1, 0x4, 0x1, 0xffffffff, 0x1}) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000580)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) recvmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/134, 0x86}], 0x4}, 0x40) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000005c0)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0x27, 0x4, 0x0, "eaff7dcf43edaf5fb34903220479ad71", "b25a23129f3f000f8891b53c773df8130291"}, 0x27, 0x2) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1171.300143][ T8026] FAULT_INJECTION: forcing a failure. [ 1171.300143][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.363908][ T8041] FAULT_INJECTION: forcing a failure. [ 1171.363908][ T8041] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.385527][ T8041] CPU: 1 PID: 8041 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1171.394138][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.404201][ T8041] Call Trace: [ 1171.407504][ T8041] dump_stack+0x172/0x1f0 [ 1171.411851][ T8041] should_fail.cold+0xa/0x15 [ 1171.416467][ T8041] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1171.422284][ T8041] ? ___might_sleep+0x163/0x280 [ 1171.427159][ T8041] __should_failslab+0x121/0x190 [ 1171.432131][ T8041] should_failslab+0x9/0x14 [ 1171.436669][ T8041] kmem_cache_alloc_node+0x264/0x710 [ 1171.441974][ T8041] __alloc_skb+0xd5/0x5e0 [ 1171.446313][ T8041] ? skb_trim+0x190/0x190 [ 1171.450646][ T8041] ? vhci_write+0x2b3/0x470 [ 1171.455227][ T8041] ? rcu_read_lock_sched_held+0x110/0x130 16:58:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:16 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x204080, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0x9, "5bdc0dedf2665ea35b8736fb109ba47970e26dc70e299fdf80e1984185690388", 0x0, 0x1}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) [ 1171.460962][ T8041] ? kmem_cache_free+0x225/0x260 [ 1171.465918][ T8041] __vhci_create_device+0x88/0x5a0 [ 1171.471041][ T8041] vhci_write+0x2d0/0x470 [ 1171.475385][ T8041] new_sync_write+0x4c7/0x760 [ 1171.480071][ T8041] ? default_llseek+0x2e0/0x2e0 [ 1171.484944][ T8041] ? common_file_perm+0x238/0x720 [ 1171.489978][ T8041] ? __fget+0x381/0x550 [ 1171.494152][ T8041] ? apparmor_file_permission+0x25/0x30 [ 1171.499713][ T8041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1171.505969][ T8041] ? security_file_permission+0x94/0x380 [ 1171.511617][ T8041] __vfs_write+0xe4/0x110 [ 1171.515966][ T8041] vfs_write+0x20c/0x580 [ 1171.520222][ T8041] ksys_write+0xea/0x1f0 [ 1171.524480][ T8041] ? __ia32_sys_read+0xb0/0xb0 [ 1171.529260][ T8041] ? do_syscall_64+0x26/0x610 [ 1171.533945][ T8041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.540025][ T8041] ? do_syscall_64+0x26/0x610 [ 1171.544723][ T8041] __x64_sys_write+0x73/0xb0 [ 1171.549328][ T8041] do_syscall_64+0x103/0x610 [ 1171.553944][ T8041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.559841][ T8041] RIP: 0033:0x457f29 [ 1171.563746][ T8041] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1171.583353][ T8041] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1171.591772][ T8041] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1171.599749][ T8041] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1171.607726][ T8041] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1171.615710][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1171.623690][ T8041] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1171.634222][ T8026] CPU: 0 PID: 8026 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1171.642820][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.652877][ T8026] Call Trace: [ 1171.656198][ T8026] dump_stack+0x172/0x1f0 [ 1171.660540][ T8026] should_fail.cold+0xa/0x15 [ 1171.665129][ T8026] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1171.670926][ T8026] ? ___might_sleep+0x163/0x280 [ 1171.675756][ T8026] __should_failslab+0x121/0x190 [ 1171.680672][ T8026] should_failslab+0x9/0x14 [ 1171.685155][ T8026] kmem_cache_alloc+0x2b2/0x6f0 [ 1171.689990][ T8026] ? rcu_read_lock_sched_held+0x110/0x130 [ 1171.695698][ T8026] ? kmem_cache_alloc+0x32e/0x6f0 [ 1171.700702][ T8026] security_file_alloc+0x39/0x170 [ 1171.705707][ T8026] __alloc_file+0xac/0x300 [ 1171.710102][ T8026] alloc_empty_file+0x72/0x170 [ 1171.714852][ T8026] path_openat+0xef/0x46e0 [ 1171.719259][ T8026] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1171.725043][ T8026] ? kasan_slab_alloc+0xf/0x20 [ 1171.729782][ T8026] ? kmem_cache_alloc+0x11a/0x6f0 [ 1171.734824][ T8026] ? getname_flags+0xd6/0x5b0 [ 1171.739494][ T8026] ? getname+0x1a/0x20 [ 1171.743538][ T8026] ? do_sys_open+0x2c9/0x5d0 [ 1171.748106][ T8026] ? __x64_sys_open+0x7e/0xc0 [ 1171.752763][ T8026] ? do_syscall_64+0x103/0x610 [ 1171.757506][ T8026] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.763565][ T8026] ? __lock_acquire+0x548/0x3fb0 [ 1171.768714][ T8026] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1171.774071][ T8026] ? __alloc_fd+0x430/0x530 [ 1171.778571][ T8026] do_filp_open+0x1a1/0x280 [ 1171.783056][ T8026] ? may_open_dev+0x100/0x100 [ 1171.787711][ T8026] ? lock_downgrade+0x880/0x880 [ 1171.792558][ T8026] ? kasan_check_read+0x11/0x20 [ 1171.797387][ T8026] ? do_raw_spin_unlock+0x57/0x270 [ 1171.802474][ T8026] ? _raw_spin_unlock+0x2d/0x50 [ 1171.807302][ T8026] ? __alloc_fd+0x430/0x530 [ 1171.811787][ T8026] do_sys_open+0x3fe/0x5d0 [ 1171.816188][ T8026] ? filp_open+0x80/0x80 [ 1171.820415][ T8026] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1171.825850][ T8026] ? do_syscall_64+0x26/0x610 [ 1171.830504][ T8026] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.836545][ T8026] ? do_syscall_64+0x26/0x610 [ 1171.841200][ T8026] __x64_sys_open+0x7e/0xc0 [ 1171.845697][ T8026] do_syscall_64+0x103/0x610 [ 1171.850309][ T8026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.856207][ T8026] RIP: 0033:0x412011 16:58:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = dup(r0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000000)) 16:58:16 executing program 5: r0 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffcb1, 0x0, 0x64e, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x10080) write$vhci(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 1171.860111][ T8026] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1171.879715][ T8026] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1171.888132][ T8026] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1171.888142][ T8026] RDX: 00007f32beb39be2 RSI: 0000000000000002 RDI: 00007f32beb39bd0 [ 1171.888151][ T8026] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 16:58:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:16 executing program 0 (fault-call:3 fault-nth:3): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1171.888161][ T8026] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1171.888170][ T8026] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 16:58:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000000c0)={0x400}) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000000)={0x0, 0x20000000000001, 0xfffffffffffffe2d, 0x0}) 16:58:16 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x80003) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r5 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000000)={0x5}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000100)={0x3, r4}) 16:58:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x4, 0x8000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x40000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x14100, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000000c0)) write$vhci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="031d921e590d3974761a142e7d6192c684fde21431e070c2bfdedd62c97b4ea704b6966c60c809bbe525eea7a2c8c859a440c1779b3231f707e129c3e4ff369fa8c46da9d1ff69dee88b71c90f8f34a2baf8d9e355cb68cc3048e8df316510413f6bb43ef1b6a43d4926c049224125bdf7a786687d88fca367fb2ba7b330d203ff7fc0216a"], 0x100000094) r5 = dup2(r3, r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000180)={0x1d, r6}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x8, 0x4, 0x3f, 'queue0\x00', 0x5}) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000000)) [ 1172.036018][ T8438] FAULT_INJECTION: forcing a failure. [ 1172.036018][ T8438] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.090347][ T8438] CPU: 1 PID: 8438 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1172.098951][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.109261][ T8438] Call Trace: [ 1172.112997][ T8438] dump_stack+0x172/0x1f0 [ 1172.117350][ T8438] should_fail.cold+0xa/0x15 [ 1172.121968][ T8438] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1172.127788][ T8438] ? ___might_sleep+0x163/0x280 [ 1172.132657][ T8438] __should_failslab+0x121/0x190 16:58:16 executing program 2 (fault-call:2 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1172.137662][ T8438] should_failslab+0x9/0x14 [ 1172.142193][ T8438] kmem_cache_alloc_node_trace+0x270/0x720 [ 1172.148019][ T8438] __kmalloc_node_track_caller+0x3d/0x70 [ 1172.153720][ T8438] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1172.159103][ T8438] __alloc_skb+0x10b/0x5e0 [ 1172.163553][ T8438] ? skb_trim+0x190/0x190 [ 1172.167918][ T8438] ? vhci_write+0x2b3/0x470 [ 1172.172430][ T8438] ? rcu_read_lock_sched_held+0x110/0x130 [ 1172.178165][ T8438] ? kmem_cache_free+0x225/0x260 [ 1172.183116][ T8438] __vhci_create_device+0x88/0x5a0 [ 1172.188245][ T8438] vhci_write+0x2d0/0x470 [ 1172.192591][ T8438] new_sync_write+0x4c7/0x760 [ 1172.197281][ T8438] ? default_llseek+0x2e0/0x2e0 [ 1172.202155][ T8438] ? common_file_perm+0x238/0x720 [ 1172.204611][ T8477] FAULT_INJECTION: forcing a failure. [ 1172.204611][ T8477] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.207187][ T8438] ? __fget+0x381/0x550 [ 1172.207209][ T8438] ? apparmor_file_permission+0x25/0x30 [ 1172.207227][ T8438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.207245][ T8438] ? security_file_permission+0x94/0x380 [ 1172.207266][ T8438] __vfs_write+0xe4/0x110 [ 1172.207288][ T8438] vfs_write+0x20c/0x580 [ 1172.207310][ T8438] ksys_write+0xea/0x1f0 [ 1172.207329][ T8438] ? __ia32_sys_read+0xb0/0xb0 [ 1172.207348][ T8438] ? do_syscall_64+0x26/0x610 [ 1172.207373][ T8438] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.269727][ T8438] ? do_syscall_64+0x26/0x610 [ 1172.274419][ T8438] __x64_sys_write+0x73/0xb0 [ 1172.279626][ T8438] do_syscall_64+0x103/0x610 [ 1172.284225][ T8438] entry_SYSCALL_64_after_hwframe+0x49/0xbe 16:58:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x20000, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000000c0)=0xfff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1172.290124][ T8438] RIP: 0033:0x457f29 [ 1172.294029][ T8438] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1172.313632][ T8438] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1172.322056][ T8438] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1172.330033][ T8438] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1172.338022][ T8438] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1172.345990][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1172.353963][ T8438] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1172.361961][ T8477] CPU: 0 PID: 8477 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1172.370555][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.380607][ T8477] Call Trace: [ 1172.383913][ T8477] dump_stack+0x172/0x1f0 [ 1172.388255][ T8477] should_fail.cold+0xa/0x15 [ 1172.392864][ T8477] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1172.398787][ T8477] ? __task_pid_nr_ns+0x1b1/0x530 [ 1172.403837][ T8477] __should_failslab+0x121/0x190 [ 1172.408872][ T8477] should_failslab+0x9/0x14 [ 1172.413408][ T8477] kmem_cache_alloc_trace+0x4b/0x760 [ 1172.418711][ T8477] ? kasan_check_read+0x11/0x20 [ 1172.423626][ T8477] proc_self_get_link+0x16f/0x1d0 [ 1172.428707][ T8477] link_path_walk.part.0+0xeec/0x1340 [ 1172.434089][ T8477] ? proc_ns_dir_readdir+0x570/0x570 16:58:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, "f41e22b7fd4518717f71"}, 0xb) [ 1172.439386][ T8477] ? walk_component+0x2000/0x2000 [ 1172.444429][ T8477] path_openat+0x202/0x46e0 [ 1172.448942][ T8477] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1172.454775][ T8477] ? kasan_slab_alloc+0xf/0x20 [ 1172.459557][ T8477] ? kmem_cache_alloc+0x11a/0x6f0 [ 1172.464585][ T8477] ? getname_flags+0xd6/0x5b0 [ 1172.469262][ T8477] ? getname+0x1a/0x20 [ 1172.473333][ T8477] ? do_sys_open+0x2c9/0x5d0 [ 1172.477949][ T8477] ? __lock_acquire+0x548/0x3fb0 [ 1172.482909][ T8477] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1172.488299][ T8477] ? __alloc_fd+0x430/0x530 [ 1172.492866][ T8477] do_filp_open+0x1a1/0x280 [ 1172.497349][ T8477] ? may_open_dev+0x100/0x100 [ 1172.502039][ T8477] ? kasan_check_read+0x11/0x20 [ 1172.506915][ T8477] ? do_raw_spin_unlock+0x57/0x270 [ 1172.512023][ T8477] ? _raw_spin_unlock+0x2d/0x50 [ 1172.516903][ T8477] do_sys_open+0x3fe/0x5d0 [ 1172.521322][ T8477] ? filp_open+0x80/0x80 [ 1172.525565][ T8477] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1172.531006][ T8477] ? do_syscall_64+0x26/0x610 [ 1172.535663][ T8477] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.541723][ T8477] ? do_syscall_64+0x26/0x610 [ 1172.546400][ T8477] __x64_sys_open+0x7e/0xc0 [ 1172.550913][ T8477] do_syscall_64+0x103/0x610 [ 1172.555491][ T8477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.561364][ T8477] RIP: 0033:0x412011 [ 1172.565245][ T8477] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 16:58:17 executing program 0 (fault-call:3 fault-nth:4): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x9000000}, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1172.584830][ T8477] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1172.593229][ T8477] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1172.601205][ T8477] RDX: 00007f32beb39be2 RSI: 0000000000000002 RDI: 00007f32beb39bd0 [ 1172.609178][ T8477] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1172.617159][ T8477] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1172.625129][ T8477] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 16:58:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1172.699236][ T8781] FAULT_INJECTION: forcing a failure. [ 1172.699236][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.712589][ T8781] CPU: 1 PID: 8781 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1172.721193][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.731255][ T8781] Call Trace: [ 1172.734557][ T8781] dump_stack+0x172/0x1f0 [ 1172.738928][ T8781] should_fail.cold+0xa/0x15 [ 1172.743533][ T8781] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1172.749354][ T8781] ? ___might_sleep+0x163/0x280 [ 1172.754221][ T8781] __should_failslab+0x121/0x190 [ 1172.759168][ T8781] should_failslab+0x9/0x14 [ 1172.763693][ T8781] kmem_cache_alloc_trace+0x2d1/0x760 [ 1172.769078][ T8781] ? skb_trim+0x190/0x190 [ 1172.773412][ T8781] ? vhci_write+0x2b3/0x470 [ 1172.777936][ T8781] ? rcu_read_lock_sched_held+0x110/0x130 [ 1172.783772][ T8781] hci_alloc_dev+0x43/0x1d00 [ 1172.788377][ T8781] __vhci_create_device+0x101/0x5a0 [ 1172.793582][ T8781] vhci_write+0x2d0/0x470 16:58:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20003, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:58:17 executing program 2 (fault-call:2 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1172.797949][ T8781] new_sync_write+0x4c7/0x760 [ 1172.802645][ T8781] ? default_llseek+0x2e0/0x2e0 [ 1172.807525][ T8781] ? common_file_perm+0x238/0x720 [ 1172.812560][ T8781] ? __fget+0x381/0x550 [ 1172.816737][ T8781] ? apparmor_file_permission+0x25/0x30 [ 1172.822297][ T8781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.828548][ T8781] ? security_file_permission+0x94/0x380 [ 1172.834186][ T8781] __vfs_write+0xe4/0x110 [ 1172.838521][ T8781] vfs_write+0x20c/0x580 [ 1172.838543][ T8781] ksys_write+0xea/0x1f0 [ 1172.838562][ T8781] ? __ia32_sys_read+0xb0/0xb0 [ 1172.838581][ T8781] ? do_syscall_64+0x26/0x610 [ 1172.838597][ T8781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.838619][ T8781] ? do_syscall_64+0x26/0x610 [ 1172.867215][ T8781] __x64_sys_write+0x73/0xb0 [ 1172.872285][ T8781] do_syscall_64+0x103/0x610 [ 1172.876887][ T8781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.882795][ T8781] RIP: 0033:0x457f29 [ 1172.886703][ T8781] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1172.906307][ T8781] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1172.909052][ T8901] FAULT_INJECTION: forcing a failure. [ 1172.909052][ T8901] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.914722][ T8781] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1172.914731][ T8781] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1172.914741][ T8781] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1172.914750][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1172.914759][ T8781] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1172.969761][ T8901] CPU: 0 PID: 8901 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1172.978354][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.988407][ T8901] Call Trace: [ 1172.991711][ T8901] dump_stack+0x172/0x1f0 [ 1172.996052][ T8901] should_fail.cold+0xa/0x15 16:58:17 executing program 0 (fault-call:3 fault-nth:5): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x4, 0xb3, 0xffff, 0x9, 0x0, 0x8, 0x18020, 0x4, 0x7, 0x2, 0x0, 0x100000000, 0xffffffff, 0x6, 0x7, 0x60, 0x7, 0x80, 0x6, 0x1, 0x4, 0x0, 0x2, 0x8, 0x1, 0xffffffffffffffd8, 0xffff, 0xfffffffffffffff7, 0x0, 0x4, 0x2, 0x6, 0xffffffff00000001, 0x2, 0x5, 0x7, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x40, 0x4b, 0x80000001, 0x5, 0x9, 0x15d, 0x10001}, r0, 0x6, 0xffffffffffffffff, 0x0) [ 1173.000652][ T8901] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1173.006476][ T8901] ? ___might_sleep+0x163/0x280 [ 1173.011337][ T8901] __should_failslab+0x121/0x190 [ 1173.016365][ T8901] ? proc_i_callback+0x30/0x30 [ 1173.021162][ T8901] should_failslab+0x9/0x14 [ 1173.025679][ T8901] kmem_cache_alloc+0x2b2/0x6f0 [ 1173.028736][ T8998] FAULT_INJECTION: forcing a failure. [ 1173.028736][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.030538][ T8901] ? get_pid_task+0xc9/0x190 [ 1173.030556][ T8901] ? find_held_lock+0x35/0x130 [ 1173.030577][ T8901] ? proc_i_callback+0x30/0x30 [ 1173.057239][ T8901] proc_alloc_inode+0x1c/0x1a0 [ 1173.062009][ T8901] alloc_inode+0x66/0x190 [ 1173.066349][ T8901] new_inode_pseudo+0x19/0xf0 [ 1173.071033][ T8901] new_inode+0x1f/0x40 [ 1173.075112][ T8901] proc_pid_make_inode+0x22/0x230 [ 1173.080149][ T8901] proc_pident_instantiate+0x82/0x2a0 [ 1173.085536][ T8901] proc_pident_lookup+0x1ad/0x210 [ 1173.090570][ T8901] proc_tgid_base_lookup+0x2c/0x40 [ 1173.095686][ T8901] __lookup_slow+0x27e/0x500 [ 1173.100281][ T8901] ? vfs_unlink+0x560/0x560 [ 1173.104785][ T8901] ? __d_lookup+0x433/0x760 [ 1173.109323][ T8901] lookup_slow+0x58/0x80 [ 1173.113580][ T8901] walk_component+0x74b/0x2000 [ 1173.118420][ T8901] ? refcount_dec_not_one+0x1f0/0x1f0 [ 1173.123806][ T8901] ? kasan_check_read+0x11/0x20 [ 1173.128665][ T8901] ? path_init+0x18f0/0x18f0 [ 1173.133262][ T8901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.139513][ T8901] ? security_inode_permission+0xd5/0x110 [ 1173.145235][ T8901] ? inode_permission+0xb4/0x570 [ 1173.150188][ T8901] link_path_walk.part.0+0x980/0x1340 [ 1173.155569][ T8901] ? walk_component+0x2000/0x2000 [ 1173.160608][ T8901] path_openat+0x202/0x46e0 [ 1173.165111][ T8901] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1173.170924][ T8901] ? kasan_slab_alloc+0xf/0x20 [ 1173.175693][ T8901] ? kmem_cache_alloc+0x11a/0x6f0 [ 1173.180715][ T8901] ? getname_flags+0xd6/0x5b0 [ 1173.185393][ T8901] ? getname+0x1a/0x20 [ 1173.189463][ T8901] ? do_sys_open+0x2c9/0x5d0 [ 1173.194064][ T8901] ? __lock_acquire+0x548/0x3fb0 [ 1173.199009][ T8901] ? __lock_acquire+0x548/0x3fb0 [ 1173.203950][ T8901] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1173.209336][ T8901] ? __alloc_fd+0x430/0x530 [ 1173.213849][ T8901] do_filp_open+0x1a1/0x280 [ 1173.218358][ T8901] ? may_open_dev+0x100/0x100 [ 1173.223050][ T8901] ? simple_attr_release+0x50/0x50 [ 1173.228164][ T8901] ? do_raw_spin_unlock+0x57/0x270 [ 1173.233292][ T8901] ? _raw_spin_unlock+0x2d/0x50 [ 1173.238161][ T8901] do_sys_open+0x3fe/0x5d0 [ 1173.242593][ T8901] ? filp_open+0x80/0x80 [ 1173.246847][ T8901] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1173.252305][ T8901] ? do_syscall_64+0x26/0x610 [ 1173.256989][ T8901] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.263055][ T8901] ? do_syscall_64+0x26/0x610 [ 1173.267741][ T8901] __x64_sys_open+0x7e/0xc0 [ 1173.272257][ T8901] do_syscall_64+0x103/0x610 [ 1173.276860][ T8901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.282761][ T8901] RIP: 0033:0x412011 [ 1173.286657][ T8901] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1173.306262][ T8901] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1173.314671][ T8901] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1173.322641][ T8901] RDX: 00007f32beb39be2 RSI: 0000000000000002 RDI: 00007f32beb39bd0 [ 1173.330611][ T8901] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1173.338577][ T8901] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1173.346549][ T8901] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 [ 1173.354611][ T8998] CPU: 1 PID: 8998 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1173.363205][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.373297][ T8998] Call Trace: [ 1173.376593][ T8998] dump_stack+0x172/0x1f0 [ 1173.380942][ T8998] should_fail.cold+0xa/0x15 [ 1173.385544][ T8998] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1173.391363][ T8998] ? ___might_sleep+0x163/0x280 [ 1173.396271][ T8998] __should_failslab+0x121/0x190 [ 1173.401217][ T8998] should_failslab+0x9/0x14 [ 1173.405728][ T8998] __kmalloc+0x2dc/0x740 [ 1173.409984][ T8998] ? alloc_workqueue+0x13c/0xe70 [ 1173.414944][ T8998] alloc_workqueue+0x13c/0xe70 [ 1173.419729][ T8998] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1173.425455][ T8998] ? scnprintf+0x140/0x140 [ 1173.429905][ T8998] ? __init_waitqueue_head+0x36/0x90 [ 1173.435206][ T8998] hci_register_dev+0x1b8/0x860 [ 1173.435285][ T8998] ? hci_init_sysfs+0x7c/0xa0 [ 1173.435310][ T8998] __vhci_create_device+0x2d0/0x5a0 [ 1173.444821][ T8998] vhci_write+0x2d0/0x470 [ 1173.444842][ T8998] new_sync_write+0x4c7/0x760 [ 1173.444861][ T8998] ? default_llseek+0x2e0/0x2e0 [ 1173.444886][ T8998] ? common_file_perm+0x238/0x720 [ 1173.468932][ T8998] ? __fget+0x381/0x550 [ 1173.473131][ T8998] ? apparmor_file_permission+0x25/0x30 [ 1173.478687][ T8998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.484937][ T8998] ? security_file_permission+0x94/0x380 [ 1173.490565][ T8998] __vfs_write+0xe4/0x110 [ 1173.494879][ T8998] vfs_write+0x20c/0x580 [ 1173.499112][ T8998] ksys_write+0xea/0x1f0 [ 1173.503338][ T8998] ? __ia32_sys_read+0xb0/0xb0 [ 1173.508096][ T8998] ? do_syscall_64+0x26/0x610 [ 1173.512788][ T8998] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.518851][ T8998] ? do_syscall_64+0x26/0x610 [ 1173.523510][ T8998] __x64_sys_write+0x73/0xb0 [ 1173.528100][ T8998] do_syscall_64+0x103/0x610 [ 1173.532681][ T8998] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.538553][ T8998] RIP: 0033:0x457f29 [ 1173.542428][ T8998] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1173.562011][ T8998] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1173.570401][ T8998] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1173.578352][ T8998] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1173.586304][ T8998] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1173.594255][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 16:58:18 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x1, r1}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000a80)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x8, @ipv4={[], [], @empty}, 0x2}}}, &(0x7f0000000240)=0x84) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x401, 0x10080) ioctl$TIOCSTI(r2, 0x5412, 0x6) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000300)={0x7, 0x7fff}) r6 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xc4c, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x20100, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x400, 0x0) 16:58:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9b9c, 0x1ff9) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)={0x5, 0xf744, 0x4, 0x0, 0x6, 0x1, 0x807, 0x8, 0x7, 0xffffffffffff8001, 0x5706fb1b, 0x1, 0x0, 0x2, 0xe21, 0xffffffffffffffff, 0x7, 0xe775, 0x6}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', r2}) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:18 executing program 2 (fault-call:2 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101000, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x101800, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0xa001, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000000c0)={0x81b8, 0x80000000, 0x7fff}) r3 = getpid() getpid() readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/4096, 0x1000) tkill(r3, 0x15) [ 1173.602206][ T8998] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1173.625195][ T8998] Bluetooth: Can't register HCI device 16:58:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:18 executing program 0 (fault-call:3 fault-nth:6): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1173.660931][ T9195] FAULT_INJECTION: forcing a failure. [ 1173.660931][ T9195] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.712973][ T9195] CPU: 1 PID: 9195 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1173.721585][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.731645][ T9195] Call Trace: [ 1173.734958][ T9195] dump_stack+0x172/0x1f0 [ 1173.739312][ T9195] should_fail.cold+0xa/0x15 [ 1173.743928][ T9195] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1173.749754][ T9195] ? ___might_sleep+0x163/0x280 [ 1173.754625][ T9195] __should_failslab+0x121/0x190 [ 1173.759578][ T9195] should_failslab+0x9/0x14 [ 1173.764257][ T9195] kmem_cache_alloc+0x2b2/0x6f0 [ 1173.769120][ T9195] ? __lock_acquire+0x548/0x3fb0 [ 1173.772972][ T9234] FAULT_INJECTION: forcing a failure. [ 1173.772972][ T9234] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.774065][ T9195] ? __lock_acquire+0x548/0x3fb0 [ 1173.774112][ T9195] __d_alloc+0x2e/0x8c0 [ 1173.774131][ T9195] d_alloc+0x4d/0x2b0 [ 1173.774145][ T9195] ? find_held_lock+0x35/0x130 [ 1173.774163][ T9195] d_alloc_parallel+0xf4/0x1bc0 [ 1173.774187][ T9195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.774211][ T9195] ? kasan_check_read+0x11/0x20 [ 1173.820523][ T9195] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1173.825470][ T9195] ? __d_lookup+0x433/0x760 [ 1173.829975][ T9195] ? lookup_open+0x2c2/0x1b10 [ 1173.834651][ T9195] ? d_lookup+0xf9/0x260 [ 1173.838923][ T9195] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1173.844228][ T9195] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1173.849952][ T9195] ? d_lookup+0x19e/0x260 [ 1173.854294][ T9195] lookup_open+0x52a/0x1b10 [ 1173.858814][ T9195] ? vfs_link+0xbc0/0xbc0 [ 1173.863189][ T9195] path_openat+0x1eb4/0x46e0 [ 1173.867796][ T9195] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1173.873606][ T9195] ? kasan_slab_alloc+0xf/0x20 [ 1173.878376][ T9195] ? kmem_cache_alloc+0x11a/0x6f0 [ 1173.883403][ T9195] ? getname_flags+0xd6/0x5b0 [ 1173.888090][ T9195] ? getname+0x1a/0x20 [ 1173.892166][ T9195] ? do_sys_open+0x2c9/0x5d0 [ 1173.896777][ T9195] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1173.902166][ T9195] ? __alloc_fd+0x430/0x530 [ 1173.906690][ T9195] do_filp_open+0x1a1/0x280 [ 1173.911203][ T9195] ? may_open_dev+0x100/0x100 [ 1173.915908][ T9195] ? simple_attr_release+0x50/0x50 [ 1173.921035][ T9195] ? do_raw_spin_unlock+0x57/0x270 [ 1173.926154][ T9195] ? _raw_spin_unlock+0x2d/0x50 [ 1173.931030][ T9195] do_sys_open+0x3fe/0x5d0 [ 1173.935458][ T9195] ? filp_open+0x80/0x80 [ 1173.939924][ T9195] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1173.945390][ T9195] ? do_syscall_64+0x26/0x610 [ 1173.950069][ T9195] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.956143][ T9195] ? do_syscall_64+0x26/0x610 [ 1173.960837][ T9195] __x64_sys_open+0x7e/0xc0 [ 1173.965355][ T9195] do_syscall_64+0x103/0x610 [ 1173.969953][ T9195] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.975847][ T9195] RIP: 0033:0x412011 [ 1173.979749][ T9195] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1173.999354][ T9195] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1174.007770][ T9195] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1174.015748][ T9195] RDX: 00007f32beb39be2 RSI: 0000000000000002 RDI: 00007f32beb39bd0 [ 1174.023723][ T9195] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1174.031706][ T9195] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1174.039688][ T9195] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 [ 1174.051258][ T9234] CPU: 1 PID: 9234 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1174.059853][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.069917][ T9234] Call Trace: [ 1174.073220][ T9234] dump_stack+0x172/0x1f0 [ 1174.077564][ T9234] should_fail.cold+0xa/0x15 [ 1174.082166][ T9234] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1174.087998][ T9234] ? ___might_sleep+0x163/0x280 [ 1174.092862][ T9234] __should_failslab+0x121/0x190 [ 1174.097821][ T9234] should_failslab+0x9/0x14 [ 1174.102320][ T9234] kmem_cache_alloc_trace+0x2d1/0x760 [ 1174.107696][ T9234] ? rcu_read_lock_sched_held+0x110/0x130 [ 1174.113426][ T9234] ? __kmalloc+0x5d5/0x740 [ 1174.117852][ T9234] alloc_workqueue_attrs+0x82/0x120 [ 1174.123061][ T9234] alloc_workqueue+0x166/0xe70 [ 1174.127842][ T9234] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1174.133571][ T9234] ? scnprintf+0x140/0x140 [ 1174.137986][ T9234] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1174.143444][ T9234] ? retint_kernel+0x2d/0x2d [ 1174.148037][ T9234] hci_register_dev+0x1b8/0x860 [ 1174.152927][ T9234] __vhci_create_device+0x2d0/0x5a0 [ 1174.158142][ T9234] vhci_write+0x2d0/0x470 [ 1174.162477][ T9234] new_sync_write+0x4c7/0x760 [ 1174.167156][ T9234] ? default_llseek+0x2e0/0x2e0 [ 1174.172031][ T9234] ? common_file_perm+0x238/0x720 [ 1174.177067][ T9234] ? __fget+0x381/0x550 [ 1174.181236][ T9234] ? apparmor_file_permission+0x25/0x30 [ 1174.186793][ T9234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1174.193043][ T9234] ? security_file_permission+0x94/0x380 [ 1174.198681][ T9234] __vfs_write+0xe4/0x110 [ 1174.203027][ T9234] vfs_write+0x20c/0x580 [ 1174.207283][ T9234] ksys_write+0xea/0x1f0 [ 1174.211536][ T9234] ? __ia32_sys_read+0xb0/0xb0 [ 1174.216311][ T9234] ? do_syscall_64+0x26/0x610 [ 1174.220990][ T9234] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.227066][ T9234] ? do_syscall_64+0x26/0x610 [ 1174.231754][ T9234] __x64_sys_write+0x73/0xb0 [ 1174.236360][ T9234] do_syscall_64+0x103/0x610 [ 1174.240963][ T9234] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.246875][ T9234] RIP: 0033:0x457f29 [ 1174.250803][ T9234] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1174.270406][ T9234] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1174.278809][ T9234] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1174.286770][ T9234] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1174.294764][ T9234] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1174.302724][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 16:58:18 executing program 2 (fault-call:2 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:18 executing program 0 (fault-call:3 fault-nth:7): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1174.310864][ T9234] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1174.322410][ T9234] Bluetooth: Can't register HCI device 16:58:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x204000) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0xffff, 0x8}) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:19 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffffffffffd) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1174.398578][ T9320] FAULT_INJECTION: forcing a failure. [ 1174.398578][ T9320] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.417289][ T9324] FAULT_INJECTION: forcing a failure. [ 1174.417289][ T9324] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.453718][ T9324] CPU: 1 PID: 9324 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1174.462327][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.472381][ T9324] Call Trace: [ 1174.475694][ T9324] dump_stack+0x172/0x1f0 [ 1174.480038][ T9324] should_fail.cold+0xa/0x15 [ 1174.484651][ T9324] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1174.490480][ T9324] ? ___might_sleep+0x163/0x280 [ 1174.495340][ T9324] __should_failslab+0x121/0x190 [ 1174.500290][ T9324] should_failslab+0x9/0x14 [ 1174.504805][ T9324] __kmalloc_track_caller+0x2d8/0x740 [ 1174.510186][ T9324] ? pointer+0x910/0x910 [ 1174.514432][ T9324] ? set_precision+0x180/0x180 [ 1174.519200][ T9324] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1174.524839][ T9324] ? kasprintf+0xbb/0xf0 [ 1174.529118][ T9324] kvasprintf+0xc8/0x170 [ 1174.533370][ T9324] ? bust_spinlocks+0xe0/0xe0 [ 1174.538058][ T9324] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1174.543807][ T9324] ? find_next_bit+0x107/0x130 [ 1174.548636][ T9324] kasprintf+0xbb/0xf0 [ 1174.552720][ T9324] ? kvasprintf_const+0x190/0x190 [ 1174.557763][ T9324] ? kasan_check_read+0x11/0x20 [ 1174.562652][ T9324] alloc_workqueue+0x442/0xe70 [ 1174.567445][ T9324] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1174.573190][ T9324] ? __init_waitqueue_head+0x36/0x90 [ 1174.578487][ T9324] hci_register_dev+0x1b8/0x860 [ 1174.583347][ T9324] ? hci_init_sysfs+0x7c/0xa0 [ 1174.588048][ T9324] __vhci_create_device+0x2d0/0x5a0 [ 1174.593268][ T9324] vhci_write+0x2d0/0x470 [ 1174.597609][ T9324] new_sync_write+0x4c7/0x760 [ 1174.602291][ T9324] ? default_llseek+0x2e0/0x2e0 [ 1174.607158][ T9324] ? common_file_perm+0x238/0x720 [ 1174.612193][ T9324] ? __fget+0x381/0x550 [ 1174.616366][ T9324] ? apparmor_file_permission+0x25/0x30 [ 1174.621930][ T9324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1174.628180][ T9324] ? security_file_permission+0x94/0x380 [ 1174.633824][ T9324] __vfs_write+0xe4/0x110 [ 1174.638169][ T9324] vfs_write+0x20c/0x580 [ 1174.642425][ T9324] ksys_write+0xea/0x1f0 [ 1174.646684][ T9324] ? __ia32_sys_read+0xb0/0xb0 [ 1174.651469][ T9324] ? do_syscall_64+0x26/0x610 [ 1174.656154][ T9324] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.662226][ T9324] ? do_syscall_64+0x26/0x610 [ 1174.666928][ T9324] __x64_sys_write+0x73/0xb0 [ 1174.671533][ T9324] do_syscall_64+0x103/0x610 [ 1174.676134][ T9324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.682025][ T9324] RIP: 0033:0x457f29 16:58:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1174.685932][ T9324] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1174.705533][ T9324] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1174.713943][ T9324] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1174.721925][ T9324] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1174.729912][ T9324] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1174.737919][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1174.745916][ T9324] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1174.756458][ T9320] CPU: 0 PID: 9320 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1174.765254][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.765259][ T9320] Call Trace: [ 1174.765281][ T9320] dump_stack+0x172/0x1f0 [ 1174.765303][ T9320] should_fail.cold+0xa/0x15 [ 1174.765324][ T9320] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1174.765345][ T9320] ? ___might_sleep+0x163/0x280 [ 1174.765365][ T9320] __should_failslab+0x121/0x190 [ 1174.765389][ T9320] should_failslab+0x9/0x14 [ 1174.765405][ T9320] kmem_cache_alloc+0x2b2/0x6f0 [ 1174.765421][ T9320] ? __lock_acquire+0x548/0x3fb0 [ 1174.765437][ T9320] ? __lock_acquire+0x548/0x3fb0 [ 1174.778938][ T9320] __d_alloc+0x2e/0x8c0 [ 1174.778957][ T9320] d_alloc+0x4d/0x2b0 [ 1174.778972][ T9320] ? find_held_lock+0x35/0x130 [ 1174.778990][ T9320] d_alloc_parallel+0xf4/0x1bc0 [ 1174.779021][ T9320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1174.787929][ T9320] ? kasan_check_read+0x11/0x20 [ 1174.787950][ T9320] ? __d_lookup_rcu+0x6c0/0x6c0 16:58:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@known='system.sockprotoname\x00') r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) connect$rose(r2, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x1, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) [ 1174.787963][ T9320] ? __d_lookup+0x433/0x760 [ 1174.787976][ T9320] ? lookup_open+0x2c2/0x1b10 [ 1174.787989][ T9320] ? d_lookup+0xf9/0x260 [ 1174.788004][ T9320] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1174.788033][ T9320] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1174.798679][ T9320] ? d_lookup+0x19e/0x260 [ 1174.798711][ T9320] lookup_open+0x52a/0x1b10 [ 1174.798733][ T9320] ? vfs_link+0xbc0/0xbc0 [ 1174.798776][ T9320] path_openat+0x1eb4/0x46e0 [ 1174.798798][ T9320] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1174.808209][ T9320] ? kasan_slab_alloc+0xf/0x20 [ 1174.808225][ T9320] ? kmem_cache_alloc+0x11a/0x6f0 [ 1174.808239][ T9320] ? getname_flags+0xd6/0x5b0 [ 1174.808252][ T9320] ? getname+0x1a/0x20 [ 1174.808266][ T9320] ? do_sys_open+0x2c9/0x5d0 [ 1174.808295][ T9320] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1174.808320][ T9320] ? __alloc_fd+0x430/0x530 [ 1174.818203][ T9320] do_filp_open+0x1a1/0x280 [ 1174.818221][ T9320] ? may_open_dev+0x100/0x100 [ 1174.818248][ T9320] ? simple_attr_release+0x50/0x50 [ 1174.818267][ T9320] ? do_raw_spin_unlock+0x57/0x270 [ 1174.818283][ T9320] ? _raw_spin_unlock+0x2d/0x50 [ 1174.818312][ T9320] do_sys_open+0x3fe/0x5d0 [ 1174.827386][ T9320] ? filp_open+0x80/0x80 [ 1174.827408][ T9320] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1174.827425][ T9320] ? do_syscall_64+0x26/0x610 [ 1174.827439][ T9320] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.827453][ T9320] ? do_syscall_64+0x26/0x610 [ 1174.827477][ T9320] __x64_sys_open+0x7e/0xc0 [ 1174.995933][ T9320] do_syscall_64+0x103/0x610 [ 1175.000511][ T9320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1175.006381][ T9320] RIP: 0033:0x412011 [ 1175.010255][ T9320] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1175.029847][ T9320] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1175.038249][ T9320] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1175.046202][ T9320] RDX: 00007f32beb39be2 RSI: 0000000000000002 RDI: 00007f32beb39bd0 16:58:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1175.054152][ T9320] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1175.062108][ T9320] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1175.070081][ T9320] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 16:58:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xe2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x100) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='syz0\x00') ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:58:21 executing program 2 (fault-call:2 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:21 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1176.701954][ T9652] FAULT_INJECTION: forcing a failure. [ 1176.701954][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.722994][ T9652] CPU: 0 PID: 9652 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1176.731592][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.741649][ T9652] Call Trace: [ 1176.744966][ T9652] dump_stack+0x172/0x1f0 [ 1176.749309][ T9652] should_fail.cold+0xa/0x15 [ 1176.753927][ T9652] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1176.759753][ T9652] ? ___might_sleep+0x163/0x280 [ 1176.764618][ T9652] __should_failslab+0x121/0x190 [ 1176.769561][ T9652] should_failslab+0x9/0x14 [ 1176.774077][ T9652] kmem_cache_alloc+0x2b2/0x6f0 [ 1176.778946][ T9652] ? task_work_run+0x118/0x1c0 [ 1176.783720][ T9652] ? find_held_lock+0x35/0x130 [ 1176.788500][ T9652] getname_flags+0xd6/0x5b0 [ 1176.793011][ T9652] getname+0x1a/0x20 [ 1176.796926][ T9652] do_sys_open+0x2c9/0x5d0 [ 1176.801353][ T9652] ? filp_open+0x80/0x80 [ 1176.805686][ T9652] ? blkcg_exit_queue+0x30/0x30 [ 1176.810551][ T9652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1176.816017][ T9652] ? do_syscall_64+0x26/0x610 [ 1176.820698][ T9652] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1176.820720][ T9652] ? do_syscall_64+0x26/0x610 [ 1176.831459][ T9652] __x64_sys_open+0x7e/0xc0 [ 1176.835974][ T9652] do_syscall_64+0x103/0x610 [ 1176.840568][ T9652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1176.840580][ T9652] RIP: 0033:0x412011 [ 1176.840602][ T9652] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1176.870096][ T9652] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1176.878507][ T9652] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1176.886490][ T9652] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f32beb39bd0 [ 1176.894455][ T9652] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1176.902453][ T9652] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1176.910426][ T9652] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 16:58:29 executing program 0 (fault-call:3 fault-nth:8): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400, 0x0) write$9p(r1, &(0x7f0000000080)="6f6f6b39c98c46e5", 0x8) 16:58:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = dup3(r0, r0, 0x80000) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x4, 0x0, 0x7ff, 0x7, 0x3, 0x5, {0x1, 0xc99, 0x2, 0xffffffff, 0x9, 0x3ff, 0x8, 0xfffffffffffffffb, 0x1, 0x9e18, 0x2, r2, r3, 0x2, 0x4}}}, 0x90) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r4, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:58:29 executing program 2 (fault-call:2 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:29 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1185.214121][ T9765] FAULT_INJECTION: forcing a failure. [ 1185.214121][ T9765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1185.227376][ T9765] CPU: 0 PID: 9765 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1185.235963][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.246019][ T9765] Call Trace: [ 1185.249327][ T9765] dump_stack+0x172/0x1f0 [ 1185.253684][ T9765] should_fail.cold+0xa/0x15 [ 1185.258327][ T9765] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1185.264170][ T9765] ? __lock_acquire+0x548/0x3fb0 [ 1185.269123][ T9765] ? find_held_lock+0x35/0x130 [ 1185.273902][ T9765] should_fail_alloc_page+0x50/0x60 [ 1185.279115][ T9765] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1185.284501][ T9765] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1185.290224][ T9765] ? find_held_lock+0x35/0x130 [ 1185.295006][ T9765] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1185.299460][ T9981] FAULT_INJECTION: forcing a failure. [ 1185.299460][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.300828][ T9765] cache_grow_begin+0x9c/0x860 [ 1185.300845][ T9765] ? getname_flags+0xd6/0x5b0 [ 1185.300861][ T9765] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1185.300880][ T9765] kmem_cache_alloc+0x62d/0x6f0 [ 1185.300893][ T9765] ? task_work_run+0x118/0x1c0 [ 1185.300927][ T9765] ? find_held_lock+0x35/0x130 [ 1185.300947][ T9765] getname_flags+0xd6/0x5b0 [ 1185.300965][ T9765] getname+0x1a/0x20 [ 1185.352203][ T9765] do_sys_open+0x2c9/0x5d0 [ 1185.356637][ T9765] ? filp_open+0x80/0x80 [ 1185.360889][ T9765] ? blkcg_exit_queue+0x30/0x30 [ 1185.365757][ T9765] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1185.371224][ T9765] ? do_syscall_64+0x26/0x610 [ 1185.375921][ T9765] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1185.381995][ T9765] ? do_syscall_64+0x26/0x610 [ 1185.386680][ T9765] __x64_sys_open+0x7e/0xc0 [ 1185.391200][ T9765] do_syscall_64+0x103/0x610 [ 1185.395806][ T9765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1185.401699][ T9765] RIP: 0033:0x412011 [ 1185.405601][ T9765] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1185.425213][ T9765] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1185.433621][ T9765] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1185.441603][ T9765] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f32beb39bd0 [ 1185.449574][ T9765] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1185.457548][ T9765] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1185.465521][ T9765] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 [ 1185.473570][ T9981] CPU: 1 PID: 9981 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1185.482178][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.482196][ T9981] Call Trace: [ 1185.495534][ T9981] dump_stack+0x172/0x1f0 [ 1185.499875][ T9981] should_fail.cold+0xa/0x15 [ 1185.504476][ T9981] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1185.504497][ T9981] ? ___might_sleep+0x163/0x280 16:58:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x246) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x161302, 0x0) write$ppp(r1, &(0x7f0000000040), 0x0) r2 = fcntl$getown(r1, 0x9) r3 = getpgrp(r2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x8) write$cgroup_pid(r1, &(0x7f0000000000)=r3, 0x12) ioctl$int_out(r1, 0x2, &(0x7f0000000080)) write$vhci(r0, &(0x7f0000000400)=@HCI_EVENT_PKT={0x4, "57e000a2ba64a16b882a40b186ad49cbb516b3202d125f39f123352d3f8dd978a06f312cb832dcadd0dda3c67092237f2156691051f8a1d39cdd174d3857566867168c95a38d84e0cda74d7c5026ca5a61241ee85694ea948d83d4da36b00b21bf9ebbb92e22e73c429906bd81f89829c9d0ad440c694bd4a567f53130cfc0977d635c310bbb021d830efae725b28c16f26a107a07558ad397ec47cdbb89d7c369ed071d96e6de9f438e34a5ae2c1d536d88eec8ea65180acb5297d49a24dd4274d39f80b58d52b5cbc17f8a77844de1"}, 0xffce) 16:58:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x100, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1185.504519][ T9981] __should_failslab+0x121/0x190 [ 1185.520083][ T9981] should_failslab+0x9/0x14 [ 1185.524595][ T9981] __kmalloc+0x2dc/0x740 [ 1185.528852][ T9981] ? apply_wqattrs_prepare+0xae/0x970 [ 1185.534236][ T9981] apply_wqattrs_prepare+0xae/0x970 [ 1185.539456][ T9981] apply_workqueue_attrs_locked+0xcb/0x140 [ 1185.545274][ T9981] apply_workqueue_attrs+0x31/0x50 [ 1185.550395][ T9981] alloc_workqueue+0x84c/0xe70 [ 1185.555177][ T9981] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1185.560928][ T9981] ? __init_waitqueue_head+0x36/0x90 [ 1185.566237][ T9981] hci_register_dev+0x1b8/0x860 [ 1185.571099][ T9981] ? hci_init_sysfs+0x7c/0xa0 [ 1185.575794][ T9981] __vhci_create_device+0x2d0/0x5a0 [ 1185.581010][ T9981] vhci_write+0x2d0/0x470 [ 1185.585348][ T9981] new_sync_write+0x4c7/0x760 [ 1185.590036][ T9981] ? default_llseek+0x2e0/0x2e0 [ 1185.594919][ T9981] ? common_file_perm+0x238/0x720 [ 1185.599956][ T9981] ? __fget+0x381/0x550 [ 1185.604134][ T9981] ? apparmor_file_permission+0x25/0x30 [ 1185.609698][ T9981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.615960][ T9981] ? security_file_permission+0x94/0x380 [ 1185.621601][ T9981] __vfs_write+0xe4/0x110 [ 1185.625951][ T9981] vfs_write+0x20c/0x580 [ 1185.630207][ T9981] ksys_write+0xea/0x1f0 [ 1185.634493][ T9981] ? __ia32_sys_read+0xb0/0xb0 [ 1185.639274][ T9981] ? do_syscall_64+0x26/0x610 [ 1185.643978][ T9981] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1185.650073][ T9981] ? do_syscall_64+0x26/0x610 [ 1185.654763][ T9981] __x64_sys_write+0x73/0xb0 [ 1185.659367][ T9981] do_syscall_64+0x103/0x610 [ 1185.663973][ T9981] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1185.669868][ T9981] RIP: 0033:0x457f29 [ 1185.673784][ T9981] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1185.693410][ T9981] RSP: 002b:00007f6c354ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1185.701820][ T9981] RAX: ffffffffffffffda RBX: 00007f6c354ccc90 RCX: 0000000000457f29 16:58:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x404200, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{}]}) write$vhci(r0, &(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, "c77b99474ac2e2661494b0753bfd0631f011a114463df6eaf9b5ec11e283870dd9390b4758a3d369f00430d4e2a65377db2cdb7caaccb61628a2298e0549411e6deb26d24b00ff3f7f4b3d69183f99ab45619d57696ce8c795daaa505f7ad3bd0f5d4d54b75648087d22e283c415194a108664b431f7e4968f05fb2f0880a9ac6edeb8cb258b0de69197eca1977da30160379c8d9fb1b238c9efa0f6e9047c30253962603bce6b83"}, 0xa9) 16:58:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xff, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x121200, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000540)={{0xa, 0x4e22, 0x80000000000000, @remote, 0x3f}, {0xa, 0x4e20, 0x9, @local, 0x200}, 0x66, [0xaf00000, 0x1, 0xdbd, 0x7d33, 0x10001, 0x40, 0x3, 0x7]}, 0x5c) [ 1185.709794][ T9981] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1185.717777][ T9981] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1185.725750][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354cd6d4 [ 1185.733729][ T9981] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1185.755252][ T9981] Bluetooth: Can't register HCI device 16:58:30 executing program 2 (fault-call:2 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:30 executing program 0 (fault-call:3 fault-nth:9): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)=[{&(0x7f0000000100)="8cdc30afc41ebce75bc7c3463974b2998d42e1ab09e67a9e178cd1bc49babf9effe510df189e870da39ddb90ed99cab84aa39f89fd53cafa5e33bf86d6e007eefb4655183fce03b599009972b8", 0x4d, 0x508}, {&(0x7f0000000240)="a927c1ed9e4a499e9163527acd464b55a3be2720533009cb341c9d8131fc2fea9de018421ea498086a07ea4c429bb55ba1bdc18c5a07e0488483b8d503acc5ca15a9140068480c3f48a99efc565d01a3ffdd8cebd8ff63fb732893fbd1393fefd6342b55fad9be37564e3b892aa76e467b047a0dc9b53ce135b667fb699cb18d036a2dfe86919f94f41f16ae74c6395f8b7b917a8c703a7dcce6b7b4", 0x9c, 0x7}, {&(0x7f0000000080)="e3ffb8c77b5467f573887aa00069d0fc5cd95257d8a163aa66e1001527e51aa0c1edacd314240e7ab0123d7aa21836d88507f5101c37fd405b2ade340032f1", 0x3f, 0x400}, {&(0x7f0000000300)="3863cbd94d9f6e5e81dfd14d47591f334baf16ec6911d7ecec8bd1ed420ddcf4429fc3e8353dddd2d26f6e334c1e4b1ba5a73ec18467fdc759f8279786abd60f92e1c600b874b27aedc04412facc05bd251589e3759a35ff394d74a1a79b543056918bb77e2ef2f968e278896d56bd9c00c544b589559f1d328cd554ad7c17cbddc5f1782ca0582f310810be12578d8d57f245", 0x93, 0x9}], 0x200010, &(0x7f00000003c0)={[{@fat=@codepage={'codepage', 0x3d, '950'}}], [{@appraise_type='appraise_type=imasig'}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) [ 1185.864084][T10277] FAULT_INJECTION: forcing a failure. [ 1185.864084][T10277] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.891767][T10321] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 1185.928781][T10332] FAULT_INJECTION: forcing a failure. [ 1185.928781][T10332] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.941675][T10277] CPU: 1 PID: 10277 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1185.941688][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.941694][T10277] Call Trace: [ 1185.941719][T10277] dump_stack+0x172/0x1f0 [ 1185.941753][T10277] should_fail.cold+0xa/0x15 [ 1185.941777][T10277] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1185.941800][T10277] ? __task_pid_nr_ns+0x1b1/0x530 [ 1185.941825][T10277] __should_failslab+0x121/0x190 [ 1185.941845][T10277] should_failslab+0x9/0x14 [ 1185.941865][T10277] kmem_cache_alloc_trace+0x4b/0x760 [ 1185.941892][T10277] ? kasan_check_read+0x11/0x20 [ 1186.003130][T10277] proc_self_get_link+0x16f/0x1d0 [ 1186.008169][T10277] link_path_walk.part.0+0xeec/0x1340 [ 1186.013553][T10277] ? proc_ns_dir_readdir+0x570/0x570 [ 1186.018862][T10277] ? walk_component+0x2000/0x2000 [ 1186.023947][T10277] path_openat+0x202/0x46e0 [ 1186.028459][T10277] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1186.034273][T10277] ? kasan_slab_alloc+0xf/0x20 [ 1186.039043][T10277] ? kmem_cache_alloc+0x11a/0x6f0 [ 1186.044076][T10277] ? getname_flags+0xd6/0x5b0 [ 1186.048758][T10277] ? getname+0x1a/0x20 [ 1186.052839][T10277] ? do_sys_open+0x2c9/0x5d0 [ 1186.057447][T10277] ? __lock_acquire+0x548/0x3fb0 [ 1186.062394][T10277] ? debug_object_active_state+0x205/0x380 [ 1186.068206][T10277] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1186.073601][T10277] ? __alloc_fd+0x430/0x530 [ 1186.078115][T10277] do_filp_open+0x1a1/0x280 [ 1186.082635][T10277] ? may_open_dev+0x100/0x100 [ 1186.087337][T10277] ? kasan_check_read+0x11/0x20 [ 1186.092197][T10277] ? do_raw_spin_unlock+0x57/0x270 [ 1186.097321][T10277] ? _raw_spin_unlock+0x2d/0x50 [ 1186.102195][T10277] do_sys_open+0x3fe/0x5d0 [ 1186.106630][T10277] ? filp_open+0x80/0x80 [ 1186.110884][T10277] ? blkcg_exit_queue+0x30/0x30 [ 1186.115758][T10277] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1186.121221][T10277] ? do_syscall_64+0x26/0x610 [ 1186.125924][T10277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.132001][T10277] ? do_syscall_64+0x26/0x610 [ 1186.136690][T10277] __x64_sys_open+0x7e/0xc0 [ 1186.141221][T10277] do_syscall_64+0x103/0x610 [ 1186.145833][T10277] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.151729][T10277] RIP: 0033:0x412011 [ 1186.155634][T10277] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1186.175257][T10277] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1186.183682][T10277] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1186.191658][T10277] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f32beb39bd0 [ 1186.199636][T10277] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1186.207620][T10277] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1186.215591][T10277] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 16:58:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 16:58:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f00000012c0)={&(0x7f0000001200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x40) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:58:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1186.223602][T10332] CPU: 0 PID: 10332 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1186.232281][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.242331][T10332] Call Trace: [ 1186.245628][T10332] dump_stack+0x172/0x1f0 [ 1186.249971][T10332] should_fail.cold+0xa/0x15 [ 1186.254574][T10332] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1186.260394][T10332] ? ___might_sleep+0x163/0x280 [ 1186.265262][T10332] __should_failslab+0x121/0x190 [ 1186.270214][T10332] should_failslab+0x9/0x14 [ 1186.274743][T10332] kmem_cache_alloc_trace+0x2d1/0x760 [ 1186.280124][T10332] ? rcu_read_lock_sched_held+0x110/0x130 [ 1186.285851][T10332] ? __kmalloc+0x5d5/0x740 [ 1186.290286][T10332] alloc_workqueue_attrs+0x82/0x120 [ 1186.295497][T10332] apply_wqattrs_prepare+0xbb/0x970 [ 1186.300711][T10332] ? apply_workqueue_attrs_locked+0x16/0x140 [ 1186.306711][T10332] apply_workqueue_attrs_locked+0xcb/0x140 [ 1186.312548][T10332] apply_workqueue_attrs+0x31/0x50 [ 1186.317671][T10332] alloc_workqueue+0x84c/0xe70 [ 1186.322457][T10332] ? workqueue_sysfs_register+0x3f0/0x3f0 16:58:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1186.328201][T10332] hci_register_dev+0x1b8/0x860 [ 1186.333085][T10332] ? hci_init_sysfs+0x7c/0xa0 [ 1186.337784][T10332] __vhci_create_device+0x2d0/0x5a0 [ 1186.343018][T10332] vhci_write+0x2d0/0x470 [ 1186.347362][T10332] new_sync_write+0x4c7/0x760 [ 1186.352052][T10332] ? default_llseek+0x2e0/0x2e0 [ 1186.356936][T10332] ? common_file_perm+0x238/0x720 [ 1186.361975][T10332] ? __fget+0x381/0x550 [ 1186.366152][T10332] ? apparmor_file_permission+0x25/0x30 [ 1186.371721][T10332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:58:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0xbe, "b3f666970f9829a50ad38b8f16df68a2b536ccbf83e41fe7079dfaed60d4ee899cfbd75749ebd8e8a75b807683b9243f9047f3bc8b59b930d54e0aae5e68cbd2e2b02750657078bb95179a283c1b48e47c7c04c50da041e5045a7725ae465b6bc43c2e2e648b6d145cacca2872250bf0cd87d29f50a299548741ffc80f9f9cb40f5ccc279e8bc8e208c01c93698f903593d55d1e951eb6c939e45e8b7c76b2b4de77d8e596e06cc1ed8c859484f4338e5b424d6cc8aee6b7820842ec6c8f"}, &(0x7f0000000200)=0xc6) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x3) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7f, 0x4) [ 1186.377973][T10332] ? security_file_permission+0x94/0x380 [ 1186.383617][T10332] __vfs_write+0xe4/0x110 [ 1186.387988][T10332] vfs_write+0x20c/0x580 [ 1186.392264][T10332] ksys_write+0xea/0x1f0 [ 1186.396524][T10332] ? __ia32_sys_read+0xb0/0xb0 [ 1186.401305][T10332] ? do_syscall_64+0x26/0x610 [ 1186.405989][T10332] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.412069][T10332] ? do_syscall_64+0x26/0x610 [ 1186.416769][T10332] __x64_sys_write+0x73/0xb0 [ 1186.421374][T10332] do_syscall_64+0x103/0x610 [ 1186.425987][T10332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.431885][T10332] RIP: 0033:0x457f29 [ 1186.435795][T10332] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1186.455405][T10332] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1186.463830][T10332] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1186.471814][T10332] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 16:58:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9702020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040800) [ 1186.479791][T10332] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1186.487766][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1186.495750][T10332] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1186.506083][T10332] Bluetooth: Can't register HCI device 16:58:31 executing program 0 (fault-call:3 fault-nth:10): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:31 executing program 2 (fault-call:2 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1186.555659][T10321] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 1186.613013][T10730] FAULT_INJECTION: forcing a failure. [ 1186.613013][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.644211][T10730] CPU: 0 PID: 10730 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1186.652920][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.662973][T10730] Call Trace: [ 1186.666261][T10730] dump_stack+0x172/0x1f0 [ 1186.666335][T10769] FAULT_INJECTION: forcing a failure. [ 1186.666335][T10769] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.670615][T10730] should_fail.cold+0xa/0x15 [ 1186.687783][T10730] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1186.693591][T10730] ? ___might_sleep+0x163/0x280 [ 1186.698448][T10730] __should_failslab+0x121/0x190 [ 1186.703387][T10730] should_failslab+0x9/0x14 [ 1186.707889][T10730] kmem_cache_alloc_trace+0x2d1/0x760 [ 1186.713265][T10730] ? rcu_read_lock_sched_held+0x110/0x130 [ 1186.718981][T10730] ? __kmalloc+0x5d5/0x740 [ 1186.723400][T10730] alloc_workqueue_attrs+0x82/0x120 [ 1186.728600][T10730] apply_wqattrs_prepare+0xc8/0x970 [ 1186.733812][T10730] apply_workqueue_attrs_locked+0xcb/0x140 [ 1186.739623][T10730] apply_workqueue_attrs+0x31/0x50 [ 1186.744737][T10730] alloc_workqueue+0x84c/0xe70 [ 1186.749508][T10730] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1186.755237][T10730] ? __init_waitqueue_head+0x36/0x90 [ 1186.760533][T10730] hci_register_dev+0x1b8/0x860 [ 1186.765392][T10730] ? hci_init_sysfs+0x7c/0xa0 [ 1186.770079][T10730] __vhci_create_device+0x2d0/0x5a0 [ 1186.775284][T10730] vhci_write+0x2d0/0x470 [ 1186.779616][T10730] new_sync_write+0x4c7/0x760 [ 1186.784290][T10730] ? default_llseek+0x2e0/0x2e0 [ 1186.789145][T10730] ? common_file_perm+0x238/0x720 [ 1186.794164][T10730] ? __fget+0x381/0x550 [ 1186.798322][T10730] ? apparmor_file_permission+0x25/0x30 [ 1186.803869][T10730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.810108][T10730] ? security_file_permission+0x94/0x380 [ 1186.815744][T10730] __vfs_write+0xe4/0x110 [ 1186.820078][T10730] vfs_write+0x20c/0x580 [ 1186.824322][T10730] ksys_write+0xea/0x1f0 [ 1186.828571][T10730] ? __ia32_sys_read+0xb0/0xb0 [ 1186.833340][T10730] ? do_syscall_64+0x26/0x610 [ 1186.838013][T10730] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.844072][T10730] ? do_syscall_64+0x26/0x610 [ 1186.848753][T10730] __x64_sys_write+0x73/0xb0 [ 1186.853343][T10730] do_syscall_64+0x103/0x610 [ 1186.857941][T10730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.863833][T10730] RIP: 0033:0x457f29 [ 1186.867730][T10730] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1186.887483][T10730] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1186.895892][T10730] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1186.903868][T10730] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1186.911833][T10730] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1186.919799][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1186.927767][T10730] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1186.938887][T10769] CPU: 0 PID: 10769 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1186.942603][T10730] Bluetooth: Can't register HCI device [ 1186.947571][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.947577][T10769] Call Trace: [ 1186.947599][T10769] dump_stack+0x172/0x1f0 [ 1186.947621][T10769] should_fail.cold+0xa/0x15 [ 1186.947640][T10769] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1186.947661][T10769] ? ___might_sleep+0x163/0x280 [ 1186.947681][T10769] __should_failslab+0x121/0x190 [ 1186.947699][T10769] should_failslab+0x9/0x14 [ 1186.947715][T10769] kmem_cache_alloc+0x2b2/0x6f0 [ 1186.947732][T10769] ? rcu_read_lock_sched_held+0x110/0x130 [ 1186.947747][T10769] ? kmem_cache_alloc+0x32e/0x6f0 16:58:31 executing program 0 (fault-call:3 fault-nth:11): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1186.947769][T10769] security_file_alloc+0x39/0x170 [ 1186.947785][T10769] __alloc_file+0xac/0x300 [ 1186.947802][T10769] alloc_empty_file+0x72/0x170 [ 1186.947819][T10769] path_openat+0xef/0x46e0 [ 1186.947836][T10769] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1186.947848][T10769] ? kasan_slab_alloc+0xf/0x20 [ 1186.947862][T10769] ? kmem_cache_alloc+0x11a/0x6f0 [ 1186.947875][T10769] ? getname_flags+0xd6/0x5b0 [ 1186.947887][T10769] ? getname+0x1a/0x20 [ 1186.947901][T10769] ? do_sys_open+0x2c9/0x5d0 [ 1186.947927][T10769] ? __x64_sys_open+0x7e/0xc0 16:58:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1186.947944][T10769] ? do_syscall_64+0x103/0x610 [ 1186.947959][T10769] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.947984][T10769] ? __lock_acquire+0x548/0x3fb0 [ 1186.963484][T10769] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1186.963512][T10769] ? __alloc_fd+0x430/0x530 [ 1186.963531][T10769] do_filp_open+0x1a1/0x280 [ 1186.963548][T10769] ? may_open_dev+0x100/0x100 [ 1186.963575][T10769] ? lock_downgrade+0x880/0x880 [ 1186.971179][T10769] ? kasan_check_read+0x11/0x20 [ 1186.971205][T10769] ? do_raw_spin_unlock+0x57/0x270 [ 1186.971222][T10769] ? _raw_spin_unlock+0x2d/0x50 [ 1186.971238][T10769] ? __alloc_fd+0x430/0x530 [ 1186.971266][T10769] do_sys_open+0x3fe/0x5d0 [ 1187.069454][T10930] FAULT_INJECTION: forcing a failure. [ 1187.069454][T10930] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.074323][T10769] ? filp_open+0x80/0x80 [ 1187.074342][T10769] ? blkcg_exit_queue+0x30/0x30 [ 1187.074364][T10769] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1187.074379][T10769] ? do_syscall_64+0x26/0x610 [ 1187.074408][T10769] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.164687][T10769] ? do_syscall_64+0x26/0x610 [ 1187.169377][T10769] __x64_sys_open+0x7e/0xc0 [ 1187.173897][T10769] do_syscall_64+0x103/0x610 [ 1187.178513][T10769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.184411][T10769] RIP: 0033:0x412011 [ 1187.188327][T10769] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1187.207962][T10769] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1187.216378][T10769] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1187.224355][T10769] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f32beb39bd0 [ 1187.232332][T10769] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1187.240307][T10769] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1187.248290][T10769] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 [ 1187.256298][T10930] CPU: 1 PID: 10930 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1187.264978][T10930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.275029][T10930] Call Trace: [ 1187.278327][T10930] dump_stack+0x172/0x1f0 [ 1187.282674][T10930] should_fail.cold+0xa/0x15 [ 1187.287284][T10930] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1187.293103][T10930] ? ___might_sleep+0x163/0x280 [ 1187.297964][T10930] __should_failslab+0x121/0x190 [ 1187.302907][T10930] should_failslab+0x9/0x14 [ 1187.307435][T10930] kmem_cache_alloc_node+0x264/0x710 [ 1187.312740][T10930] alloc_unbound_pwq+0x4c5/0xcf0 [ 1187.317709][T10930] apply_wqattrs_prepare+0x35e/0x970 [ 1187.323018][T10930] apply_workqueue_attrs_locked+0xcb/0x140 [ 1187.328839][T10930] apply_workqueue_attrs+0x31/0x50 [ 1187.333958][T10930] alloc_workqueue+0x84c/0xe70 [ 1187.338739][T10930] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1187.344476][T10930] ? __init_waitqueue_head+0x36/0x90 [ 1187.349783][T10930] hci_register_dev+0x1b8/0x860 [ 1187.354636][T10930] ? hci_init_sysfs+0x7c/0xa0 [ 1187.359331][T10930] __vhci_create_device+0x2d0/0x5a0 [ 1187.364541][T10930] vhci_write+0x2d0/0x470 [ 1187.368889][T10930] new_sync_write+0x4c7/0x760 [ 1187.373584][T10930] ? default_llseek+0x2e0/0x2e0 [ 1187.378454][T10930] ? common_file_perm+0x238/0x720 [ 1187.383491][T10930] ? __fget+0x381/0x550 [ 1187.387660][T10930] ? apparmor_file_permission+0x25/0x30 [ 1187.393220][T10930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.399506][T10930] ? security_file_permission+0x94/0x380 [ 1187.405155][T10930] __vfs_write+0xe4/0x110 [ 1187.409497][T10930] vfs_write+0x20c/0x580 [ 1187.413754][T10930] ksys_write+0xea/0x1f0 [ 1187.418011][T10930] ? __ia32_sys_read+0xb0/0xb0 [ 1187.422785][T10930] ? do_syscall_64+0x26/0x610 [ 1187.427470][T10930] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.433546][T10930] ? do_syscall_64+0x26/0x610 [ 1187.438238][T10930] __x64_sys_write+0x73/0xb0 [ 1187.442849][T10930] do_syscall_64+0x103/0x610 [ 1187.447455][T10930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.453340][T10930] RIP: 0033:0x457f29 [ 1187.457218][T10930] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1187.476803][T10930] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1187.485210][T10930] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1187.493187][T10930] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1187.501140][T10930] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1187.509094][T10930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 16:58:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x101, 0x400000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x10001, 0x0, 0x0, 0x100}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000100)={0x20, r3}) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:58:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x880, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x400000, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001900)='/dev/rfkill\x00', 0x4000, 0x0) r7 = dup(r0) r8 = socket(0x3, 0x80005, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001940)={0xffffffffffffffff}) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001980)='/dev/qat_adf_ctl\x00', 0x240, 0x0) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/dsp\x00', 0x400000, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x9c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000004) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r12 = epoll_create1(0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r13 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$SCSI_IOCTL_SYNC(r13, 0x4) 16:58:32 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80000000, 0x80100) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x0, 0x0, 0xfffffffffffff000}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000100)={0x4}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:32 executing program 2 (fault-call:2 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1187.517049][T10930] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1187.537974][T10930] Bluetooth: Can't register HCI device 16:58:32 executing program 0 (fault-call:3 fault-nth:12): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1187.622386][T10992] FAULT_INJECTION: forcing a failure. [ 1187.622386][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.636537][T10992] CPU: 0 PID: 10992 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1187.645219][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.645226][T10992] Call Trace: [ 1187.645252][T10992] dump_stack+0x172/0x1f0 [ 1187.645278][T10992] should_fail.cold+0xa/0x15 [ 1187.645301][T10992] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1187.645324][T10992] ? __task_pid_nr_ns+0x1b1/0x530 [ 1187.645351][T10992] __should_failslab+0x121/0x190 [ 1187.645373][T10992] should_failslab+0x9/0x14 [ 1187.645398][T10992] kmem_cache_alloc_trace+0x4b/0x760 [ 1187.645418][T10992] ? kasan_check_read+0x11/0x20 [ 1187.698291][T10992] proc_self_get_link+0x16f/0x1d0 [ 1187.703350][T10992] link_path_walk.part.0+0xeec/0x1340 [ 1187.708734][T10992] ? proc_ns_dir_readdir+0x570/0x570 [ 1187.714054][T10992] ? walk_component+0x2000/0x2000 [ 1187.717825][T11108] FAULT_INJECTION: forcing a failure. [ 1187.717825][T11108] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.719111][T10992] path_openat+0x202/0x46e0 [ 1187.719137][T10992] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1187.719161][T10992] ? kasan_slab_alloc+0xf/0x20 [ 1187.746768][T10992] ? kmem_cache_alloc+0x11a/0x6f0 [ 1187.751792][T10992] ? getname_flags+0xd6/0x5b0 [ 1187.756476][T10992] ? getname+0x1a/0x20 [ 1187.760547][T10992] ? do_sys_open+0x2c9/0x5d0 [ 1187.765384][T10992] ? __lock_acquire+0x548/0x3fb0 [ 1187.770331][T10992] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1187.775715][T10992] ? __alloc_fd+0x430/0x530 [ 1187.780230][T10992] do_filp_open+0x1a1/0x280 [ 1187.784762][T10992] ? may_open_dev+0x100/0x100 [ 1187.789456][T10992] ? kasan_check_read+0x11/0x20 [ 1187.794313][T10992] ? do_raw_spin_unlock+0x57/0x270 [ 1187.799434][T10992] ? _raw_spin_unlock+0x2d/0x50 [ 1187.804313][T10992] do_sys_open+0x3fe/0x5d0 [ 1187.808737][T10992] ? filp_open+0x80/0x80 [ 1187.812997][T10992] ? blkcg_exit_queue+0x30/0x30 [ 1187.817855][T10992] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1187.823318][T10992] ? do_syscall_64+0x26/0x610 [ 1187.828084][T10992] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.834154][T10992] ? do_syscall_64+0x26/0x610 [ 1187.838848][T10992] __x64_sys_open+0x7e/0xc0 [ 1187.843392][T10992] do_syscall_64+0x103/0x610 [ 1187.847990][T10992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.853886][T10992] RIP: 0033:0x412011 [ 1187.857795][T10992] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1187.877398][T10992] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1187.885810][T10992] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1187.893808][T10992] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f32beb39bd0 [ 1187.901775][T10992] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1187.909745][T10992] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 16:58:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) bind$ax25(r1, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default]}, 0x48) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1187.917719][T10992] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 [ 1187.925709][T11108] CPU: 1 PID: 11108 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1187.934646][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.944704][T11108] Call Trace: [ 1187.944726][T11108] dump_stack+0x172/0x1f0 [ 1187.944761][T11108] should_fail.cold+0xa/0x15 [ 1187.944779][T11108] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1187.944812][T11108] ? ___might_sleep+0x163/0x280 [ 1187.944836][T11108] __should_failslab+0x121/0x190 [ 1187.972560][T11108] should_failslab+0x9/0x14 [ 1187.977071][T11108] __kmalloc+0x2dc/0x740 [ 1187.981325][T11108] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1187.987056][T11108] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 1187.992525][T11108] ? alloc_workqueue+0x13c/0xe70 [ 1187.997569][T11108] alloc_workqueue+0x13c/0xe70 [ 1188.002370][T11108] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1188.008103][T11108] ? __init_waitqueue_head+0x36/0x90 [ 1188.013398][T11108] hci_register_dev+0x209/0x860 [ 1188.018259][T11108] __vhci_create_device+0x2d0/0x5a0 16:58:32 executing program 2 (fault-call:2 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x2, 0x6, 0x7, 0x5, 0xffffffffffffffe1, 0x8}, 0x4}, 0xa) bind$netrom(r0, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1188.023462][T11108] vhci_write+0x2d0/0x470 [ 1188.027801][T11108] new_sync_write+0x4c7/0x760 [ 1188.032481][T11108] ? default_llseek+0x2e0/0x2e0 [ 1188.037346][T11108] ? common_file_perm+0x238/0x720 [ 1188.042375][T11108] ? __fget+0x381/0x550 [ 1188.046541][T11108] ? apparmor_file_permission+0x25/0x30 [ 1188.052102][T11108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.058356][T11108] ? security_file_permission+0x94/0x380 [ 1188.064005][T11108] __vfs_write+0xe4/0x110 [ 1188.068351][T11108] vfs_write+0x20c/0x580 [ 1188.072611][T11108] ksys_write+0xea/0x1f0 [ 1188.076864][T11108] ? __ia32_sys_read+0xb0/0xb0 [ 1188.081637][T11108] ? do_syscall_64+0x26/0x610 [ 1188.086324][T11108] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.092401][T11108] ? do_syscall_64+0x26/0x610 [ 1188.097096][T11108] __x64_sys_write+0x73/0xb0 [ 1188.101712][T11108] do_syscall_64+0x103/0x610 [ 1188.106318][T11108] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.112217][T11108] RIP: 0033:0x457f29 16:58:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1188.116140][T11108] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1188.126300][T11158] FAULT_INJECTION: forcing a failure. [ 1188.126300][T11158] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.135762][T11108] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1188.135778][T11108] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1188.135787][T11108] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1188.135796][T11108] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1188.135805][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1188.135814][T11108] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1188.154033][T11108] Bluetooth: Can't register HCI device [ 1188.171924][T11158] CPU: 0 PID: 11158 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1188.181177][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.181183][T11158] Call Trace: 16:58:32 executing program 0 (fault-call:3 fault-nth:13): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1188.181212][T11158] dump_stack+0x172/0x1f0 [ 1188.181235][T11158] should_fail.cold+0xa/0x15 [ 1188.181255][T11158] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1188.181281][T11158] ? ___might_sleep+0x163/0x280 [ 1188.197213][T11158] __should_failslab+0x121/0x190 [ 1188.197232][T11158] should_failslab+0x9/0x14 [ 1188.197248][T11158] kmem_cache_alloc+0x2b2/0x6f0 [ 1188.197263][T11158] ? __lock_acquire+0x548/0x3fb0 [ 1188.197279][T11158] ? __lock_acquire+0x548/0x3fb0 [ 1188.197295][T11158] __d_alloc+0x2e/0x8c0 16:58:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_in(r0, 0xb38d9db268ed974d, &(0x7f0000000000)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x0, [], [{0x2, 0xa1a9, 0x9, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x4, 0x795, 0xfffffffffffffffb}], [[], [], [], [], [], [], []]}) [ 1188.197313][T11158] d_alloc+0x4d/0x2b0 [ 1188.273989][T11260] FAULT_INJECTION: forcing a failure. [ 1188.273989][T11260] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.276510][T11158] ? find_held_lock+0x35/0x130 [ 1188.276530][T11158] d_alloc_parallel+0xf4/0x1bc0 [ 1188.276554][T11158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.276573][T11158] ? kasan_check_read+0x11/0x20 [ 1188.276594][T11158] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1188.314644][T11158] ? __d_lookup+0x433/0x760 [ 1188.319145][T11158] ? lookup_open+0x2c2/0x1b10 [ 1188.323814][T11158] ? d_lookup+0xf9/0x260 [ 1188.328079][T11158] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1188.333401][T11158] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1188.339127][T11158] ? d_lookup+0x19e/0x260 [ 1188.343483][T11158] lookup_open+0x52a/0x1b10 [ 1188.348018][T11158] ? vfs_link+0xbc0/0xbc0 [ 1188.352390][T11158] path_openat+0x1eb4/0x46e0 [ 1188.356982][T11158] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1188.362790][T11158] ? kasan_slab_alloc+0xf/0x20 [ 1188.367565][T11158] ? kmem_cache_alloc+0x11a/0x6f0 [ 1188.372602][T11158] ? getname_flags+0xd6/0x5b0 [ 1188.377281][T11158] ? getname+0x1a/0x20 [ 1188.381352][T11158] ? do_sys_open+0x2c9/0x5d0 [ 1188.385978][T11158] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1188.391366][T11158] ? __alloc_fd+0x430/0x530 [ 1188.395882][T11158] do_filp_open+0x1a1/0x280 [ 1188.400408][T11158] ? may_open_dev+0x100/0x100 [ 1188.405100][T11158] ? simple_attr_release+0x50/0x50 [ 1188.410219][T11158] ? do_raw_spin_unlock+0x57/0x270 [ 1188.415347][T11158] ? _raw_spin_unlock+0x2d/0x50 [ 1188.420224][T11158] do_sys_open+0x3fe/0x5d0 16:58:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x9fc, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000000)=0x54) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0xffffff84, 0x0}) [ 1188.424644][T11158] ? filp_open+0x80/0x80 [ 1188.428898][T11158] ? blkcg_exit_queue+0x30/0x30 [ 1188.433764][T11158] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1188.439222][T11158] ? do_syscall_64+0x26/0x610 [ 1188.443904][T11158] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.449984][T11158] ? do_syscall_64+0x26/0x610 [ 1188.454668][T11158] __x64_sys_open+0x7e/0xc0 [ 1188.459176][T11158] do_syscall_64+0x103/0x610 [ 1188.463790][T11158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.469681][T11158] RIP: 0033:0x412011 [ 1188.473575][T11158] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1188.493177][T11158] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1188.501606][T11158] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1188.509602][T11158] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f32beb39bd0 [ 1188.517601][T11158] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1188.525570][T11158] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1188.533542][T11158] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 [ 1188.542535][T11260] CPU: 1 PID: 11260 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1188.551219][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.561263][T11260] Call Trace: [ 1188.561285][T11260] dump_stack+0x172/0x1f0 [ 1188.561307][T11260] should_fail.cold+0xa/0x15 [ 1188.561326][T11260] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1188.561347][T11260] ? ___might_sleep+0x163/0x280 [ 1188.584202][T11260] __should_failslab+0x121/0x190 [ 1188.589148][T11260] should_failslab+0x9/0x14 [ 1188.593652][T11260] kmem_cache_alloc_trace+0x2d1/0x760 [ 1188.599032][T11260] ? rcu_read_lock_sched_held+0x110/0x130 [ 1188.604757][T11260] ? __kmalloc+0x5d5/0x740 [ 1188.609199][T11260] alloc_workqueue_attrs+0x82/0x120 [ 1188.614407][T11260] alloc_workqueue+0x166/0xe70 [ 1188.619212][T11260] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1188.624995][T11260] ? __init_waitqueue_head+0x36/0x90 [ 1188.630295][T11260] hci_register_dev+0x209/0x860 [ 1188.635162][T11260] __vhci_create_device+0x2d0/0x5a0 [ 1188.640372][T11260] vhci_write+0x2d0/0x470 [ 1188.644717][T11260] new_sync_write+0x4c7/0x760 [ 1188.649415][T11260] ? default_llseek+0x2e0/0x2e0 [ 1188.654278][T11260] ? common_file_perm+0x238/0x720 [ 1188.659311][T11260] ? __fget+0x381/0x550 [ 1188.663473][T11260] ? apparmor_file_permission+0x25/0x30 [ 1188.669028][T11260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.675273][T11260] ? security_file_permission+0x94/0x380 [ 1188.680927][T11260] __vfs_write+0xe4/0x110 [ 1188.685270][T11260] vfs_write+0x20c/0x580 [ 1188.689521][T11260] ksys_write+0xea/0x1f0 [ 1188.693768][T11260] ? __ia32_sys_read+0xb0/0xb0 [ 1188.698535][T11260] ? do_syscall_64+0x26/0x610 [ 1188.703210][T11260] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.709290][T11260] ? do_syscall_64+0x26/0x610 [ 1188.713999][T11260] __x64_sys_write+0x73/0xb0 [ 1188.718619][T11260] do_syscall_64+0x103/0x610 16:58:33 executing program 2 (fault-call:2 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1188.723216][T11260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.729107][T11260] RIP: 0033:0x457f29 [ 1188.733010][T11260] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1188.747772][T11571] FAULT_INJECTION: forcing a failure. [ 1188.747772][T11571] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.752620][T11260] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1188.752635][T11260] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1188.752644][T11260] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1188.752653][T11260] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1188.752661][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1188.752679][T11260] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1188.813467][T11571] CPU: 0 PID: 11571 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 1188.820797][T11260] Bluetooth: Can't register HCI device [ 1188.822144][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.822149][T11571] Call Trace: [ 1188.822172][T11571] dump_stack+0x172/0x1f0 [ 1188.822202][T11571] should_fail.cold+0xa/0x15 [ 1188.822223][T11571] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1188.837721][T11571] ? __task_pid_nr_ns+0x1b1/0x530 [ 1188.837745][T11571] __should_failslab+0x121/0x190 [ 1188.837764][T11571] should_failslab+0x9/0x14 [ 1188.837781][T11571] kmem_cache_alloc_trace+0x4b/0x760 [ 1188.837795][T11571] ? kasan_check_read+0x11/0x20 [ 1188.837824][T11571] proc_self_get_link+0x16f/0x1d0 [ 1188.845416][T11571] link_path_walk.part.0+0xeec/0x1340 [ 1188.845434][T11571] ? proc_ns_dir_readdir+0x570/0x570 [ 1188.845465][T11571] ? walk_component+0x2000/0x2000 [ 1188.845511][T11571] path_openat+0x202/0x46e0 [ 1188.845553][T11571] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1188.911574][T11571] ? kasan_slab_alloc+0xf/0x20 [ 1188.916330][T11571] ? kmem_cache_alloc+0x11a/0x6f0 [ 1188.921333][T11571] ? getname_flags+0xd6/0x5b0 [ 1188.925987][T11571] ? getname+0x1a/0x20 [ 1188.930033][T11571] ? do_sys_open+0x2c9/0x5d0 [ 1188.934636][T11571] ? __lock_acquire+0x548/0x3fb0 [ 1188.939563][T11571] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1188.944936][T11571] ? __alloc_fd+0x430/0x530 [ 1188.949420][T11571] do_filp_open+0x1a1/0x280 [ 1188.953898][T11571] ? may_open_dev+0x100/0x100 [ 1188.958565][T11571] ? kasan_check_read+0x11/0x20 [ 1188.963402][T11571] ? do_raw_spin_unlock+0x57/0x270 [ 1188.968509][T11571] ? _raw_spin_unlock+0x2d/0x50 [ 1188.973359][T11571] do_sys_open+0x3fe/0x5d0 [ 1188.977755][T11571] ? filp_open+0x80/0x80 [ 1188.981978][T11571] ? blkcg_exit_queue+0x30/0x30 [ 1188.986825][T11571] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1188.992261][T11571] ? do_syscall_64+0x26/0x610 [ 1188.996922][T11571] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.002970][T11571] ? do_syscall_64+0x26/0x610 [ 1189.007641][T11571] __x64_sys_open+0x7e/0xc0 [ 1189.012125][T11571] do_syscall_64+0x103/0x610 [ 1189.016696][T11571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.022564][T11571] RIP: 0033:0x412011 [ 1189.026437][T11571] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1189.046031][T11571] RSP: 002b:00007f32beb39bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1189.054417][T11571] RAX: ffffffffffffffda RBX: 00007f32beb39c90 RCX: 0000000000412011 [ 1189.062364][T11571] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f32beb39bd0 [ 1189.070312][T11571] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000012 [ 1189.078258][T11571] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f32beb3a6d4 [ 1189.086214][T11571] R13: 00000000004c6c76 R14: 00000000004dc300 R15: 0000000000000005 16:58:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffffffffffff) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="028b39bd70000400df000141001e0018001700000015000080086595df5ec9b6ed04838ef4191ac04eb82143fdf10c83272aede4a32229280d8610d6ba22a77cd5901f40c0cf7513ec9be3e629ece48081d678f8b3678bd900000000000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) accept4(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000000)=0x80, 0x800) 16:58:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) getrandom(&(0x7f0000000040)=""/141, 0x8d, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x400) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:33 executing program 0 (fault-call:3 fault-nth:14): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:33 executing program 2 (fault-call:2 fault-nth:15): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1189.310105][T11580] FAULT_INJECTION: forcing a failure. [ 1189.310105][T11580] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.335455][T11580] CPU: 0 PID: 11580 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1189.344153][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.354219][T11580] Call Trace: [ 1189.357521][T11580] dump_stack+0x172/0x1f0 [ 1189.361865][T11580] should_fail.cold+0xa/0x15 [ 1189.366469][T11580] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1189.372287][T11580] ? ___might_sleep+0x163/0x280 [ 1189.377146][T11580] __should_failslab+0x121/0x190 [ 1189.382091][T11580] should_failslab+0x9/0x14 [ 1189.386598][T11580] __kmalloc_track_caller+0x2d8/0x740 [ 1189.391974][T11580] ? pointer+0x910/0x910 [ 1189.396227][T11580] ? set_precision+0x180/0x180 [ 1189.400993][T11580] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1189.406646][T11580] ? kasprintf+0xbb/0xf0 [ 1189.410898][T11580] kvasprintf+0xc8/0x170 [ 1189.415176][T11580] ? bust_spinlocks+0xe0/0xe0 [ 1189.419873][T11580] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1189.425605][T11580] ? find_next_bit+0x107/0x130 [ 1189.430372][T11580] kasprintf+0xbb/0xf0 [ 1189.434451][T11580] ? kvasprintf_const+0x190/0x190 [ 1189.439493][T11580] ? kasan_check_read+0x11/0x20 [ 1189.444358][T11580] alloc_workqueue+0x442/0xe70 [ 1189.449140][T11580] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1189.454874][T11580] ? __init_waitqueue_head+0x36/0x90 [ 1189.460196][T11580] hci_register_dev+0x209/0x860 [ 1189.465075][T11580] __vhci_create_device+0x2d0/0x5a0 [ 1189.470284][T11580] vhci_write+0x2d0/0x470 [ 1189.474627][T11580] new_sync_write+0x4c7/0x760 [ 1189.479317][T11580] ? default_llseek+0x2e0/0x2e0 [ 1189.484176][T11580] ? common_file_perm+0x238/0x720 [ 1189.489243][T11580] ? __fget+0x381/0x550 [ 1189.493413][T11580] ? apparmor_file_permission+0x25/0x30 [ 1189.498961][T11580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.505214][T11580] ? security_file_permission+0x94/0x380 16:58:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1189.510871][T11580] __vfs_write+0xe4/0x110 [ 1189.515226][T11580] vfs_write+0x20c/0x580 [ 1189.519662][T11580] ksys_write+0xea/0x1f0 [ 1189.523921][T11580] ? __ia32_sys_read+0xb0/0xb0 [ 1189.528691][T11580] ? do_syscall_64+0x26/0x610 [ 1189.533374][T11580] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.539447][T11580] ? do_syscall_64+0x26/0x610 [ 1189.544137][T11580] __x64_sys_write+0x73/0xb0 [ 1189.548734][T11580] do_syscall_64+0x103/0x610 [ 1189.553328][T11580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.559228][T11580] RIP: 0033:0x457f29 [ 1189.563134][T11580] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1189.582739][T11580] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1189.591154][T11580] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1189.599133][T11580] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 16:58:34 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/164) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x5}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0x7, 0x5}, &(0x7f0000000300)=0xc) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f00000000c0)={0x3, 0x1fb, 0x0, 0x0}) 16:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101401, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000080)=0x8) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1189.607102][T11580] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1189.615087][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1189.623054][T11580] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 16:58:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='.s/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x600000, 0x0) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000040)) 16:58:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='/s/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='n./pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x100, 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:44 executing program 0 (fault-call:3 fault-nth:15): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x400, 0x2, 0x7f}, 0x2}, 0x20, 0x1, 0x0) 16:58:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='n//pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r1, &(0x7f0000004140)=""/37, 0x25, 0x40000000, &(0x7f0000004180)={0x2, 0x4e22, @local}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101840, 0x0) getdents(r4, &(0x7f00000002c0)=""/249, 0xf9) accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x3, 0x200, 0x1, 0x3}, 0x24, 0x0, 0x0, 0x0, "f6eacd242f25b6cb5289159533d6d9575e079d834c72331259566d283bb42eb7beddfe16f7087cfd299f6ec36fdc876b7b07e92ae2fb15d3f3374ed4b11b8c66"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = semget(0x2, 0x5, 0x40c) semctl$IPC_RMID(r1, 0x0, 0x0) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/.id_\x00\x00e_\xf1\x03@\x00en\x00') [ 1199.971261][T12155] FAULT_INJECTION: forcing a failure. [ 1199.971261][T12155] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.000654][T12155] CPU: 0 PID: 12155 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1200.009347][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.019415][T12155] Call Trace: [ 1200.022715][T12155] dump_stack+0x172/0x1f0 [ 1200.027053][T12155] should_fail.cold+0xa/0x15 [ 1200.031644][T12155] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1200.037458][T12155] ? ___might_sleep+0x163/0x280 [ 1200.042311][T12155] __should_failslab+0x121/0x190 [ 1200.047249][T12155] should_failslab+0x9/0x14 [ 1200.051755][T12155] __kmalloc_track_caller+0x2d8/0x740 [ 1200.057130][T12155] ? pointer+0x910/0x910 [ 1200.061369][T12155] ? set_precision+0x180/0x180 [ 1200.066142][T12155] ? kasprintf+0xbb/0xf0 [ 1200.070390][T12155] kvasprintf+0xc8/0x170 [ 1200.074626][T12155] ? bust_spinlocks+0xe0/0xe0 [ 1200.079309][T12155] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1200.085025][T12155] ? find_next_bit+0x107/0x130 [ 1200.089798][T12155] kasprintf+0xbb/0xf0 [ 1200.093861][T12155] ? kvasprintf_const+0x190/0x190 [ 1200.098979][T12155] ? kasan_check_read+0x11/0x20 [ 1200.103834][T12155] alloc_workqueue+0x442/0xe70 [ 1200.108603][T12155] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1200.114326][T12155] ? __init_waitqueue_head+0x36/0x90 [ 1200.119618][T12155] hci_register_dev+0x209/0x860 [ 1200.124475][T12155] __vhci_create_device+0x2d0/0x5a0 [ 1200.129674][T12155] vhci_write+0x2d0/0x470 [ 1200.134015][T12155] new_sync_write+0x4c7/0x760 [ 1200.138696][T12155] ? default_llseek+0x2e0/0x2e0 [ 1200.143551][T12155] ? common_file_perm+0x238/0x720 [ 1200.148571][T12155] ? __fget+0x381/0x550 [ 1200.152750][T12155] ? apparmor_file_permission+0x25/0x30 [ 1200.158306][T12155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1200.164547][T12155] ? security_file_permission+0x94/0x380 [ 1200.170181][T12155] __vfs_write+0xe4/0x110 [ 1200.174521][T12155] vfs_write+0x20c/0x580 [ 1200.178767][T12155] ksys_write+0xea/0x1f0 [ 1200.183010][T12155] ? __ia32_sys_read+0xb0/0xb0 [ 1200.187787][T12155] ? do_syscall_64+0x26/0x610 [ 1200.192471][T12155] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1200.198532][T12155] ? do_syscall_64+0x26/0x610 [ 1200.203222][T12155] __x64_sys_write+0x73/0xb0 [ 1200.207810][T12155] do_syscall_64+0x103/0x610 [ 1200.212397][T12155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1200.218284][T12155] RIP: 0033:0x457f29 [ 1200.222177][T12155] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1200.241783][T12155] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1200.250196][T12155] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1200.258167][T12155] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 16:58:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x800, 0x2) getpeername(r1, &(0x7f0000000280)=@ax25={{0x3, @bcast}, [@null, @netrom, @bcast, @bcast, @rose, @rose, @null, @bcast]}, &(0x7f0000000300)=0x80) prctl$PR_SET_SECUREBITS(0x1c, 0x8) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="57e66fbc75d56b4a12ae08b14684ee2d16557ec4739a5a63c708bc402d0ab33a1b34d795f48345ae57ed1bd5862d986728ce846f0a38fbf23bc9778ab990c6ef3efb183d94303c732af96f8c42c0777352c5a5a023baf962b8e3fa95407cfa6f0083b8df7f396a7a3870293aee303f02a53cf0d60c806deac8cd32e358270e16c5289e5bc9f3ad51d13d3cea3b07f98b37f6aa759a161a8eb9ee0e73b9f977cdc845c7c52d88acf50634867cc9ce322f5d15b2adee6a8b255dffac2705", 0xbd}, {&(0x7f0000000340)="c298681b3560f9519c2683d25379aac8098313e2f06c748d8df572be6487f0b61ed7ffc98e61a98b9b6d64167dbf867a11", 0x31}, {&(0x7f00000014c0)="5da183c5a08058a263298ae2bf8eaf8cb82bd756cf93e43f025e61f61462ed6ee23a4a37199d933f2ef177a409f900420450974b04c4c4b2cd839270f4af2154f480d69073e776220a9fa0a8165d44e2e99be72ae0eade87", 0x58}, {&(0x7f0000000380)="3586d9937f2ae47ef7b2f8793ba0cbd0ef09ecbbc05972222cee46b0", 0x1c}, {&(0x7f0000001540)="e6ae10a4d89b3c8a07f5139df3dc38e8c89fb416563469195153f671", 0x1c}, {&(0x7f0000001580)="d6db644dd840427820c974bc1061ae605739552744b1cdf400dd97cb22434e3a320c3a8eb5eca0e1199932448f2f6fd4c638dcf55c68aeb596b502389a09dec422c9736cd68ccceddb07a09c002140cbce61dab94716ffa257bc9a108801878824a10e7e7234fa29e6f92e2f88ad52116d2868777849015b7fb275a3c152433fc3a6c4f6a59703099bb5831db13b9437f2b333a4501177f04b14753c71968d1321782d703a4a903b43c4143b38085ea1909b79d1b6c591855196d96c7c2b363835a109", 0xc3}], 0x7, &(0x7f0000001700)=[@assoc={0x18, 0x117, 0x4, 0x56}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x110, 0x117, 0x2, 0xf5, "950955952e91a5baaabfc08ff9e74587b02f5ab3d5ea34aa87de938e5602e3e73acd1f82395fe32e727a0ad14ff16d3885616d640b8c1d6efbfece89c519606615d472b494f36d2c9ca46fd7cb8c1acde5d487ed62957bc6b883ca34a10cbd47956bda4b93d2a26eca1d9f14c8de18e532742f23817dcf6b7e6206d3388f9c0a3255bf9b2cd8ded8eb5c47c45a98d064bdb116bce676891ffbbb81fff2695345386183d5dbff62b5047620449d867d2a26386be6a510744fe857a391f5685d5ec0cd6303ec51a9a1838e0de2babdb7b83301e465d9a26aaf30fa1503d797046f03d8f2e5cf5f81a04e861d280aac8fbe0e23330916"}, @op={0x18}], 0x158, 0x80}, 0x4000000) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000240)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x400, 0x10200) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001900)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r4, 0x1}, 0x8) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000180)={@empty, @multicast2}, &(0x7f00000001c0)=0x8) [ 1200.266149][T12155] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1200.274118][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1200.282082][T12155] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 16:58:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c12a41d88b07037c530c77044cde93be8fb4026e869744ff3dfcdf2a742af43cb9a7e025bafb172ca181220b4d1ecd3e787331447ec4b76d0834a62d336e125496b70a65b2fb5e9bb1394689f7949d2a461058f65977cd13e648dc1b7c9043af390dbb2a645767e91948ae10cb75fff02dfd71f86fc919cbee5d9b9d55df5daa62fb513636c2307ad5d21e8e74c1c62b91175316c623fa0c165538afbb1f024a2d26cb84bda937223ea865355f73e8b6f024663ea9a5046123b08ad2f4eccf4ad2186c6b2a44993b2b06829802cc1623eae26056bf3a64d6a5232a38642cf2aac2e9f1add3bd44782ccf3cc5d0c0225") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x99c1) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) fsetxattr$security_evm(r2, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@ng={0x4, 0x3, '\'0'}, 0x4, 0x1) 16:58:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x40000000}) r1 = eventfd(0x200) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000340)={0x2, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x801, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x4, 0xe8, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000100)=""/232}, &(0x7f0000000240)=0x78) 16:58:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns//id_\x00\x00e_\xf1\x03@\x00en\x00') 16:58:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) read(r1, &(0x7f0000000200)=""/149, 0x95) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x22800, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400040, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000100)=0x40) 16:58:55 executing program 0 (fault-call:3 fault-nth:16): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x02\x00e_\xf1\x03@\x00en\x00') 16:58:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x101000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000040)={0x7, 0x5, 0x5, 0x20, 0x1000000, 0xb29, 0xa}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x10) r2 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000000c0)=""/104) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:55 executing program 3: openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x400, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:58:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1210.815775][T12687] FAULT_INJECTION: forcing a failure. [ 1210.815775][T12687] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.831516][T12687] CPU: 1 PID: 12687 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1210.840224][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.850280][T12687] Call Trace: [ 1210.853575][T12687] dump_stack+0x172/0x1f0 [ 1210.857956][T12687] should_fail.cold+0xa/0x15 [ 1210.857978][T12687] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1210.858002][T12687] ? ___might_sleep+0x163/0x280 [ 1210.858028][T12687] __should_failslab+0x121/0x190 [ 1210.878786][T12687] should_failslab+0x9/0x14 [ 1210.883318][T12687] kmem_cache_alloc_trace+0x2d1/0x760 [ 1210.888703][T12687] ? rcu_read_lock_sched_held+0x110/0x130 [ 1210.894435][T12687] ? __kmalloc+0x5d5/0x740 [ 1210.898857][T12687] alloc_workqueue_attrs+0x82/0x120 [ 1210.904060][T12687] apply_wqattrs_prepare+0xbb/0x970 [ 1210.909272][T12687] apply_workqueue_attrs_locked+0xcb/0x140 [ 1210.915101][T12687] apply_workqueue_attrs+0x31/0x50 [ 1210.920220][T12687] alloc_workqueue+0x84c/0xe70 [ 1210.925007][T12687] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1210.930745][T12687] ? __init_waitqueue_head+0x36/0x90 [ 1210.936045][T12687] hci_register_dev+0x209/0x860 [ 1210.940909][T12687] __vhci_create_device+0x2d0/0x5a0 [ 1210.946121][T12687] vhci_write+0x2d0/0x470 [ 1210.950457][T12687] new_sync_write+0x4c7/0x760 [ 1210.955149][T12687] ? default_llseek+0x2e0/0x2e0 [ 1210.960024][T12687] ? common_file_perm+0x238/0x720 [ 1210.965050][T12687] ? __fget+0x381/0x550 [ 1210.969218][T12687] ? apparmor_file_permission+0x25/0x30 [ 1210.974771][T12687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.981027][T12687] ? security_file_permission+0x94/0x380 [ 1210.986666][T12687] __vfs_write+0xe4/0x110 [ 1210.991015][T12687] vfs_write+0x20c/0x580 [ 1210.995300][T12687] ksys_write+0xea/0x1f0 [ 1210.999552][T12687] ? __ia32_sys_read+0xb0/0xb0 [ 1211.004325][T12687] ? do_syscall_64+0x26/0x610 [ 1211.009007][T12687] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.015084][T12687] ? do_syscall_64+0x26/0x610 [ 1211.019782][T12687] __x64_sys_write+0x73/0xb0 [ 1211.024393][T12687] do_syscall_64+0x103/0x610 [ 1211.028992][T12687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.034888][T12687] RIP: 0033:0x457f29 [ 1211.038787][T12687] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1211.058392][T12687] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 16:58:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x04\x00e_\xf1\x03@\x00en\x00') 16:58:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x80400000004}) r2 = epoll_create1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x1}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000500)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000540)=0x100000000, 0x4) sendto$ax25(r1, &(0x7f0000000a80)="591dfce07bd6032fe07c28686aa490fa5ea247d0d9d718b85537d157b0097a62b2c02132094d4a130ce7f9bbb3e168684399d6df98227adc1ee92edc5049333b99de704654b78fc8df0a7786c08ba56a505b69db782f175dbdeaa09a27e7ad1e22bb11b95ec73f7380b8bddc9b90b29c2d4f011d384f90e5b1e75da97f8ce50e940ab4fd9a11bbb08d41ecdcbc0092771b086ee1a37a7973f1cd7c872cb97e9796d8ee77d3f1bbb0b92b887b4e0c3e0aa49e1677668212c509fd47c951c2382fa6c985d28f", 0xc5, 0x10, &(0x7f0000000440)={{0x3, @bcast, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000004c0)={0x7fff}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x17, 0xf, 0xc, 0x17, 0x1, 0x8, 0x5, 0x99}}) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x05\x00e_\xf1\x03@\x00en\x00') 16:58:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f4, 0x101000) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 16:58:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\'\x00e_\xf1\x03@\x00en\x00') [ 1211.066801][T12687] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1211.074768][T12687] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1211.082741][T12687] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1211.090717][T12687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1211.098683][T12687] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1211.115906][T12687] Bluetooth: Can't register HCI device 16:58:55 executing program 0 (fault-call:3 fault-nth:17): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)={0x7, 0x0, [{0xc0000001, 0x100000000, 0xdfd, 0xde3, 0x1}, {0x7, 0x100000000, 0x2, 0x3, 0x7}, {0x4000000b, 0x6, 0x1, 0x1f, 0x6}, {0x80000001, 0x8d7f865, 0x8, 0xb4f, 0x6}, {0x8000000f, 0x8000, 0x2, 0x7ff, 0x8}, {0x6, 0x5, 0x4, 0x4, 0x3}, {0x7, 0x8001, 0x6, 0xe8, 0xff}]}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:58:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_H\x00e_\xf1\x03@\x00en\x00') 16:58:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3f, 0x101000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000a80)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x5}, 0x8) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0xfffffffffffffffc, r3}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00'}, 0x45c) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) 16:58:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1211.234632][T13042] FAULT_INJECTION: forcing a failure. [ 1211.234632][T13042] name failslab, interval 1, probability 0, space 0, times 0 16:58:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000400)=@HCI_EVENT_PKT={0x4, "60f445908225d9bf69a3e67eb9f8ab085e5106870e052fd754a118faa2350dbf41382d481fb3e88154c3581509b9c4c60dfa2a65a43d2bd505f844053b12b857fee4fc9fd0027696c17fe4ce7f29729089b2bbb49e249ce9b99fb194d5b6ba17a911dc5fda4188fd3bd6e783500096a628cc68270c5d2a06e7f21c954efb6309e220f6b3c699eb6302542e4124d5e21055d4555921b57ad08800990c95e6eb1277cbfefb98ec7db0bf5e0a7c7d1585e3f523800e354fc256b99f1489cf785150376a8f9af7c9b4abc1650fefaa8f59afc5ed06373978145a08ff509eb74929e13480b2fda06c713fea49d54382613e282814b7078ed9c27fcd913f1689092727b7b81220659c429aed039aea76b5eda613a591cb0eac4b112b5048f6f309e002acef476fe46dc6fc3b588d6aa443b99ccd23f3eaffd7e6e965ba9cfa80b8eabfdb11d2c16a134103c7eac8a387db603e7427eea92f8f109ac9ca961b27444700f04cca1b4c736fa14d3124366700c00191be8c3f36e4a60041dba32fb189fb6f5860006b085127df86d8f1f6444758b86b081f4265cbd519b1f866db877e275f2a004dbba8d3cfeacddc8f868391dd77a1628a4aed8dd3be69b1095068647cc35235ea56870bdc009d64b96566fac7e3f0e94d414b8dac86a1a3a6b65f40da5cb52da1832ca893b0e88977c88dccf26b1a16b838657db91bb57258be2cc2e78addaa2e39e5100b7430c1e6f1af56765d1545f29340a5825b150a0bbb7808dac6e36dc524adf48627e14c3827a271378d7c19f4a8afce9774a5a6fd16bc6f2509f93ce067efcd8fbb4206ba8625eceea2df922328caa37d6ec2b2fec78cb6cec132b9b771ce084f7a3db0495014d34da652f6d3d8217c4ac442652bc76b75c0013abe07abf21e65fbc399f0ace97650086a82c6a4a833272dd8cade2d08fc9e579c67a8ef44dc62979995c7e505fa0eb111e6b5ebe044bc89897f71653d3ea886887dc1658b758b0e9450345a51fe0aa58fbb5cf7b4b211c4f3b9f90761c904a903e79c14db36f0afdbd0e4cb8c415030300b87c238a6791bb082950caf78de693618115125e22d797abfefd5d3b2a6ddad5eb86389a866c414454ab56a00a6aec7a4dfe95cf55144c024f9b54ad1b8a0b4eaa4ff9cc24e8e2731ebf071cb536c0e2e169515200e82bd7aea7f77fb974e1db1446e40b24c5d4d821d448f4c14a65af1b388c40d3d6a715d9d747c795de266c485c51e1a1a7aca86a73c5af5d5f9969965b845e778861dd0cfcf0b25118d242ea80783d807cbb55f947064d3362c193c4330b7e937ef18a06e6609683b127e8b10d77e55762c6130b1ef2a4cfafefddc01015e4fe609baadb5d866fd40394515bdf7493276ccea377fe6e44c6e630690266549dc91989ce4af3d4fba826fb1222a02e0b150a2a741ac6c49b3a17b317dc72f96089047f84009199d8cf07fccc063ffdef8a1962a840f57395076f91398b4406f65a80428cdabb0b031e4979715e62a76097cf2e867db58f6252e6ecd566dd0a82f7237179ffa78bc64366d82c6677c12ce3cc4f5163816425f8574f84ceb2a7f4b277d1e3374cd9a05aa29ec4c85f42e476852747d18157d5740404f2ce833baa442fbc703ad49ae918352138a421487dd5c1e2c1ae68c3e302e0bca059598d412944ad170e5ba5d537615be3c640ed33557faa21767fa1dd82a6dcc36fddfe0cecfb3dcaa80c6c277f34df5d1b4237da914296fe574214d26fe7af74dc0af15ae2d3966dbe4685c3554d8e5cc34ce98710a69627b12b73aed111ed759126ede4248e9386f27b1665865b361e669a874529119c669a54757461379fc8d25ee74690735e75fde615644f505b4708f69f281299cbd22d50c7ab4dae77f342ac26167b857c2cd32679a47565e7a5519a677214a22baadaba9f19bce6c8693178d5f4048b783e4eb0bc9e83c32d2b0b074d2e5103bc368e8dece41b471cecb36e1e97f8b29776d3363e736f7f42af42b84f50832692db2f41f1401fd91812a1f5735955f1a98169a5e87d67e4bbc0f74d64b216fe1ccefb4750772fad10672c5281b109fc9573f8ce4747aba903252fc1bfafb499a3983e7dbbb977189e65b89fa0bf62f31fa3fb57f475fb423a8a05444881d79e299fa4c493c92616e1429fcecb7d0602209d0e11b20750090aae83191c3546eaa1ae95e51fe6157628f63e8c8f75b5c4cc77c410b44987f598eba856e20eb36f26d6645c3adc5a7fb95dad5d8458319c6806c5f24c6fc248c0aa9360a74b10960996f397c1a3bc287db4185afae08694263c4c64936e11a9a2de992f68600d7733b933c245b3fe150ca87f11fd97bea39096e19990fb2d84c87b5f6adeb6571739052c6298815a4c54a98c5d4b468404a09272bb1834b6e8057e8a6322672595430d12ddcbd0d4a7798a739f322729f8d1441bd4e7bb19ce61d8c66f370846314477055093bb4ba0abc1a86b6bf3cf7109de6cd956c3eea8413297011d768155c4be1cbf4b0756a7e283e3929561d684b527fb5a99db2a820aa7937d0210fca033a71cbfef34ae3cdc6a7c7115f93074a549bb020c9f1ae4c34438766720c84cc323c9d8f32431277a74f6a9a1d4e249dcd51cfa1f8029d8dc7caa96d4950ed7b4193249912d81bfbe61c18144dbc9b41d0c020a0d47fee246e45e9f90140212fac080b1e8f4a5b172752d807608e35bed21af49268514596c05af1e3a10317a75bde7a944dea9a5881b2785714a4bd3440c2b96070df741e1a633e3cf6ff8bfbf7b4d11d4c51b8f4146f7605726e29dd391cdcf7c4fa401d28481c0bd933ae62f6fd1f8b8f2f236ab2546e4f72fbaddb827ad33d3f33a8e5fee89f7cbff2a624c39105e2966acf6bae3380a5a73782ad73e53f53ca2fc1278d9c15854bc5fe353a06f4bc1b9783af926fa253e1c1d92242c6563f78addb1520c3c3c10da82d40ce3c766bb83a7b95a7be3e925da13d7e0be7bce4eee667bb18fb93f3b89730be981a9a0c345a70b2b6c4b6613daa73f74c23ae440f1268c6e317aedb68bb66b52b2e121e022ce27e88570ee1545e8ce9abed144fb60fa4e9d1acc1f9f29680a22517dda257104cdb7095333667bbca9814bb0241907277a401b7bdec081e0556a37a3fd49c33665060a012ec455f42eebfbefe08ff66ebe6dda765fc054ae1647175413836a64a0ba51968f686c36cb7d010972f3e687bab20a80159b5e46f3d2e48a35c52e4f9f37dc4bc53e4ff3daf4cef42892d05ea27535565a618018cb37ea0c1fd6115a759cfc78f37f7ea531376f8556f6eb77ea13bf96312d744d5209298d091f333b8972fa67982fe04b9cb279bd1e2aaa2be8ebe18cf15fa72fe885fd6db6c5a59658ffa5225e91020e2833d4dc337bedd7a1a2cee95d77108adad691722a18ef2e02f6dab290d6f7006bb50dc4edb10b17817c210bd80edd92abe25497d4693c9874b383b47df4717344ef4f5b9d5a4f59e14a51a027c8754370c2b38541519ac6d5dc119cc0aa8a360d517c41b14548b58d5954a99142d668eeef6cadd8e535a7d1339b5aec58a3b08b37e6508aa897c3c0a6596fc0af99d6ac7964ba4e41ad8c0fc5d980016fd7318b000e8a8133cc7031457bc00b2536ffb35641d0c8edae6f9ff97c95ad81442dec5cf5b9786f7a132cfa2ebd2686aa64c49119583e59f912230f5a949d50e8520579a66d50fc59c19b680cf233875a4287c5c2d7e684d790d6dc23fbe774d7d20716e9f2aa59c1b80f32c0fd770ae0e561d8a320adfcf428c0d8ace4276984a2af073bf579a4f690700f2306d36b59cb0d5f7c64707158b4620d500a21b222a5835a6e12e6c2dfa85a047cb2e007677d6cc688f01ee3014a755d95b7b4027fa4b832fd97c6427827251746ff535c60f588c0429e21e403709e12ca32bee73b9503adc0b1a939df7434fc0faaea15c0bde2ecb5c075fbad657ada098cd64c5c4357e82998c3457917dc2b41a85083403c9bc2b40bc4547a21763b469a94512955ebaf362260bf5c6ccd7a6fcc66022f6a74f3b1093ce2d42acd8e90be1582bd75e1d59a8c5c14e1b3c43d9f702ffba7ec34e9f3ec328f4bf8f967a3c230738b253746b9fb6ab6d38a161c228e5d678d9319e122f9c8bbb43754fbabc47cf5a0222cc15dfa278974de4c707eee11abb6e6bbc8943514ace080137a76cb36b3a6f67d771c9a9f1a9d41a0538a5159d8d20b3b80c814d88c5928a7ff26cb53f2158fa13192cc7c0cbaa2fd4436e33ec48d4a7b49b517b0b5608b1e0fc9e7c64a5cdcba9685305f3cfb84ecbf1ea2319c89e7875835952ae5d25437c8a07daf5b9905ad2238432ac5558ebfcc7a31554b8fcd060b6d7aea6e1c4ee3edc80242eac95d8e080475411d09f78acad4e7ed6aca0835485d1f0796572d9058d55c2519b2ba925b543ba1d4b6a4d116ee615dbf6969ff469fd8ddf9a0f1899dcda0d0072d22fc4364851ffeff7d3e6527bef767733e7b792782e90926737382b1c00fa18579f01faaab6942ced13183a8d25b275a74b336299c5410aba7eda7150c3ef9fdbc506235e5316e6e7bf8106caa5290f63ebc405ef31f66bb641dc44f61c631bae9221573627eaa34586b78fc9dc644d77768546240c960357b8baa286e5cc3773c51b73f2eccb755e08a41169d4320055a2c370af5a1b7e15d923cc9305464421d31e56b1c57fa8e2c58a47b908506d8f5dc362247262c0fdadc45843e33c4e0480003a333bd628531563add1b6ea3e0521dc0a63659448d980a550d93df28ffcdb5f609f648e71a9c199003cf61f5d79597482bda375f3a217edaa3b4ada9f2c15228ef532e47017d1ccb461e342033c8f5a04f38d98a2065b8750fcc1020bd5eedb1ab98323575f3edd35f17c23f1bfa7da128d78e3d7d9c5fc231ce5518ad4c4a5dc285a135c47fd58d1744f7e6d632a6544e78648d5767e39be29d2dddb62d85763bb9b9e2f0d1803042acd943c4c4ca451f4c2e22d19954073d798376670448b65e89ca3e4e71fbfa883a0a03aa22f4e5fc43cbbd37795b010c4d40fa1682d148c19a103ef991b12c8e1319366f7d9e0a0a43a8a123362b7f6fdf829a868a377ef29e53e0df0d1f1338b2f2c11f6b91b52b63f92deda3311012a355bb809af892f0f56344d96a5718f74f2069007725fb9b24dc2b4b4254ca1da32b0b0b74c7cf9b46af8cede9fdf90bf9002d7708ccbf93c9c13a95e56ad4dd8908fd7dc1d0fa258055e381ab308d6cfd26ea38f2a73ac0b32e9963065cc32f843184f9ae55d1dccaac34d24eb34e239f7dce829c92ea36907f52274e0da32df74c2509d2761ad96e6763fa95cd1b5aea04911c31a6ad0924c2e05664643200525e5ecdb4d474e0889efd04031cfcd998a0edeb2a3a7242a2aa75e63c190106c73407cffa853adb3db23a292f99c7ab5ede4728d2c3204be100dba31755f09e4444c41f8193117c88eded098eaf181d36146a11eedea9bfcc0e895c5aa73781857669fd7112c0d3e81b5f0e77e447bd65d36b15acd1f398a2ad54a26ba710595ba37276426c8107e31f6a4793f6c06a92a9f3f0d7aaea16c162af57ba3f82374fcde075770c7ff3513c467bfc2037e03c3ce95f9b9277207ec4e38b8bf03e213c1616b7eee8a131199a49257c965082918a091a80f671ac1429e666511956f2d139708fd4b5723d54e780cf341953c162278fedff82b553b2f897c9a31adcd77b1ab1f009f342353b5a38d44437b359d2916a593b65fd4c6eb60c8963d55"}, 0x1001) [ 1211.317944][T13042] CPU: 1 PID: 13042 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1211.326706][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.336765][T13042] Call Trace: [ 1211.340117][T13042] dump_stack+0x172/0x1f0 [ 1211.344489][T13042] should_fail.cold+0xa/0x15 [ 1211.349095][T13042] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1211.354907][T13042] ? ___might_sleep+0x163/0x280 [ 1211.359773][T13042] __should_failslab+0x121/0x190 [ 1211.364724][T13042] should_failslab+0x9/0x14 [ 1211.369228][T13042] kmem_cache_alloc_trace+0x2d1/0x760 [ 1211.374599][T13042] ? rcu_read_lock_sched_held+0x110/0x130 [ 1211.380316][T13042] ? __kmalloc+0x5d5/0x740 [ 1211.384742][T13042] alloc_workqueue_attrs+0x82/0x120 [ 1211.389977][T13042] apply_wqattrs_prepare+0xc8/0x970 [ 1211.395201][T13042] apply_workqueue_attrs_locked+0xcb/0x140 [ 1211.401012][T13042] apply_workqueue_attrs+0x31/0x50 [ 1211.406127][T13042] alloc_workqueue+0x84c/0xe70 [ 1211.410901][T13042] ? workqueue_sysfs_register+0x3f0/0x3f0 16:58:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x8000000000400b40, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8001}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x50) r1 = fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r0, r0, 0x40}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000500)={0x0, 0x0, [], @raw_data=[0x7fff, 0x4, 0x3f, 0x86d, 0xffff, 0x8001, 0x633, 0x5, 0x9d9, 0x275, 0x7, 0x4, 0x0, 0x3, 0x8, 0x8, 0xfffffffffffffff7, 0x0, 0x1f, 0xfffffffeffffffff, 0x3ff, 0x8, 0x7fff, 0x7, 0x9, 0x919, 0x10001, 0x0, 0xfffffffffffffff8, 0x5, 0x80000001, 0x401]}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x3, "d662a1"}, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c0, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1cc}]}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x380000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7167}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff0000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5622}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffff786eaf8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x20000) [ 1211.416638][T13042] ? __init_waitqueue_head+0x36/0x90 [ 1211.421946][T13042] hci_register_dev+0x209/0x860 [ 1211.426830][T13042] __vhci_create_device+0x2d0/0x5a0 [ 1211.432038][T13042] vhci_write+0x2d0/0x470 [ 1211.436375][T13042] new_sync_write+0x4c7/0x760 [ 1211.441061][T13042] ? default_llseek+0x2e0/0x2e0 [ 1211.445922][T13042] ? common_file_perm+0x238/0x720 [ 1211.450977][T13042] ? __fget+0x381/0x550 [ 1211.455143][T13042] ? apparmor_file_permission+0x25/0x30 [ 1211.460697][T13042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:58:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_TIMERSLACK(0x1d, 0x1ff) r1 = getuid() fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000300)=0x4) r2 = geteuid() lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) mount$9p_xen(&(0x7f0000000040)='/dev/vhci\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000, &(0x7f0000000400)={'trans=xen,', {[{@aname={'aname', 0x3d, '/dev/vhci\x00'}}], [{@uid_lt={'uid<', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/vhci\x00'}}, {@euid_lt={'euid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@permit_directio='permit_directio'}, {@euid_gt={'euid>', r3}}, {@euid_lt={'euid<', r4}}, {@pcr={'pcr', 0x3d, 0x19}}]}}) [ 1211.466978][T13042] ? security_file_permission+0x94/0x380 [ 1211.472644][T13042] __vfs_write+0xe4/0x110 [ 1211.476989][T13042] vfs_write+0x20c/0x580 [ 1211.481242][T13042] ksys_write+0xea/0x1f0 [ 1211.485493][T13042] ? __ia32_sys_read+0xb0/0xb0 [ 1211.490264][T13042] ? do_syscall_64+0x26/0x610 [ 1211.494957][T13042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.501040][T13042] ? do_syscall_64+0x26/0x610 [ 1211.505737][T13042] __x64_sys_write+0x73/0xb0 [ 1211.510331][T13042] do_syscall_64+0x103/0x610 [ 1211.514920][T13042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.520820][T13042] RIP: 0033:0x457f29 [ 1211.524724][T13042] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1211.544321][T13042] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1211.552722][T13042] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1211.560783][T13042] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 16:58:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_L\x00e_\xf1\x03@\x00en\x00') [ 1211.568731][T13042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1211.576680][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1211.584627][T13042] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1211.599974][T13042] Bluetooth: Can't register HCI device 16:58:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x8000) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x23) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) r5 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_newroute={0x64, 0x18, 0x0, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0xb0, 0xdb, 0xfc, 0x1, 0xfd, 0x8, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @local}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x3, 0x8000, r4}}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_PREF={0x8, 0x14, 0x1dd7}, @RTA_MULTIPATH={0xc, 0x9, {0xfe6b, 0x9, 0x6, r6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 16:58:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/236) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") mkdir(&(0x7f0000000000)='./file0\x00', 0xc) r2 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:58:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_h\x00e_\xf1\x03@\x00en\x00') [ 1211.723495][T13515] binder: 13483:13515 ioctl c018620c 20000240 returned -22 [ 1211.762338][T13515] binder: BINDER_SET_CONTEXT_MGR already set 16:58:56 executing program 0 (fault-call:3 fault-nth:18): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100000001) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_l\x00e_\xf1\x03@\x00en\x00') [ 1211.769917][T13551] binder: 13483:13551 ioctl c018620c 20000240 returned -1 [ 1211.777221][T13515] binder: 13483:13515 ioctl 40046207 0 returned -16 16:58:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x244ecb07, 0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x8, 0x7, 0x100000001}, &(0x7f0000000140)=0x10) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1211.857960][T13701] FAULT_INJECTION: forcing a failure. [ 1211.857960][T13701] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.925190][T13701] CPU: 0 PID: 13701 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1211.933891][T13701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.943960][T13701] Call Trace: [ 1211.947265][T13701] dump_stack+0x172/0x1f0 [ 1211.951637][T13701] should_fail.cold+0xa/0x15 [ 1211.956244][T13701] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1211.962055][T13701] ? ___might_sleep+0x163/0x280 [ 1211.966911][T13701] __should_failslab+0x121/0x190 [ 1211.971863][T13701] should_failslab+0x9/0x14 [ 1211.976373][T13701] kmem_cache_alloc_node+0x264/0x710 [ 1211.981697][T13701] alloc_unbound_pwq+0x4c5/0xcf0 [ 1211.986645][T13701] apply_wqattrs_prepare+0x35e/0x970 [ 1211.991961][T13701] apply_workqueue_attrs_locked+0xcb/0x140 [ 1211.997776][T13701] apply_workqueue_attrs+0x31/0x50 [ 1212.002892][T13701] alloc_workqueue+0x84c/0xe70 [ 1212.007677][T13701] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1212.013406][T13701] ? __init_waitqueue_head+0x36/0x90 [ 1212.018742][T13701] hci_register_dev+0x209/0x860 [ 1212.023615][T13701] __vhci_create_device+0x2d0/0x5a0 [ 1212.028821][T13701] vhci_write+0x2d0/0x470 [ 1212.033174][T13701] new_sync_write+0x4c7/0x760 [ 1212.033193][T13701] ? default_llseek+0x2e0/0x2e0 [ 1212.033223][T13701] ? common_file_perm+0x238/0x720 [ 1212.047736][T13701] ? __fget+0x381/0x550 [ 1212.047757][T13701] ? apparmor_file_permission+0x25/0x30 [ 1212.047772][T13701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1212.047795][T13701] ? security_file_permission+0x94/0x380 [ 1212.069353][T13701] __vfs_write+0xe4/0x110 [ 1212.073690][T13701] vfs_write+0x20c/0x580 [ 1212.077987][T13701] ksys_write+0xea/0x1f0 [ 1212.082252][T13701] ? __ia32_sys_read+0xb0/0xb0 [ 1212.087028][T13701] ? do_syscall_64+0x26/0x610 [ 1212.091697][T13701] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1212.097752][T13701] ? do_syscall_64+0x26/0x610 [ 1212.102422][T13701] __x64_sys_write+0x73/0xb0 [ 1212.106996][T13701] do_syscall_64+0x103/0x610 [ 1212.111581][T13701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1212.117471][T13701] RIP: 0033:0x457f29 [ 1212.121352][T13701] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1212.140938][T13701] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1212.149326][T13701] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1212.157401][T13701] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1212.165366][T13701] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 16:58:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_t\x00e_\xf1\x03@\x00en\x00') 16:58:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$void(r0, 0x5450) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:58:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x787, 0x5c083) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000180)={0x9, 0xa4}, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x8, 0x174198ae, 0x7fffffff, 0xffffffffffffff00, 0x0, 0x7ff, 0x2a010, 0x1, 0x1, 0x7, 0x7fff, 0x6, 0x12a4e3d4, 0x2, 0x51, 0x0, 0x8, 0x5, 0x3a77eddc, 0x4, 0x4, 0x7, 0x5, 0x5, 0x0, 0x8, 0x7ff, 0x3f, 0x2, 0xfe48, 0x5, 0x7, 0xfa8, 0x1, 0x80000000, 0x24, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x110, 0x0, 0x2, 0x3, 0x1f, 0x1000, 0x1}, r3, 0x7, r0, 0x9) 16:58:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) syncfs(r0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0xc000000000000000, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0xc0000) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000100)) write$P9_RVERSION(r2, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) [ 1212.173322][T13701] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1212.181274][T13701] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1212.190406][T13701] Bluetooth: Can't register HCI device 16:58:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_z\x00e_\xf1\x03@\x00en\x00') 16:58:56 executing program 0 (fault-call:3 fault-nth:19): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:58:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x05e_\xf1\x03@\x00en\x00') [ 1212.343005][T14038] FAULT_INJECTION: forcing a failure. [ 1212.343005][T14038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1212.356235][T14038] CPU: 0 PID: 14038 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1212.364899][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.374967][T14038] Call Trace: [ 1212.378280][T14038] dump_stack+0x172/0x1f0 [ 1212.382630][T14038] should_fail.cold+0xa/0x15 [ 1212.387238][T14038] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1212.393048][T14038] ? __lock_acquire+0x548/0x3fb0 [ 1212.398006][T14038] ? alloc_workqueue+0x84c/0xe70 [ 1212.402991][T14038] ? hci_register_dev+0x209/0x860 [ 1212.408026][T14038] ? __vhci_create_device+0x2d0/0x5a0 [ 1212.413423][T14038] ? vhci_write+0x2d0/0x470 [ 1212.417948][T14038] should_fail_alloc_page+0x50/0x60 [ 1212.423154][T14038] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1212.428550][T14038] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1212.434280][T14038] ? find_held_lock+0x35/0x130 [ 1212.439054][T14038] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1212.444867][T14038] cache_grow_begin+0x9c/0x860 [ 1212.449632][T14038] ? alloc_unbound_pwq+0x4c5/0xcf0 [ 1212.454749][T14038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1212.461000][T14038] kmem_cache_alloc_node+0x645/0x710 [ 1212.466298][T14038] alloc_unbound_pwq+0x4c5/0xcf0 [ 1212.471267][T14038] apply_wqattrs_prepare+0x35e/0x970 [ 1212.476596][T14038] apply_workqueue_attrs_locked+0xcb/0x140 [ 1212.482431][T14038] apply_workqueue_attrs+0x31/0x50 [ 1212.487545][T14038] alloc_workqueue+0x84c/0xe70 [ 1212.492343][T14038] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1212.498091][T14038] hci_register_dev+0x209/0x860 [ 1212.502966][T14038] __vhci_create_device+0x2d0/0x5a0 [ 1212.508188][T14038] vhci_write+0x2d0/0x470 [ 1212.512541][T14038] new_sync_write+0x4c7/0x760 [ 1212.517248][T14038] ? default_llseek+0x2e0/0x2e0 [ 1212.522107][T14038] ? retint_kernel+0x2d/0x2d [ 1212.526709][T14038] __vfs_write+0xe4/0x110 [ 1212.531042][T14038] vfs_write+0x20c/0x580 [ 1212.535300][T14038] ksys_write+0xea/0x1f0 [ 1212.539577][T14038] ? __ia32_sys_read+0xb0/0xb0 [ 1212.544377][T14038] __x64_sys_write+0x73/0xb0 [ 1212.548975][T14038] ? do_syscall_64+0x5b/0x610 [ 1212.553660][T14038] do_syscall_64+0x103/0x610 [ 1212.558254][T14038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1212.564140][T14038] RIP: 0033:0x457f29 [ 1212.568040][T14038] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:58:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\'e_\xf1\x03@\x00en\x00') 16:58:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1f, &(0x7f0000000200)="92943f8e7e8ee857b6ac7b4e7a5d6d8c11c4d31c6145fea0077f03f7933f9d81b38b535f682648cf989e4095192422d9034a8788f7ee0c722e520283a534df739a5c53b0d27cbee4308b4a136226e6a5b232d9ff675f7c4933cbad15c12e97ab11170851438a17dc3002033d342d441eae822a6a48dcd5cd7ef59201afdc34794a164c7ee0cd6d3e59df99115c7ef517da1d1fdb133eebae4dce1ab0fbd4ea3b684e7b1f18c617fa26c3026c4175318a3e5eab1b92313e855d20724e3bbd3a0c07a884666c150cfde17a0ab0a6e085ed3fe3497033f296791ffc7e761423ee01e0bcfa2bf03a1b4576135544c4a31b426c027a507513f559a35a41046323101e8464af9a87e2911c1413f9ad272011a6942cf97962413e4ff8c0a0858bdcb72600c78b4058905c9ad7da17466c5510016839bf1c6f93916d0b63e1dc9c3d11826860068b52110c3776f12179648c583f56d6aedb4ac10a65a23ac4e5c4a80390ac90de6f0201c450617e5e4f665399cf847852faddb3b3ef39ca1166e94d4b3e10862b9ca4496ad923192210086a1fd22e7e2d91768724895b0795eb94df64619c4585504f72bae5d4b1924af74c3d4b12d792ad9746dad0b68e8ddce048285f24093e358e0555ef769e652a2c44ca6a8fc5c96f3ae8917a3c84ce0dbfc63aea9a050cef0e3cf4d37a50e99672f24f3493abf27d4ab4365cabe33d72f75da01a34aabee96c7efc87556a23d7d67bbc11641d4fc40343ef0427ff3c86e931523a7a5ee4000d67a7164ddb67fe3a4f2b6aabd3c3018219e73989369b30ffa308ea9269e056a6b08ad7a1011f2002ca3fa55d54bf21aefdfdad405f2404f33e79ebd495652c6a3319c0121d883f433234145580ad3fb501a1cbd06576f28e04d44d5ad8d8bb2126834c8d79602b8a0b264e88970e228ab1bc982b259cc845e8deba2e812fff0e356c5415a61bf8127a8417937545edb0cbbcedb181c753788ff74f631b29d538ae230bd2bacbc2092467d7e24f73861263d2d4e509a0140760bd1481dc44aa3ca727eb5ad6952b8cb5de1407bae0202df9ea42a29501e46a5c2db8830eca0a4461af5d1fad4f7ee828e8df78dfc5511aab0359a8c7b85f951188c3bae984bbda1041d07f32b0e3666e1f921dc4cf18f2a4e0c712cb517c2129510b27a5ffb33b9e5f5d4cde7a5fd31be574ed0dba566a9c0a2e32e305824413e8c4090cee46033f1a12c03a0d4c2404e50e17cd0fc76ea8821180b3a2141cfa5934dbe0c005d0119b79a6e7ace2479f063c861af4474eb2938eaf6f56fc689c8e8faf8f22613497e8338a4d9f01559e273491dc5c7ac1199a0e8fda8cdfa0150b31a872e548ee741c1d6b0fd12ea7125e7cc8b6150789eb9e5cd5e420b40f5562775d0eeb18d07c3df6ed071aa87f2632ec92ae6dbb31603183f3f0c12a0af0167a5a8d0a2f92e7dfbef434dff830a8a8408f15bb62511f3265ebad8a30c611880de9b7155356709a7af70df2e4a45f7c17898358bea46b8b7e554d3f70a9a159b9972ab4dd54e6775b17fc61c36e715ee4b61923496872fa0a40895172bd7335191eabf627d466245f9856bbdcfe01244de158d1f28af3444111fcc0f67d773e606cfccd1c2f16bfcfede8b1dd63476504089fe1431eb74a24af4217ac864f8a98a666709af8d98a3590cf9059c7a741ebe36fb1d05e31442992af519240ce89fbcaf709c7addadaad2b1819d012d52a60b255b29a49903fec83e1015f327c60b954a071372d0c372bd5350faac036a3eb0e6c3076c98c15681b8ad05f905de1616dc2ae7cf09db546290ee8d4a48f08aaefa07bbafb4ed59040bb88588728f70c5bb9ebf311742a0520b66f94542de86b5c5c3d27b729447f839722f9456273fdf3ce2e9466cb57e554eb79cb2687b66173774ae1d63e2919f018e0cc209b29e1f3812467ab17cf19b890073a9ba653aef9e4fd11d2d7c0cc2751b550ed87c5de366613ab02cbc3c373c2e026659d095c253c14bfc00fddd29b3f64d207b4528daa07531de17e1597032aa1eac76bc377a560bcdb370208bc189551d56cb06c4af8d2b5b51078440463a0fb769726dca1c8dabf787030ec5b60cd2d35ca6b090640725b82ace50ae6d42fc449ff38b9e7d349e7c0eac09ae69a2c3278464ec5537a31ce650db2bfa0b6bb8b25feb792733eca3c70968bab4520b6ee89eaafc0b01cd4e8692f186b40a011ea306be6a5bfc270c074dfafd1ffe9406b7ee9b6a5467948750da4f41f32879d3fa220784e06ab618960f5984e4ad6151583bc3c0110ef7ea7dcc9b5fd1d4ed0111175c8dbb9f7aee47586dd7dbbc642c0ce4b24b33c650e3854816d51b8d9193659af699e4e628e24b7178d491811b33389c8be56a086d91969a6386af5cefd03d244659909a6cd50bb8fdc885520559d5f5efc85e2239c8791415b62a013d37250d690fd4da2c9c440a855ba5501249679edd587499d96f6ee8e2f00da4311ab907d307012a622b67a3af70ab928ebdb4a9989d1604e44e3e09a75f62ab52b85f9208739a8c22b012c9752db524f074dccf487b25d6a4892e94a7038d65d3a86005e14107305cf6e32fa6f04ef22a1701caccb9ff95f33a8ed8016dba735f9ea2bb58da2b3b3aabf3f9aba5d3bbc58fdd00002d9bcc85ade79feaade7858beeab913c4e7f1b16a39a32a9e463dd9d728983a6cd43772e2a2f5eab1e29d7236d715fc348f1099a336f07dc6edd550fb137cbb2367921d90228b836e739d038a7e59117e1fca18d0bbefa7cf525a0eafca236e6d468c8bcb35fbd35ff640e628903905b2ab7fc720ad5a6801288af2c8235fd79b6e33b3b674c70c6b182e18e14afc16f632ad85b256b7fd6b019b19a7e4b245cfbd1a19f93f97f84f8e0de4cad6a3b65d0177c00b1f1be2a2310ec00700f1a98cd1317b78e012a5db563ff24a7de4f2d1297b3829c0021a37cb98a48a70516c681b50e561511b170455d81ee7eb6f5566b2734247f392ae1bfd76d3687231797ae11ce4810fcdf15a5a13f6487dfb879375188704ca7404aaefff2f4647d469d47503c599d468bb96dfe64ec307947fdf2b96a7325682a5bcb0ccdeddb4c0cba27b08590eb1dae49cf974728f9e33f40a2913f4a6f11723d2b849b3190e3b96138f0e49c0ac84a5a5eda12a1fc03fec4a263d3b6f40bbd9511abd83a7f7db5db9ee108eff752fc7baba01a32822d3c976ead1c1d86d8b5555842ae14b6b13ba6d97b8869f1bfcf06761d0991c7a2818ded964e86ab5cf7380a5ae63822935a03b402513489c6176454344e23258d681a7d974fa3fb889685f31586389c36bba791bc7122f174e311a120eaa501bed81dd7ac1729bdb8c1222be7dc4fa3185f926c600b726278d07a445b3a1586192b8b323a348e6aea61fccada91b431472833af0df6019ee15e43c804d3ab546a5e87a477bd234ccced7bf850188bfe0b4601ed98aca4f1fd7988063e6c6c808694d6d552fb2184d4b9542d8b6cd70609e36cec6f26dd320efc2024a10089ed221ff7d0440798263d722ebe2c67853b8faabc0819820de652b6cbbef8cf35abcf310edc987b3c4eff2f6b48f0afdb7a4def631090762e463f1f9c8f388b560a47c91da37b089428ec3cc43c26f7f643fe9955f6b642f1d66882e6ac08cd7f3bb2fe74bbb0745c1a204639ecf350d06923072f0da8d2a6f06c5f4808d4939ae85d962ec26a17968e715ba33b52bb68e0361bd3ff793bab233d3dba030a2479b9de8e2fa9e870bd6410a3039b306baa14a0b1e8ae49e1c29f95382750ca0f399280743acb62909201b084db0d525d8aa07b30d04ca2cdc244fe4d22d98a4e9742e351a12911cd2bee2cef295f6374e38f982e42e8a3ab1c2e53ea5ef56ceff4a6be731abe64df737472499b2027a564f723cf67481cad94deb1e6d01d2308980e837dad75729ca77600ae71d88cd6aa81a88968cf52296659fd48fef2902999beb99e82044fdae53fc86c3b212a7a1c49b3b9020e9817035c63468b9e4ed8e3fa32b33bc9ca6d470d93fda49274433cecf18e8d65b4907bbf069bf1da0735e2fd95ba65cc19c6598fb5b1a79ab6f95a5c14046faa4ad409564d77d1b034f4730b71b3f96a3e0fe6f81a754814f932471d13e23221fb1cfa838b84f737e95381378cbb2f8fedfded5b261b3b3cd6f29b604e2815f73c858216e4d225fbe7f76f498889088c53dc8b7b1620690aa5d9e1bf9285ce1134942f94cea723848988fb0cab23507d2d3215f68040b5398711213bdef21228a4667e54d2c611a003c309df55bb63def54fea61bc3def3035aef69344855b3612179ea4ef88b4b044e96731168f6ebbba83be4b0341667a5f672f9392167ae13b2d1ce42bf880ec21b4574e59bb895616204d30de8204a7f5c41473a4fecb554bd84399c46fbc9d61a9ef0c2e005b25e0f0df6ade61d4e279e2a030dd08caf642381c989f5240e0260cf3a22531b7eaa2defcf58301a3f8b82b387194d7aabfbd3fd64f8b011140d2786dfa1b989df2a657272ac9b571fa88c9bca43eabc8d85294fe49aa7e241fd071daf9067cea700ed303f362980d88a750e7a5555c8881b7feffc8b8d023633f2f93c03db23fa681f1f84037c23253e033ad9bce83c1aa6eefd1bb3ea7a17f38c0b3a1b009cd84b946682ee9add3640d8e73751035f8169cc794e8aedf07797ecce1e9f4f5be7cf33e05bb9418e8282538690f5f69780266c6a202356236c36a541dee16bcc4efc0ae918f2db718a88196ab7b1db0f395f3ab0eff17beaf27b09dc297e142644de1f34e4448363839740c2b979586cfbd5f474adcb3cd64751c13a159cf6f1d1ad12777e4f4da737b6a4246b75b27304ff1a63b503c1e9fe2c19c257b34d091751cf43d6a3d2f9385841f556f88a8fe528312163db6bb8f89307bb7526e9477e2aebc24a40b5218eb092acdff0d661735541839516b3448327d2a5c69595ec6b6819ef71a3df0e52c95864ca7a27fe43ac37c7573d53efa2bb7616b3a56fe13bf984c4b07d669e48871c43101c9c600fa0a3b5d5cf11f99cb6b6cc7fc0e18b24bf32832ab0907e9ad43608c846fc306f30122d2c462b79d71a120450432bfe6a5448ccd3242ea9bcde48b8fece038d579463f0374554f671c7b8b65f136819ff8d5ee1cbb3cf6eee4d6b731171d4c88866580a83ddd0cf68d12eb3d4216f4428a410d825e1e2a47c3dc3bb743604a404837ee0b93dd85b6952fc180a062d47d46704ee719e240c695b6e61fda6a0025ed4d609df1c9e9ccf53f732b836fe3cedf43628ce4af9badf96bd0bc945b399aca2acb54c3f65c323ee80cdce320b550ba04510dcc631f3cf06db5abf131040e73e667ee721b5f41c7950380584040628a91faa74f29573982e56415a9d62fd666548695e575fa79b50a4ccd377ea4360fdd1e2ecfe4fe98411c53122d48869a7a4af2e0fb7b3c6b18dce730ba36af7988e509731a96951b8da55ecc0397f45a45851637fbd9f469c48e983d3ff6adbd8ebfbe6ded1228b364aaeef076272e983cc06ac6bb9a34605db1c891260cdbc97bc46b4c3c46c5251bc58bea9cab9ef6a940e30fb7c054edb217ea29cdf0352a10f6d97d395af63e383bdb3c9e61667a60f18f4dfec891788723897df11cde4e17e09bb4e638021330f15b0ab10a3f911e269e3f30b20400ba0d0d3a7bf368447bf192a0499e79d7ac713eb4281a610552604fb149db03020e9c8320d0c1d2891b7823c21ba1aed4d5d6fa7308f13e92e59ca") ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x442, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000100)={0x0, r3}) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:58:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioperm(0x5, 0x10000, 0x6) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x80000) r3 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000001c0)={0x0, 0x1}) connect(r2, &(0x7f0000000100)=@nfc_llcp={0x27, 0x1, 0x1, 0x5, 0x9, 0x6, "d469b49a5c64fa3ba7617bc828d20bde65aeaba320685e0717fdc595fe9b8108c8bb370333a7c75a58995f24019ff5782bc13d54bfd7f76f989adb850d11eb", 0x3e}, 0x80) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) 16:58:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_mAe_\xf1\x03@\x00en\x00') [ 1212.587638][T14038] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1212.596045][T14038] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1212.604021][T14038] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1212.604037][T14038] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1212.619978][T14038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1212.627958][T14038] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 16:58:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:58:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) fsetxattr(r0, &(0x7f0000000040)=@random={'system.', '^vmnet1trustedeth1*\x00'}, &(0x7f0000000080)='securityuserwlan0cgroup2md5sumselinuxvmnet1\x00', 0x2c, 0x1) 16:58:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00He_\xf1\x03@\x00en\x00') 16:58:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f00000000c0)=0x8) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @timestamp, @mss={0x2, 0x7ff}], 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e21, 0x7, @rand_addr="0c0c2ff10892301abb3e281d01e0e65c"}}, 0x1f0000, 0xff, 0x3ff, 0x6, 0x9}, 0x98) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0xf1, "70c97a785914759938aa198c8e4ac6d9ad0f7cfd67c16259c056ea40449027dd2ecb01de648298cd7f9b8a24c4abb3111bdd9283d30773d310d79ddcd9fbcbb6c7ffe4fedeb25c2d2b9313daecb0769fd7f7a832383f7b4187e2e17fe142f61df239ca56c37acb9b6af8323a63704ca6f42d812087927b59408ef73772865f718ab3c0774d5e8dcf05d94ecf071e39023853953a58e45fe80fc2eacbeaafee883b0629ca3d411a1c6441f71ec24f81e281196c7c9416e09ff471c20a17a7ae7bda7b4446e2ebde7500b3c26ad88b4280391b82e2fcb15c9d4af66052817df8aad670711290ee4d51057184a54b206cb48a"}, &(0x7f0000000540)=0x115) mount$9p_rdma(&(0x7f0000000280)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x100c80, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x1f}}, {@sq={'sq', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x8000}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) connect$vsock_dgram(r4, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 16:58:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x101, "27fe2c48bd78fa61122ae455da767a42e32507bf27d01ec84b542c4ca8e71329", 0xffffffffffff8001, 0x5, 0x8, 0x7fff, 0x1, 0x6, 0x3, 0x0, [0x4, 0x6a, 0x20, 0xfae2]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x45c) 16:58:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00Le_\xf1\x03@\x00en\x00') 16:59:07 executing program 0 (fault-call:3 fault-nth:20): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00he_\xf1\x03@\x00en\x00') 16:59:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd77f, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x800000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x100ffd, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x89513dff49e02dd4, 0x0) r3 = syz_genetlink_get_family_id$net_dm(0xfffffffffffffffd) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x404, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 16:59:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = epoll_create1(0x80003) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0x0, 0xee00, 0xee01, 0xee00, 0xee01]) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() fstat(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, &(0x7f0000000d00)=0xc) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000ec0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000fc0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000001040)=0xc) r21 = getuid() fstat(r2, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001100)={0x670, 0x0, 0x7, [{{0x4, 0x0, 0x7, 0x5, 0x8, 0x5, {0x2, 0x8, 0x500ff92e, 0x3, 0x8, 0x2ea, 0x0, 0x20, 0x3, 0x8001, 0x200, r3, r4, 0x100000000, 0xb8}}, {0x4, 0x6, 0x5, 0x400, 'syz1\x00'}}, {{0x0, 0x3, 0x7f, 0x5, 0x8, 0x4, {0x3, 0x7fffffff, 0x80, 0x5, 0x1f, 0xfff, 0x7f, 0x4, 0x2, 0x3, 0x0, r5, r6, 0x4, 0x1000}}, {0x1, 0x1c7e9caa, 0xc, 0xfffffffffffffffc, '@wlan1%@em1/'}}, {{0x3, 0x1, 0x1, 0x30e, 0x7, 0x3ff, {0x1, 0x8000, 0x51, 0xfffffffffffff001, 0x401, 0x1, 0x7fffffff, 0x8, 0x1000, 0x7, 0x200, r7, r8, 0x98}}, {0x2, 0x2, 0x5, 0x7, 'syz1\x00'}}, {{0x6, 0x3, 0x6, 0xd78, 0x5, 0xffffffffe6fcbf9d, {0x4, 0x2, 0x3, 0x0, 0x8, 0x10001, 0x3, 0x5, 0x6, 0x2, 0x0, r9, r10, 0xecf, 0x4}}, {0x0, 0x9, 0x5, 0x1ff, 'syz1\x00'}}, {{0x1, 0x1, 0xffffffff, 0x80, 0x4, 0xe1, {0x1, 0xfffffffffffffff8, 0x0, 0x7fffffff, 0x8, 0x100, 0x5, 0x3, 0x8, 0x4, 0x6, r11, r12, 0x195d}}, {0x5, 0x3f, 0x5, 0x1, 'syz1\x00'}}, {{0x6, 0x3, 0x1, 0x9, 0x3ff, 0x1, {0x2, 0xffffffffffffffff, 0x100000001, 0x6, 0x4000000, 0xfb, 0x100, 0x5, 0x5, 0x8001, 0x7, r13, r14, 0x6, 0xffffffffffff8000}}, {0x4, 0xffffffff, 0x11, 0x80000001, '/dev/vhost-vsock\x00'}}, {{0x0, 0x1, 0x0, 0xbc3, 0x20, 0x22, {0x5, 0x3, 0x7fffffff, 0x0, 0x3ff, 0x7, 0x6, 0x5, 0x309800000000000, 0xfffffffffffffffd, 0x306, r15, r16, 0x5c33c72, 0x8000}}, {0x3, 0x100000000, 0x0, 0x3f}}, {{0x2, 0x0, 0x1, 0x4, 0x0, 0x0, {0x6, 0x80, 0x3, 0x0, 0x81, 0x0, 0xd8, 0x7, 0x3, 0x9, 0xffff, r17, r18, 0x80000001}}, {0x1, 0x6, 0x3, 0x7f, ')#\x00'}}, {{0x6, 0x0, 0x126, 0x8, 0x4, 0x4, {0x4, 0x1, 0x10000, 0x7, 0x8, 0x80, 0x9, 0x400, 0x7, 0x3, 0x4, r19, r20, 0x4, 0x6}}, {0x1, 0x1, 0x6, 0xfffffffffffff7d1, 'cpuset'}}, {{0x2, 0x0, 0x5, 0xfffffffffffffffc, 0x3, 0x6, {0x3, 0x7, 0x4, 0x5, 0xfffffffffffffe01, 0x400, 0x7, 0x5, 0x7, 0x1000, 0x6, r21, r22, 0x3, 0x3}}, {0x1, 0x416, 0x11, 0x3, '/dev/vhost-vsock\x00'}}]}, 0x670) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1223.004108][T14471] FAULT_INJECTION: forcing a failure. [ 1223.004108][T14471] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.055574][T14471] CPU: 0 PID: 14471 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1223.064268][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.074323][T14471] Call Trace: [ 1223.077632][T14471] dump_stack+0x172/0x1f0 [ 1223.081999][T14471] should_fail.cold+0xa/0x15 [ 1223.086595][T14471] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1223.092410][T14471] ? ___might_sleep+0x163/0x280 [ 1223.097285][T14471] __should_failslab+0x121/0x190 [ 1223.102244][T14471] should_failslab+0x9/0x14 [ 1223.106759][T14471] kmem_cache_alloc+0x2b2/0x6f0 [ 1223.111733][T14471] ? unwind_get_return_address+0x61/0xa0 [ 1223.117380][T14471] ? __save_stack_trace+0x8a/0xf0 [ 1223.122417][T14471] __d_alloc+0x2e/0x8c0 [ 1223.126582][T14471] d_alloc+0x4d/0x2b0 [ 1223.130576][T14471] d_alloc_parallel+0xf4/0x1bc0 [ 1223.135448][T14471] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1223.140305][T14471] ? __d_lookup+0x40c/0x760 [ 1223.144819][T14471] ? lockdep_init_map+0x1be/0x6d0 [ 1223.149856][T14471] ? lockdep_init_map+0x1be/0x6d0 [ 1223.154896][T14471] __lookup_slow+0x1ab/0x500 [ 1223.159494][T14471] ? vfs_unlink+0x560/0x560 [ 1223.164017][T14471] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1223.169319][T14471] ? d_lookup+0x19e/0x260 [ 1223.173669][T14471] lookup_one_len+0x16d/0x1a0 [ 1223.178355][T14471] ? lookup_one_len_unlocked+0x100/0x100 [ 1223.184065][T14471] start_creating+0xbf/0x1e0 [ 1223.188670][T14471] debugfs_create_dir+0x26/0x3d0 [ 1223.193623][T14471] hci_register_dev+0x299/0x860 [ 1223.198490][T14471] __vhci_create_device+0x2d0/0x5a0 [ 1223.203703][T14471] vhci_write+0x2d0/0x470 [ 1223.208046][T14471] new_sync_write+0x4c7/0x760 [ 1223.212736][T14471] ? default_llseek+0x2e0/0x2e0 [ 1223.217608][T14471] ? common_file_perm+0x238/0x720 [ 1223.222635][T14471] ? __fget+0x381/0x550 [ 1223.226812][T14471] ? apparmor_file_permission+0x25/0x30 [ 1223.232359][T14471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1223.238610][T14471] ? security_file_permission+0x94/0x380 [ 1223.244256][T14471] __vfs_write+0xe4/0x110 [ 1223.248599][T14471] vfs_write+0x20c/0x580 [ 1223.252859][T14471] ksys_write+0xea/0x1f0 [ 1223.257113][T14471] ? __ia32_sys_read+0xb0/0xb0 [ 1223.261890][T14471] ? do_syscall_64+0x26/0x610 [ 1223.266579][T14471] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.272649][T14471] ? do_syscall_64+0x26/0x610 [ 1223.277338][T14471] __x64_sys_write+0x73/0xb0 [ 1223.281935][T14471] do_syscall_64+0x103/0x610 [ 1223.286550][T14471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.292443][T14471] RIP: 0033:0x457f29 16:59:07 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x4, 0x401) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x2, r1, 0x3ff, r2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0xcb5}}, 0x18) write$vhci(r4, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00le_\xf1\x03@\x00en\x00') [ 1223.296345][T14471] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1223.315958][T14471] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1223.324399][T14471] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1223.332375][T14471] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1223.340348][T14471] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1223.348324][T14471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 16:59:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = dup2(r0, r0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1223.356299][T14471] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 16:59:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_Ame_\xf1\x03@\x00en\x00') 16:59:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000040)={[{0x100, 0x599d, 0x6c, 0x8, 0x9, 0xfffffffffffff801, 0xaef0, 0x3, 0x9d, 0x5ef, 0x9, 0x9, 0x8}, {0x1, 0x5, 0x3, 0x8, 0x2, 0x5, 0xfb4b, 0x7fff, 0x3ff, 0x6, 0x4, 0xfffffffffffffff7, 0x2}, {0x7, 0x4ea, 0x1000, 0x1000, 0x6, 0x7ff, 0x4, 0x0, 0x101, 0x3, 0x80000000, 0x3ff, 0x101}], 0xff}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000100)={0x6e87, 0x0, 0x300e, 0x7ff, 0x8, {0x9, 0x2}, 0x1}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) lsetxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='/dev/null\x00', 0xa, 0x1) 16:59:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0a0e2fdeb1fddc979067bcf5dc1f933c12a41d80b0") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0xfffffffffffffffd, 0x8, 0x37f, 0x0}) r2 = msgget(0x3, 0x4) msgctl$IPC_RMID(r2, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000340)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050009000000000500001d5928dbbced4c666f0abf2200ad0a082ee72b1554e282c127b3d756fd33bce76c5e5e9549ba3e3090943436b4a1905af53f6d75ec818197e7abb1975c71d6de7e5ee02714ef3654f313b102f583d1d19bcc451e7583a6c08f8ffdcebb07737f030a1d1d91151d1ac054fc4c24"], 0x9bb4a12258155675, 0x1) 16:59:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 16:59:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00te_\xf1\x03@\x00en\x00') 16:59:18 executing program 0 (fault-call:3 fault-nth:21): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:18 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8000, 0x2000) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000040)={{0x0, @name="5a1a1954bbe23c502cf575af7c141bf0aa89f16f06615b00c7af5c36098ca38c"}, 0x8, 0x200000000, 0x2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) [ 1233.872870][T14889] FAULT_INJECTION: forcing a failure. [ 1233.872870][T14889] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.896866][T14889] CPU: 1 PID: 14889 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1233.905547][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.915602][T14889] Call Trace: [ 1233.918919][T14889] dump_stack+0x172/0x1f0 [ 1233.923283][T14889] should_fail.cold+0xa/0x15 [ 1233.927902][T14889] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1233.933725][T14889] ? ___might_sleep+0x163/0x280 [ 1233.938601][T14889] __should_failslab+0x121/0x190 [ 1233.943572][T14889] should_failslab+0x9/0x14 [ 1233.948086][T14889] __kmalloc_track_caller+0x2d8/0x740 [ 1233.953468][T14889] ? __d_instantiate+0x383/0x470 [ 1233.958410][T14889] ? find_held_lock+0x35/0x130 [ 1233.963177][T14889] ? kstrdup_const+0x66/0x80 [ 1233.967777][T14889] kstrdup+0x3a/0x70 16:59:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x80000001, 0xff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0x9000000000000000, @remote}}, 0xffff, 0x28f, 0x6bc, 0x3, 0x5}, &(0x7f00000001c0)=0x98) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1233.971675][T14889] kstrdup_const+0x66/0x80 [ 1233.976098][T14889] kvasprintf_const+0x10e/0x190 [ 1233.980963][T14889] kobject_set_name_vargs+0x5b/0x150 [ 1233.986792][T14889] dev_set_name+0xbd/0xf0 [ 1233.991131][T14889] ? device_initialize+0x440/0x440 [ 1233.996263][T14889] hci_register_dev+0x2e0/0x860 [ 1234.001154][T14889] __vhci_create_device+0x2d0/0x5a0 [ 1234.006355][T14889] vhci_write+0x2d0/0x470 [ 1234.010720][T14889] new_sync_write+0x4c7/0x760 [ 1234.015424][T14889] ? default_llseek+0x2e0/0x2e0 [ 1234.020298][T14889] ? common_file_perm+0x238/0x720 [ 1234.025324][T14889] ? __fget+0x381/0x550 [ 1234.029491][T14889] ? apparmor_file_permission+0x25/0x30 [ 1234.035041][T14889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1234.041288][T14889] ? security_file_permission+0x94/0x380 [ 1234.046938][T14889] __vfs_write+0xe4/0x110 [ 1234.051308][T14889] vfs_write+0x20c/0x580 [ 1234.055563][T14889] ksys_write+0xea/0x1f0 [ 1234.059818][T14889] ? __ia32_sys_read+0xb0/0xb0 [ 1234.064598][T14889] ? do_syscall_64+0x26/0x610 [ 1234.069297][T14889] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.075378][T14889] ? do_syscall_64+0x26/0x610 [ 1234.080063][T14889] __x64_sys_write+0x73/0xb0 [ 1234.084656][T14889] do_syscall_64+0x103/0x610 [ 1234.089250][T14889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.095141][T14889] RIP: 0033:0x457f29 [ 1234.099038][T14889] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:59:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00ze_\xf1\x03@\x00en\x00') [ 1234.118644][T14889] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1234.127065][T14889] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1234.135035][T14889] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1234.143009][T14889] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1234.150989][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1234.158971][T14889] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 16:59:18 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@rand_addr, @loopback, @empty}, &(0x7f0000000100)=0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000140)=[0x3, 0x2], 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:59:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x02e_\xf1\x03@\x00en\x00') [ 1234.326859][T14889] Bluetooth: Can't register HCI device 16:59:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x24a) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:19 executing program 0 (fault-call:3 fault-nth:22): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x04e_\xf1\x03@\x00en\x00') [ 1234.562341][T15307] FAULT_INJECTION: forcing a failure. [ 1234.562341][T15307] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.609661][T15307] CPU: 0 PID: 15307 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1234.618409][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.628470][T15307] Call Trace: [ 1234.631799][T15307] dump_stack+0x172/0x1f0 [ 1234.636140][T15307] should_fail.cold+0xa/0x15 [ 1234.640751][T15307] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1234.646566][T15307] ? ___might_sleep+0x163/0x280 [ 1234.651413][T15307] __should_failslab+0x121/0x190 [ 1234.656362][T15307] should_failslab+0x9/0x14 [ 1234.660858][T15307] kmem_cache_alloc_trace+0x2d1/0x760 [ 1234.666226][T15307] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1234.672465][T15307] ? refcount_inc_checked+0x2b/0x70 [ 1234.677659][T15307] device_add+0xfdc/0x18a0 [ 1234.682068][T15307] ? device_initialize+0x440/0x440 [ 1234.687178][T15307] ? get_device_parent.isra.0+0x570/0x570 [ 1234.692906][T15307] ? start_creating+0x163/0x1e0 [ 1234.697752][T15307] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1234.703996][T15307] hci_register_dev+0x2e8/0x860 [ 1234.708853][T15307] __vhci_create_device+0x2d0/0x5a0 [ 1234.714048][T15307] vhci_write+0x2d0/0x470 [ 1234.718392][T15307] new_sync_write+0x4c7/0x760 [ 1234.723108][T15307] ? default_llseek+0x2e0/0x2e0 [ 1234.727995][T15307] ? common_file_perm+0x238/0x720 [ 1234.733019][T15307] ? __fget+0x381/0x550 [ 1234.737191][T15307] ? apparmor_file_permission+0x25/0x30 [ 1234.742735][T15307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1234.748984][T15307] ? security_file_permission+0x94/0x380 [ 1234.754623][T15307] __vfs_write+0xe4/0x110 [ 1234.758950][T15307] vfs_write+0x20c/0x580 [ 1234.763227][T15307] ksys_write+0xea/0x1f0 [ 1234.767479][T15307] ? __ia32_sys_read+0xb0/0xb0 [ 1234.772250][T15307] ? do_syscall_64+0x26/0x610 [ 1234.776923][T15307] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.782994][T15307] ? do_syscall_64+0x26/0x610 [ 1234.787674][T15307] __x64_sys_write+0x73/0xb0 [ 1234.792267][T15307] do_syscall_64+0x103/0x610 [ 1234.796856][T15307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.802740][T15307] RIP: 0033:0x457f29 [ 1234.806634][T15307] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1234.826245][T15307] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1234.834652][T15307] RAX: ffffffffffffffda RBX: 00007f6c354edc90 RCX: 0000000000457f29 [ 1234.842617][T15307] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1234.850582][T15307] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1234.858548][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1234.866511][T15307] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000005 [ 1234.915641][T15307] Bluetooth: Can't register HCI device 16:59:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:19 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0x7fffffff, 0x3}, 0x0, 0x100000001, 0x100002, {0x4, 0x2000001f}, 0xfff, 0x9}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1f, 0x480001) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0}) 16:59:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x05e_\xf1\x03@\x00en\x00') 16:59:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:19 executing program 0 (fault-call:3 fault-nth:23): mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 16:59:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\'e_\xf1\x03@\x00en\x00') 16:59:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:59:19 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x0) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00He_\xf1\x03@\x00en\x00') 16:59:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:20 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00Le_\xf1\x03@\x00en\x00') 16:59:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = gettid() prlimit64(r1, 0xd, &(0x7f00000001c0)={0x401, 0xffffffffffffffe0}, &(0x7f0000000380)) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfa46f070136ec426, 0x20010, r3, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x1010, r3, 0x5f) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b40)={0x98, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="09631040", @ANYRES64=r4, @ANYBLOB="040000000064ffffffffffffff634840000000000000000004000000000000000000000010000000000000000000000030000000000000000800000000000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="7f0000000000000009631040", @ANYRES64=r5, @ANYBLOB="020000000000000009631040", @ANYRES64=r6, @ANYBLOB="0300000000000000106308400300000000000000"], 0x4a, 0x0, &(0x7f0000000580)="dc44f2bf8e018092fb5a179bb7ece7419b18d1739e3a04ad33a224e8e8e2cf2ed574a8298e6edb125575cda99d0ac21b18164f4690247ea92c7cea8b2b2ef29ac7d9aa56b478c346900b"}) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000500)) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000440)={0x6, 0x3, 0x80000001, 0x2, 0x200, 0x9, 0x3, 0x100000001, 0x7ff, 0x4c5e, 0x1}, 0xb) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000480)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000240)={{0x0, 0x2, 0x101, 0x3, 'syz1\x00', 0xc5b5}, 0x2, 0x0, 0x4, r10, 0x7, 0x1c4e7d05, 'syz1\x00', &(0x7f0000000100)=['/dev/vhost-vsock\x00', '/dev/vhost-vsock\x00', 'syz1\x00', 'syz1\x00', 'mime_typeppp1\x00', 'trusteduserppp0ppp0ppp1(posix_acl_access/em0trusted.:\x00', 'em1,\xfcselinuxsecurity\\vmnet0\x00'], 0x8c, [], [0x6d, 0x4, 0x2, 0x8001]}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000000080), 0x4) 16:59:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x800, 0x210000) write$binfmt_aout(r2, &(0x7f0000000240)={{0x10b, 0x5e2e, 0x7, 0x67, 0x3b7, 0x7, 0x1f9, 0xfffffffffffffffd}, "", [[], [], [], [], [], []]}, 0x620) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f00000000c0)=""/241, &(0x7f0000000200)=0xf1) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000880)={0x18, 0x0, {0x976, @broadcast, 'syzkaller0\x00'}}) 16:59:20 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80000) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x80000000, 0x1, 0x4, 0x20, 0x12, 0x40}) 16:59:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00he_\xf1\x03@\x00en\x00') 16:59:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x100, 0x0) getpeername$tipc(r1, &(0x7f0000000080)=@id, &(0x7f0000000100)=0x10) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00'}, 0x45c) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000140)={'netdevsim0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="beac0508f384130063719c5b83aef2ef6a6b3d1cccf596eaa808d95bbf7259fefcb96153b586b0e0a38f82f7d8b11436bde1e91091bc52c027d14e8375965385aceef7d7f4d21c46c29fd6f0b1f8f5b006ffce3b02a78f7d657c502693d0a90cb1df3d33a8e05d298fdb68b011506e8a9ffa9f719b1e9608b95b98d9e7e273721e338df20c108456e9296b9878b611", 0x8f) setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000000000)=0x7c, 0x4) 16:59:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000000)={0xfffffffffffffffe, 0x1, 0x0, 0x0}) 16:59:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e21, 0x1ff, @empty, 0xfffffffffffffffb}, r1}}, 0x38) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00le_\xf1\x03@\x00en\x00') 16:59:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00te_\xf1\x03@\x00en\x00') 16:59:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:30 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xffffffffffffffff}, 0x2) 16:59:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000000c0)={0x2, 0x100002}) 16:59:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0xfffffffffffffffd, 0x5, 0x401, 0x7, 0x0, 0xff, 0x2, 0x4, 0x400, 0x0, 0x7, 0x1, 0x6, 0x7, 0x7, 0x7f, 0x8, 0x6, 0x5, 0x1000, 0x3, 0x2, 0x5, 0x2, 0x9, 0x4, 0x2, 0x727, 0xec, 0x10001, 0x5, 0x7, 0x2, 0x4e, 0xfff, 0x582, 0x0, 0x6d50, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x20, 0x1, 0x2, 0x7, 0x1, 0x5212f184, 0x4220}, 0xffffffffffffffff, 0x6, r0, 0x8) 16:59:30 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x7}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) epoll_create1(0x80000) 16:59:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00ze_\xf1\x03@\x00en\x00') 16:59:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x02@\x00en\x00') 16:59:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x19, "29906086fd2dff60eecd4a4e25b353a9e2454430871fd9547a"}, &(0x7f0000000180)=0x21) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x0, &(0x7f00000001c0)}, &(0x7f0000000240)=0x10) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x102) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000080)={0x5, 0x20ca}) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe, 0x4) 16:59:30 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r3 = dup3(r2, r1, 0x80000) write$FUSE_STATFS(r3, &(0x7f0000000040)={0x60, 0x0, 0x2, {{0x605, 0xbad, 0x0, 0xffffffff, 0x4, 0x4, 0xdc38, 0x1}}}, 0x60) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x04@\x00en\x00') 16:59:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x02en\x00') 16:59:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x16f, 0x0}) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x9, 0x0, 0x88f, 0x8000}, {0x3, 0x1f, 0x9, 0xffffffffffffffff}, {0x81, 0x3, 0x747, 0x1f}]}) 16:59:40 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 16:59:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x04en\x00') 16:59:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0xfff, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x148) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000240)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000000200)='/dev/md0\x00'}, 0x30) getpgrp(r2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)=""/99, &(0x7f0000000140)=0x63) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x81e, {{0x2, 0x4e22, @remote}}}, 0x88) 16:59:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x05en\x00') 16:59:40 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x3}, 0x2) 16:59:40 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x20040, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x80000) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x4080, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000000c0)=""/66, &(0x7f0000000140)=0x42) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) 16:59:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0x8}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\'en\x00') 16:59:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f12ac3c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x400, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000280)="0412d7e5") ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{}, {}]}) r4 = fcntl$dupfd(r1, 0x406, r0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x100000, 0x4) 16:59:41 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x4}, 0x2) 16:59:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@Hen\x00') 16:59:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x42fc, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x3f, 0x4, 0x7, 0x3ff, 0x1, 0x4}) 16:59:41 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x5}, 0x2) 16:59:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x101000) listen(r3, 0x0) 16:59:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c12a41d88b070f4e8632811da4b84c971e578385eb4c0da9caaa5e88e0b7a291bf738d5ebb820ca2a5669a44c28ad95bf3094a1d5e98b1b4ea018dd6fb1a1d084b75d2d2bf08ba3ea38bbf5c613d8670f5aabe78db64fc2b778daec0ac778580f") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) 16:59:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@Len\x00') 16:59:41 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x6}, 0x2) 16:59:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x243) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$inet(r1, &(0x7f0000000140)=""/85, 0x55, 0x40, &(0x7f0000000100)={0x2, 0x4e26, @loopback}, 0xfffffec7) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x94, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x5}, @in6={0xa, 0x4e22, 0x401, @remote, 0xfffffffffffffe00}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @rand_addr=0x8}, @in6={0xa, 0x4e22, 0x6, @empty, 0x6}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @empty}}}, 0x84) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@hen\x00') 16:59:41 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x7}, 0x2) 16:59:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@random="aff7683de74e", @random="e53108500ab4"]}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x7) 16:59:41 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x8}, 0x2) 16:59:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@len\x00') 16:59:42 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xa}, 0x2) 16:59:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@ten\x00') 16:59:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400002, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=""/91, 0x5b, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x10, &(0x7f0000000340)={&(0x7f0000000140)=""/245, 0xf5, r2}}, 0x10) 16:59:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r3}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) r4 = getuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000100)) write$FUSE_ENTRY(r0, &(0x7f0000000140)={0x90, 0x0, 0x3, {0x3, 0x1, 0x6, 0x1, 0x5a8e, 0x5, {0x6, 0x200, 0xffff, 0x7, 0xfd, 0x1, 0x0, 0x5, 0x5, 0x7c0000, 0x4, r4, r5, 0xc4b1, 0xc5f}}}, 0x90) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@zen\x00') 16:59:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0)=0x9) ioctl(r0, 0x1000008917, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev, @in6=@remote}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0x2c, 0x9, 0x5, {}, 0x8, 0x7}) 16:59:42 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x10}, 0x2) 16:59:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00e.\x00') 16:59:42 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x3e}, 0x2) 16:59:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r1}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xc00, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'netdevsim0\x00', 0x1f}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000500)) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x100ffb) ioctl$RTC_UIE_ON(r1, 0x7003) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x1) 16:59:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x2) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x100000001, 0x0, 0x0}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x402, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000200)={r3, 0xba}, 0x8) 16:59:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00e/\x00') 16:59:42 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x48}, 0x2) 16:59:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x20000, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:59:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x800) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'hsr0\x00', 0x5}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x80101, 0x0) r4 = gettid() tkill(r4, 0x30) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x4e141a64058adf3e, {0xb5fc, 0x100000000, 0x7ff, 0xffffffffffffe441}}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) ioprio_set$uid(0x3, r5, 0x403) 16:59:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xffffffffffffffd}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 16:59:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x02') 16:59:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x1}, [{0x2, 0x4, r3}], {0x4, 0x5}, [{0x8, 0x1, r4}, {0x8, 0x6, r5}, {0x8, 0x4, r6}], {0x10, 0x77cfc16c5c9ca2f4}, {0x20, 0x2}}, 0x44, 0x1) 16:59:43 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x4c}, 0x2) 16:59:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x04') 16:59:43 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x68}, 0x2) 16:59:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) recvfrom$rose(r1, &(0x7f00000000c0)=""/83, 0x53, 0x100, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x40) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:59:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 16:59:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x05') 16:59:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80011}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02042cbd7000fbdbdf250d000000080005000200000028000300140002006272696467655f736c6176655f3000000800030001000000080008000000000008000500ffff000008000500ff07000014000300080007004e22000008000100000000005dd9842d3f76bca71bb87ff5690968ef9a574eacc9b4d81577b3077504828941a3ff22909ca06f3cdb1837da06a66e41e579e1943f163c11e34a35b0ef67e02665b3dd199e4de4b87b7ca35f22b1814b96231fab20e0bbdda687ac0501e5d80b"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x84}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) [ 1258.966323][T18452] binder: 18451:18452 got transaction with invalid data ptr [ 1259.005379][T18452] binder: 18451:18452 transaction failed 29201/-14, size 8192-0 line 3179 [ 1259.074043][T18550] binder_alloc: binder_alloc_mmap_handler: 18451 20001000-20004000 already mapped failed -16 [ 1259.123359][T18550] binder_alloc: 18451: binder_alloc_buf, no vma [ 1259.146009][T18557] binder: BINDER_SET_CONTEXT_MGR already set [ 1259.147720][T18550] binder: 18451:18550 transaction failed 29189/-3, size 8192-0 line 3147 [ 1259.164642][ T7864] binder: undelivered TRANSACTION_ERROR: 29201 16:59:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:43 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x6c}, 0x2) 16:59:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\'') 16:59:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) dup2(r1, r2) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0xfffffffffffffffc, 0x1, 0x7, 0x0}) 16:59:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x603, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 1259.173374][T18557] binder: 18451:18557 ioctl 40046207 0 returned -16 [ 1259.181141][ T7864] binder: undelivered TRANSACTION_ERROR: 29189 16:59:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00enH') 16:59:43 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x74}, 0x2) 16:59:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x3, @empty, 0xfffffffffffffff9}}, [0x5, 0x7fffffff, 0x6, 0x0, 0x7f, 0x6949, 0x4, 0x6, 0x1, 0x9, 0xfffffffffffffff9, 0x6, 0x9, 0x62c, 0x8]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @remote}}, [0xfffffffffffffffe, 0x4, 0x1, 0x9, 0x8001, 0x5, 0xfffffffeffffffff, 0x7, 0x2, 0x100000001, 0x5, 0x7fff, 0x8, 0x7]}, &(0x7f00000002c0)=0x100) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:43 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000480)="585ccbe4ed83b836c3a6474914dc55f3220600000000b66147b3c7218a916900587a050000000000000042e33089754c81fa1bfcd2a860b4ac07c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99826022b0100000000000000435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce063724c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d0095280821ed0e9681f7310d51e2fad4b4c0f8c", 0xc8, 0xfffffffffffffffe) r1 = syz_open_dev$admmidi(0x0, 0x8, 0x0) r2 = add_key$user(&(0x7f0000000800)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x0, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r2}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000180)}) 16:59:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00enL') 16:59:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80800, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x9) 16:59:44 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x7a}, 0x2) 16:59:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00enh') 16:59:44 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x204}, 0x2) 16:59:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:59:44 executing program 5: r0 = getgid() r1 = getgid() getgroups(0x2, &(0x7f0000000580)=[r0, r1]) r2 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() r6 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="040002000000000008000100", @ANYRES32=r4, @ANYBLOB="172f054fdd41d7fd84ef53460dbd5f7ebd5e3d0fcf3034331dea9309353cac08ac979f784f518e539671ba1196a0ad6d8b659d8ba3d362cecaa6fd33af76a03b41717c226e4c372d2cc326911ab8c6515d8a186a0aac01c134c05fd1b885801cbfe68bd5bf7e099f2558e028a7192c508b1795253a68127424569f1e807bdd3e1d359c52afd77e5be19105028c81e031dec74548ccbc7a957f7fe9ce05c5983adf63e0557ac46e00aaecac4208805e4e0ec429", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="10000400000000002000000000000000"], 0x54, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x1) mq_notify(r8, &(0x7f0000000200)={0x0, 0x36, 0x2, @thr={&(0x7f0000000080)="b8d62708a17ae54cba8e0e307d768e2a02c3a9636bdd026a3b386fa5050d9b8476878b289752505b5fd2f797910fbdfb1a100f3e2e0fc3d09f27a07c431b5806433e83e680cb9ccba625913319e8f258fed7429cad16480221bb8e70513915fe46b9a98b770a436e9b0315ab74625dbaff41b88612ae4dc36ad816a8370aa8935d94e2bd580518d27c4c174ca633591915a1e682efa6f128b798829fa376ba5ebf005b71103a3c2b3f092243ef53865be43b9aae8f41c844916c214e5feb0cbbab482da138f14f345b96e31c57c858dbca843c41773cefdd82dfb1b254091a9f287327d5a3731bddd7c013a3", &(0x7f0000000180)="bf67c1c1f851c4dde65e8d612032e2e124aa326c89ec1d12498992086ee67948b3871024d3d25653fbc36e958335ff00d0ce02e53a000c4d3f46546f4aacab7cdc6af0681f68ad8f613fa908a887f9efe4"}}) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r9, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 16:59:44 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000480)="585ccbe4ed83b836c3a6474914dc55f3220600000000b66147b3c7218a916900587a050000000000000042e33089754c81fa1bfcd2a860b4ac07c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99826022b0100000000000000435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce063724c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d0095280821ed0e9681f7310d51e2fad4b4c0f8c", 0xc8, 0xfffffffffffffffe) r1 = syz_open_dev$admmidi(0x0, 0x8, 0x0) r2 = add_key$user(&(0x7f0000000800)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x0, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r2}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000180)}) 16:59:44 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x300}, 0x2) 16:59:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00enl') 16:59:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 16:59:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x2c141, 0x0) sendmsg$alg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x188, 0x40000}, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x800, 0x0) ioctl(r1, 0xfff, &(0x7f00000000c0)="ad97ebdc3f7569039bd5724daa8683692ac0b0e1a4fe894bbb3a8419927d85c94de1ef33698a4a9df5ea4af0c0640d773cbc7f3b6581c4d8db1dc9f3844b4f91b6be953be6778f2c1049c3f8241f24908dab9132e9bdcadef95225126c9eaa9f4d6606ded3fcfdeb8bb5211478419b3524cd3bb78de50f821f12d8d6a95e8cae9caf76d6c2dc6b5a7e6f0b02bc4c35c5077f3b78bbf1bb4bb6ff32de1a8caaeff804") ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0xdf6, "4bf935e075954c02c361f4d6f0a252bc0c1325889d5018665a8fdd84bbf7f60f", 0x0, 0x1}) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x151000, 0x0) 16:59:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x703001) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) [ 1260.363830][T19213] FAT-fs (loop4): bogus number of reserved sectors 16:59:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00ent') [ 1260.415026][T19213] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1260.441923][T19213] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1260.552600][T19389] FAT-fs (loop4): bogus number of reserved sectors [ 1260.567518][T19389] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1260.583930][T19389] FAT-fs (loop4): Can't find a valid FAT filesystem 16:59:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00enz') 16:59:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x7) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x80000246) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) poll(&(0x7f0000000200)=[{r1, 0x401}, {r1, 0x4402}, {r1, 0x9010}], 0x3, 0x1a61) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x100, 0x66, {0x77359400}, {0x77359400}, {0x0, 0x7ff, 0x800, 0x1ff}, 0x1, @canfd={{0x3, 0x3, 0x8, 0x8000}, 0x18, 0x2, 0x0, 0x0, "faf913395d539d52c18d98a36e3e401dd9e2c94c2e0c8feda21214bfebef7a394567b291c873610e347eb3281667659f984156fde770b09d04934e0e94f7c6a7"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) 16:59:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) setsockopt$ax25_int(r2, 0x101, 0xf, &(0x7f00000000c0)=0x1, 0x4) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:59:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 16:59:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1261.009998][T19438] FAT-fs (loop4): bogus number of reserved sectors [ 1261.028381][T19438] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1261.059469][T19438] FAT-fs (loop4): Can't find a valid FAT filesystem 16:59:55 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x402}, 0x2) 16:59:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:59:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 16:59:55 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000440)=0x3ff, 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x210801, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000300)) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="1f996b607a0e5bdb2a6ff328de57d61e77efc1970e651e05c754b16dd12ae6b6e1f6780437bdf8e8091a373184cc807760a5db5a5930466d823b23dff133f5357e413eb07a0700dd9185c62ce8cf6eecfa09e4fc5ac42229cf76d5f6ae4c5a9678bb9efcf46ae08649ca1fb0871479a975b4515c8b603987b184381a28faeda3b44c4ea01e1353e1b78216595407182e53ab412b838e96f8e193bbdaeb6247111403e55825d5bf3e31540c298e", 0xad}, {&(0x7f0000000200)="7f96fa8d75ab943b0c00a7367e7bbc83cb15cd05485e1be0b32ad7e9fd6d8be9c201e771f12764e28f409ead8e4772cf522cbd5dd95e609b769ff2656d48e80e04546bded5c9c5c8c17b8896d0cf6e7c8b2a090898900538dd815d5b9bb80e7ad785bb35f3b42d47c3dbfed69c38ed094859e2a828b1db179ee25ee91fffc3bde45593d0cb137fe5477f926d9a", 0x8d}], 0x2, 0xc) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x4e24, @broadcast}], 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x80}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [], @multicast2}, 0x7}}, 0x0, 0x40, 0x3, 0x2, 0x1}, &(0x7f00000003c0)=0x98) ioctl$BLKPG(r4, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 16:59:55 executing program 5: r0 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r2 = shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) 16:59:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:59:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00enm') [ 1270.986774][T19664] FAT-fs (loop4): bogus number of reserved sectors [ 1270.995300][T19664] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1271.005748][T19664] FAT-fs (loop4): Can't find a valid FAT filesystem 16:59:55 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x500}, 0x2) 16:59:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 16:59:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x2, 0x80000001, 0x1}) 16:59:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x200, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x1, r1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x0, 0x100f}}, 0x20) semget(0x0, 0x5, 0x200) 16:59:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1271.209459][T19883] FAT-fs (loop4): bogus number of reserved sectors [ 1271.242917][T19883] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1271.284636][T19883] FAT-fs (loop4): Can't find a valid FAT filesystem 16:59:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 16:59:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 16:59:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000000c0)=0x1000000) 16:59:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = semget(0x0, 0x1, 0x540) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000040)=0x855) 16:59:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1271.498565][T20100] FAT-fs (loop4): bogus number of reserved sectors [ 1271.538231][T20100] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 16:59:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1271.573383][T20100] FAT-fs (loop4): Can't find a valid FAT filesystem 16:59:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 1271.711922][T20297] FAT-fs (loop4): bogus number of reserved sectors [ 1271.719408][T20297] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1271.729303][T20297] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:06 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x600}, 0x2) 17:00:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xfff}) 17:00:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x81, 0x101101) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000200)={0xd, 0x4, {0x57, 0x1, 0x9, {0x8, 0x7}, {0x81, 0x3}, @cond=[{0x4, 0x101, 0xffffffff, 0x5, 0x7, 0xfffffffffffffffe}, {0x7f, 0x2, 0x5, 0xe278f51, 0x36476b5f, 0x522a}]}, {0xb50708e0662007a9, 0x1, 0x10000, {0x6, 0x5}, {0x80000001, 0x6}, @period={0x5b, 0x6b, 0x3f, 0x7fff, 0x2, {0x2, 0x3, 0x7, 0x6}, 0x4, &(0x7f0000000140)=[0x9, 0x4, 0x2, 0x2]}}}) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x99e, 0x2000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'eql\x00', 0x2}, 0x18) 17:00:06 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1281.846733][T20326] FAT-fs (loop4): bogus number of reserved sectors [ 1281.885371][T20326] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:00:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00enA') [ 1281.918298][T20326] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x880, 0x100) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000100)={{0x1f, 0x20, 0xdf, 0x6e, 0x1000, 0x9}, 0x1, 0x0, 0x3f}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x9, 0x9, 0xe2, 0x1}, {0x2, 0x7ff, 0x5, 0x9}]}) r1 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x4d4db21e, 0xfffffffffffff001}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x80000000, 0x30}, &(0x7f0000000440)=0xc) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r3, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:00:06 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4a0401, 0x0) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8, 0x35, 0x1}, 0x8) 17:00:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1282.121827][T20559] FAT-fs (loop4): bogus number of reserved sectors [ 1282.153457][T20559] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:00:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7c5e682c, 0x80000) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/236) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000180)) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1282.194228][T20559] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:16 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x700}, 0x2) 17:00:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xffffffffffff7d06, 0x480440) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1f) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x58, 0x8}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:00:16 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/13, 0xd) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000300)=""/79) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x600100, 0x0) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x6, 0x1, 0x10, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0x9}, [@nested={0x4, 0x54}, @typed={0x8, 0x57, @fd=r2}, @generic="17f1783c2424f386e3daad28b6a17b203b910c7e6d420ba2a614aa4bae"]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) 17:00:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1292.100744][T20862] FAT-fs (loop4): bogus number of reserved sectors [ 1292.107627][T20862] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:00:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1292.177498][T20862] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000200)="0adc1534ff74a80912c071af3632be70bbdf2563147dd2cd07ca867f17ead385e0cb5e3f72c0a432ad4f329277dca2324e83d8500065d086069855aea0cf0abea2a37e603cdb60dd09128775ca05f21bbebef1f87d723ea5e583db8c105e726ffa5988c524cdefe897dcc809f63e52c9f33daac3970f3ea3af468cbe1b898dde5b760232") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) 17:00:16 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)}, 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:00:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1292.406182][T21091] FAT-fs (loop4): bogus number of reserved sectors 17:00:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0x35e) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1292.447619][T21091] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1292.476803][T21091] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:27 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xa00}, 0x2) 17:00:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:27 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x4) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000400)=""/4096) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) socket$bt_rfcomm(0x1f, 0x1, 0x3) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:00:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:00:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123e12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8000, 0x4000) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:00:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1302.972557][T21411] FAT-fs (loop4): bogus number of reserved sectors [ 1303.031715][T21411] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1303.044925][T21411] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:27 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x100000200001, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:00:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uselib(&(0x7f0000000040)='./file0\x00') r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, "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"}, 0x1001) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 1303.184095][T21626] FAT-fs (loop4): bogus number of reserved sectors [ 1303.231884][T21626] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1303.250474][T21626] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:37 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xf23}, 0x2) 17:00:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0xa0001) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x100}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r3, 0x0, 0x7, 0x2, 0xaa0000000000000, 0x200}, &(0x7f0000000180)=0x14) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 17:00:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:37 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:00:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, "ce286a06d689ff0d496c29b2c549160784e9090b68ea23e46cfa050de246f1ad6d6c4a06aee5ac5c76a86c51fc2790dc30c0dcaaf2840340e52d9d19865624af76f18e8348f6ca37e11d0449cfea8efc15c0"}, 0x53) 17:00:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1313.226928][T21854] FAT-fs (loop4): bogus number of reserved sectors [ 1313.233556][T21854] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1313.258409][T21854] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:37 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1f00}, 0x2) 17:00:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) 17:00:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000006e00)='/dev/sequencer2\x00', 0x783a40, 0x0) accept$inet(r0, &(0x7f0000006e40)={0x2, 0x0, @dev}, &(0x7f0000006e80)=0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2}, 0x100000000}, {{&(0x7f0000001500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001580)=""/97, 0x61}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/209, 0xd1}, {&(0x7f00000017c0)=""/239, 0xef}, {&(0x7f00000018c0)=""/133, 0x85}, {&(0x7f0000001980)=""/196, 0xc4}], 0x7, &(0x7f0000001b00)=""/52, 0x34}, 0xd5d}, {{&(0x7f0000001b40)=@l2, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001bc0)=""/123, 0x7b}, {&(0x7f0000001c40)=""/147, 0x93}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000001dc0)=""/8, 0x8}, {&(0x7f0000001e00)=""/185, 0xb9}, {&(0x7f0000001ec0)=""/150, 0x96}], 0x6}, 0x5}, {{&(0x7f0000002000)=@sco, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002080)=""/6, 0x6}, {&(0x7f00000020c0)=""/130, 0x82}, {&(0x7f0000002180)=""/62, 0x3e}], 0x3, &(0x7f0000002200)=""/254, 0xfe}, 0x1}, {{&(0x7f0000002300)=@tipc=@name, 0x80, &(0x7f0000002500)=[{&(0x7f0000002380)=""/94, 0x5e}, {&(0x7f0000002400)=""/194, 0xc2}], 0x2, &(0x7f0000002540)=""/144, 0x90}, 0x10000}, {{&(0x7f0000002600)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002680)=""/85, 0x55}], 0x1, &(0x7f0000002740)}, 0x5}, {{&(0x7f0000002780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002800)=""/42, 0x2a}, {&(0x7f0000002840)=""/67, 0x43}, {&(0x7f00000028c0)=""/250, 0xfa}, {&(0x7f00000029c0)=""/91, 0x5b}, {&(0x7f0000002a40)=""/30, 0x1e}, {&(0x7f0000002a80)=""/83, 0x53}, {&(0x7f0000002b00)=""/118, 0x76}], 0x7, &(0x7f0000002c00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003c00)=@x25={0x9, @remote}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003c80)=""/44, 0x2c}, {&(0x7f0000003cc0)=""/38, 0x26}, {&(0x7f0000003d00)=""/248, 0xf8}, {&(0x7f0000003e00)=""/178, 0xb2}], 0x4, &(0x7f0000003f00)=""/79, 0x4f}, 0xace1}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000003f80)=""/129, 0x81}, {&(0x7f0000004040)=""/251, 0xfb}, {&(0x7f0000004140)=""/41, 0x29}, {&(0x7f0000004180)=""/173, 0xad}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/8, 0x8}, {&(0x7f0000005280)=""/253, 0xfd}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)}, {&(0x7f00000063c0)=""/10, 0xa}], 0xa}, 0x386}, {{&(0x7f00000064c0)=@hci, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006540)=""/161, 0xa1}, {&(0x7f0000006600)=""/89, 0x59}, {&(0x7f0000006680)=""/247, 0xf7}, {&(0x7f0000006780)=""/69, 0x45}, {&(0x7f0000006800)=""/170, 0xaa}], 0x5, &(0x7f0000006940)=""/68, 0x44}, 0x80000001}], 0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000006c40)={0x0, 0x80000000000009, 0x0, 0xffffffffffffffff}, &(0x7f0000006c80)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000006cc0)={r2, @in6={{0xa, 0x4e21, 0xff, @ipv4={[], [], @broadcast}, 0xffff}}, 0x0, 0x9, 0xfffffffffffffff9, 0x64, 0x4}, &(0x7f0000006d80)=0x98) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000002740)={r2}, &(0x7f0000006380)=0x8) signalfd(r1, &(0x7f0000000100)={0x8e}, 0x8) write$vhci(r3, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r4 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) syz_open_dev$swradio(&(0x7f0000006ec0)='/dev/swradio#\x00', 0x1, 0x2) r5 = add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="572934ce812bb8fec067e99971f5e3465f2b80e70658456758c7d6bc7fe964f43c4e324604ce83de3c154a6bca919bbfbd22cce24b4ae0b87b2ab52e73083549a6155dd85de7e84123e05da37ff1f09828df5beb71695b102207797d34c91fad52f4fa250fe4c6e28c93167125aea22b55ae9f9a33183a165f866e53fdccbbb5", 0x80, 0xffffffffffffffff) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0x4e, "f32c225600ecac93f8d7aa797a5dbc745df931995e4ab68e4b9384ea1d680933b0d8746fad16636771f012df50c2fb00b81363421f787d959f88a5a153fa178ec39b15a125760d9ba9573856e6b2"}, &(0x7f0000000300)=0x72) keyctl$instantiate(0xc, r4, &(0x7f0000006f40)=ANY=[@ANYBLOB="6e657720ea9e3c8770746671ff677365723a5c2f2030303064e9d5c33030309530310000000000000000c013c5939edfe5988a62f8110704e5acfa86946b19fcf1780b30c3bcd0100c1f"], 0x2a, r5) fadvise64(r3, 0x14, 0x9, 0x7) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006f00)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000006dc0)={0x5, 0x0, 0x8, 0x0, 0x39, 0x5, 0x0, 0xc7f, 0x100000000, 0x7, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0xff}) [ 1313.455125][T22086] FAT-fs (loop4): bogus number of reserved sectors [ 1313.483739][T22086] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:00:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1313.507723][T22086] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x141000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:00:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000014c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x8}, &(0x7f0000000140)=0x8) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) pipe(&(0x7f0000000040)) [ 1313.744224][T22314] FAT-fs (loop4): bogus number of reserved sectors [ 1313.779289][T22314] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1313.848564][T22314] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:00:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4100, 0x0) connect$nfc_llcp(r2, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x2, 0x1, 0x4, "81ee9effe9cafe72646fc9468552886e21f0521f44ecc1f6a856dd0cae86453b153961f1592d4bb46029799d1641573317d5bc575efa845a708b8d0122ed61", 0x3d}, 0x60) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xffffffffffffff7e) 17:00:48 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x2000}, 0x2) 17:00:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008917, &(0x7f00000000c0)='\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x20000004}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:00:48 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x30000, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:00:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:00:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\xff') [ 1324.123840][T22668] FAT-fs (loop4): bogus number of reserved sectors [ 1324.163570][T22668] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:00:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0aee1f123c02a41d88b029") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:00:48 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000040)='/dev/vhci\x00', 0xffffffffffffffff}, 0x30) r1 = getpgrp(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40000, 0x0) write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, 0x7, {{0x1f, 0x80000000, 0x0, r1}}}, 0x28) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x103000, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) [ 1324.225522][T22668] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\xff') [ 1324.409174][T22966] FAT-fs (loop4): bogus number of reserved sectors [ 1324.429821][T22966] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:00:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\xf6') [ 1324.454999][T22966] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:59 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x230f}, 0x2) 17:00:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:00:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000000c0)={0x3, 0x800}) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0xfffffe9b, 0x0}) 17:00:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\xfe') 17:00:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1334.965802][T23120] FAT-fs (loop4): bogus number of reserved sectors [ 1334.984909][T23120] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:00:59 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x3e00}, 0x2) 17:00:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1335.036863][T23120] FAT-fs (loop4): Can't find a valid FAT filesystem 17:00:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x48001, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="200028bd7000fcdbdf25010000004000030008000500000000000800030002000000080008000200000014000600ff02000000000000000000000000000108000100030000000800080004000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r3 = request_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='/dev/vhci\x00', 0xfffffffffffffffc) r4 = request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='security(\\+:\x00', 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r4, ':chain\x00'}) 17:00:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x800) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x5) poll(&(0x7f0000000000)=[{r2, 0x2}, {r0, 0x8000}, {r0, 0x81}, {r0, 0x80}, {r1, 0x204}, {r2, 0xc000}, {r0, 0x200}], 0x7, 0x5c) 17:00:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:00:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:00:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1335.267707][T23370] FAT-fs (loop4): bogus number of reserved sectors 17:00:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r2 = semget(0x3, 0x0, 0x8) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000080)={0x84, @empty, 0x4e23, 0x0, 'rr\x00', 0x11, 0x6, 0x76}, 0x2c) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2002, 0x0) 17:00:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x10dd, 0x2c, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000100)=""/44}, &(0x7f0000000200)=0x78) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:00:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1335.321396][T23370] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1335.334588][T23370] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:01:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000040)="0adc1f123c12a41d88b070") io_setup(0x4, &(0x7f0000000000)=0x0) io_getevents(r1, 0x6, 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:01:10 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x3f00}, 0x2) 17:01:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:01:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:01:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:10 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x18000, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) fallocate(r0, 0x10, 0x3ff, 0x2) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:01:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', r0}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x20400, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000002c0)={0x40000000, 0x6, "f66a29cdb57595998f5bc311a4232e1c937417812e5bcbfe5b23097b204291f9", 0x100000001, 0x1, 0x3, 0x8000000, 0x101, 0x9, 0x401, 0x1, [0x1f000000000000, 0x100, 0x3ff, 0xb8]}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffffffffde0, 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000003c0)={0x10001, 0x4}) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000180)={0xac, &(0x7f00000000c0)=""/172}) [ 1345.863911][T23906] FAT-fs (loop4): bogus number of reserved sectors [ 1345.871309][T23906] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1345.885439][T23908] Unknown ioctl -1058515353 [ 1345.895687][T23906] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1345.912319][T23908] Unknown ioctl -1072667636 17:01:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:01:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x6, 0x9, 0x100000000, r2}, &(0x7f0000000100)=0x10) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:01:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x4a, "b1a9ebff4879ce32b2e9f56b3ccbdba52d833587a123820c910d6432e5665c1c5778459168756843d0b72efd770b2705b83e21848e262b1673ea35237cc6edac90fd3c113562eb25f753"}, &(0x7f0000000140)=0x52) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x1, 0x7fffffff, 0xc0000, 0x40, 0x6, 0x80, 0x4, {r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x101, 0x4000000000000000, 0xd2, 0x1000}}, &(0x7f0000000380)=0xb0) 17:01:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1346.121474][T24133] FAT-fs (loop4): bogus number of reserved sectors [ 1346.139555][T24133] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1346.165818][T24133] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:20 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x4000}, 0x2) 17:01:20 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f00000000c0)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x7, &(0x7f0000000580)=[{&(0x7f0000000140)="c69e704924c201d008da46896ad25c05753d9f6e1aabbe35f31cda50a3264ac1f54e12e8e64f7ff9d07588cb2a792853e99a27091567bc9202d9c1a83495b8d9edcfc589c6e51585f104e337da83678978355588cf7654f320388835ddf08ed9b1949ac271df761880452e2eb2c3de9d5f2cd83e72c2072a521967435124ce1cde46aa8b30e3c4fb8b7045f7ede66893d11c553dfdcf53eea9", 0x99, 0x2}, {&(0x7f0000000200)="15705c1d8650c11e437dbec8618bb56602c5605829dd49fc2b28ea1185230b8f3db04bb58b0a3f86a10665a6a3d057cde07a7af84914ec1701b78c2b5c1ae21f3aace1c6ee09a2084935e7aa1b", 0x4d, 0x1}, {&(0x7f0000000280)="5fee540e5e56dda78e301dc72099d73504e9a87077d28d16b1ebbec7c9c5367dfca9cb68ecbf71e4c3", 0x29, 0x87}, {&(0x7f00000002c0)="d2be531e00256b6b3ff8ba2e46eec32e6d8e04da69d0b8480170bb208500f1cbb26ebd719d29c56e5094a7047e2199a668436e559c7725364d168e0fda414309d2e1e78bb140a601560d61de80d86a5a19a04391d5b5f3b71f2ffbdb182085af1b3d0b65a74e6f9abf9ca6c3cc0ab008a6b16afcace94865498faef427c259ce32dd3eefe8b0b2f78eb11ef1c84281baa35560b37f2f45f97191154e63116c9417395cac1e7333a6f46de1c24cdec42006559f335fdd65918966e7b4171262ef190167707cf8fedd204038294b280775c63f39ff5648ebee6dfcb00f00fd45360ffa16ae6f0bff49c9bd", 0xea, 0x3}, {&(0x7f0000000400)="ad82b518d10fa76686c29732b30807a92a029ff6a62ce556c496c4fb987278c6e24928c2f06d0a9bec0a11a0180611398b109f6c18cd55522ff0d114697b43b026183d95231752081632174ea2e49a77711db5de064a823cc2532d7df4ed013ec6fdc1db5566f1c34b5b73c76628ea54ea16cb", 0x73, 0x70f3f5e6}, {&(0x7f0000000480)="42411e16cc0edbe32874ad6c6b4d92f0c68e97b64e33876cafefc1c4047df639adc25216c624c5a140d03f45b8b43a21f7d2239a8ee232f32497d0bded8dd5d374be6a53c3ef709702c3d3b48b4e7dc2881c91c6e42b4cc4ce255b823cf215e1b5dec3bf47f8f770842a35b19547d178c8940abdf8c8b7d3a0546fc111672adb8e333a2301c0f52f", 0x88, 0x7}, {&(0x7f0000000540)="b7eee714b3e75cbca2", 0x9, 0x101}], 0x0, &(0x7f00000006c0)={[{@acl='acl'}, {@acl='acl'}, {@noacl='noacl'}, {@noacl='noacl'}, {@acl='acl'}, {@noacl='noacl'}, {@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}], [{@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r0}}, {@smackfsfloor={'smackfsfloor'}}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rfkill\x00', 0x40800, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000780)={0xfffffffffffffff8, 0x3, 0x3f}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000040)=""/114, 0x72, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r3, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:01:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:01:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xa0000, 0x0) connect$netrom(r1, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) r4 = getgid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x5, {{0x0, 0x2, 0xfffffffffffffff9, 0x705, 0x4, 0x0, {0x0, 0x80000001, 0x40, 0x80, 0x4, 0x9, 0x100000001, 0x7d, 0x4, 0xfff, 0x401, r3, r4, 0x1, 0xffffffff00000001}}, {0x0, 0x1}}}, 0xa0) 17:01:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:01:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1356.115825][T24349] FAT-fs (loop4): bogus number of reserved sectors [ 1356.126322][T24349] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1356.153576][T24349] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) 17:01:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000012d) readv(r0, &(0x7f0000000580), 0x3c1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:01:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:01:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) [ 1356.366752][T24568] FAT-fs (loop4): bogus number of reserved sectors [ 1356.383625][T24568] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1356.393759][T24568] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:30 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x4800}, 0x2) 17:01:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:01:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x208000, 0x0) r3 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x9, 0x5, 0x1000}}) 17:01:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:30 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000780)={r2}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 17:01:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1366.359321][T24897] FAT-fs (loop4): bogus number of reserved sectors 17:01:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1366.404322][T24897] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:01:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, "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"}, 0xff) 17:01:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) memfd_create(0x0, 0x200000000000001) r1 = socket$inet6(0xa, 0x6, 0x6) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0xfffffffffffffc67) listen(r1, 0x10001) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000280)=0x7000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000100)={0x0, 0x1ff, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffff7]}}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r5, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) [ 1366.445289][T24897] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:01:31 executing program 5: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmdt(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7fffffff, 0x1) fsetxattr$security_selinux(r1, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x100ce}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000000c0)="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") r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="c7ba3876d8fa39bbacfae34bcad9e3d25e7478e9e9e92396e3fb1b4597c0b7776aedf7c589f6bb191c96aad925cbb7781d7e0e5e483fc629b44c4f5dbcc44a30464b51d71bf3ac566f8671f40092c56dba56d1d29305ae69e5f45a5d411d903475669ccffa8a1724eb14f5dbe34ef90c27f3de18978c8b5c7aa75238a79a97d705700c90720a3a1bc6e88f5303fb5585267982a730cf02c2", 0x98, 0xfffffffffffffff9) keyctl$setperm(0x5, r3, 0x80100) open_by_handle_at(r2, &(0x7f0000000440)={0x1008, 0x100000001, "9d777509b3650f1fa598d032b9abe64b2dcc5eaa0334fda51b30a48a78733069d0bdf7191fa881e2e892be03b6d4f44e116db8f14242f61ffb0a39bcbe38f45596f66d8b8ecce759a4a59c9642693fc4cf6f14e305f1269eb90536d801d15af29e4e02ac703b2f6730aac95abc28952bb39e97d78f0e17d879bce6fb33ad1824e736febfbe199f388ac059f90c6fb51fe59ee2e982d89fcbe5ba1ce663ce52c71ae069b28503883862f1c536c8f677817948a83f16602b41f6dd323c5179893e932e3e7f1998988b97025df1d112a8ab11240a424049b8d6e1c6c845d5afcca00dfe6d6d05c6902e9eaf2f9e85734533d42a52dee50b94126ebbc7ccba0c91436cc00c8403d62196fc3c0d44aae42fb63db82f69f2d304d03c353914ba09ef5835cf01efe3f4903e39167adae3ed6759304617279ffc6a47474812a5fffe030bb449291d8609d0a4fc11c87c3f8c1472907d070479d5a4dff1ddb8e2d2aac09e898eb30a65a930a249831f6b50e901a8cd8525943dfbd8c72febe24032b76251d7ad81e2a168f1ea36ed35d0e51dd0af07e35143567fd016a378b81f82032bcf3b7b49bc0f4d8f17e964c97a2ea2957c7c6630c76e494db97ead439c52bba2cdf0ffb99c3fa92598fb4dae05d05727f22487899bc03728cd00fe9e2cec5c2acc97251ae6258e43c4fed5a5e1dd623b291bb550a614a05e68330fbbbf118fad60f9bdbaa5e1e1611939e83d6ffc8a0e549a07997ff736a5da1ace890befa0a9e751e8aee1dbf59ef1258e88172acfc4ece88e2ebfc3c78ad0ab8719ac34e9436bf36bae6574448fbd1143fc5999c4dd10f71008658627a5426460ed9bc0b22eb1e90586bb6988f44a78c110718db8f5ed6ae838b73f634e4cd3ee0e97df8153d266c49e443cbfddc15aedee9914270574bf909ec3259888ecf56faaf408d97367a5756ee0103ed875bc400efb89c2c8fb3f4f5f4ead35eb491d203cca4b899533cb7e12a0039db17e64480800c5e8e6556b88d749aa56829f55e248e2b2e87b0f29224647b56070b38d5af8ab9ca27b0f6b790f9cbec45a297f1abc08b02f29550a8568d5a99cd9c05af94584b5891127a9a2fcd1060c2257f76c248ee886c8a282d986b31790c13ddd77c05a1e984bba0b5c2aee2b94cb80b7edd35dc7f770d2eb55fb348654f52880db259f207a1c1895454994710957fe78d90fb7652b0849d104950c3ba8bea27f71a49780f0686c69196f798e6d58317fb1d5ca7b7d112bbd6bd81cabcfa187624dc8f18446da83197eec3e40a70725096c93ee971832babde8ad25cdf63c84febeece9801c4b03e4ad79e8b6b51dc9537422e0a54960518af35ac5f7ddd835cc3c8b8db34d3262b8f012509cdb64e06947883bb72839be03ed6a78b29c41b88d8bb22eff839883f27a669dc68577132b45797bafc872b78bb5351eea4edc438d4895ebab45aca6bc3a4cd61ff756586e9d96973f58560227623e3b7a2ca41da5a671f5e51079ec290c7546ea405dc23c7ca4acb64864e2e026424f7d6f58c9555dcfb0c003218b883bfb10d5e5bc29373c9a372fcedb16d550eb2a75d32290e7b6480c417480a3506a838c42e183d971087d943829d7ba5418fa4b6e2d5e7ebf07c9009a406af9b9ec2b9ce3369f4d0e7cfafddac7b1cdefc7e46083d064186905c62db274282acbc54e344d7338a1e4eb59ac9caece35096b68e370abff968a63e6b0999a36cb3ac3aa9a284629ac24dbd46a0e0620982757354f107a9cbece58e09d62bd9cf84fa2b090113a883628387fba0772ea3df8615b77db9ffb33533a40023e77c3b106eb04e354d697f964ca13e17440797724cfdb4f74d176baa0769d5c7f26adc28afeace892fccbfaffed8823de601fa20f70542aa75af3eb1c3427404e3258d05cf0c20013d798d8e411657fe0e9592c10f111a5adaea517227dc050c040f584b8d221f136982b1afc0b4531920a16027cd71d9b1d041e605031629b2c83e4e3167e0626df39ad166c936591f80a13554eb520b2f0d95e2028341b1a77f7e04713385b5569dacfddf278bc2b59bbbef92e60d28add0b16b7128983d99c041b384e78e4f751c9dd7e48602d622daac5f33712df5569c9cd8bf9eccd58b0e88a3917139576f6179fa62b614677b5947759e1fcc77e864ebf86f41422ffd75276cfeb7249112cf9684ea8761ae64c9ec94ea561b0fbc02d0b6436ef57c72ea6a33167371f782bd9b1df0128b25484b9e4b1b0f5775e84d3b55985b21b88a676e4121c760d1bb01e6e1f3196b0d609c0e9e485920eac4ff01b262179fc11c58c9015675dc7319d030614b4b91400a817421ce6f60d9b1edbb5d0c06d012a410cf7400ff21e08db7ac65adcf5dd19e39166c40958ce8395380302733b44259419959c9149c5f597ad02965cc36c4ae8530db597fe63d0298c6bb6943b85fea0d95e0e64b2ed146b60e487c0901dbb0374be6f5048c35225b0479c861160c7a298a37fdf63aec38b0916dc08f3eaa72062b67a00fb7418475b3008abf18ff9ebdebe431f2f3114f1bfefa4724ec1beaea5887f3a5355babc2b8ff3b18e26b480826a03114ffbd842ead9303f0a5a65ce4f3fcb899d872ff2c8988038e1c6141221b23353618588980d0add91056c23fb91b3dc7378eee9baab52c2597299ee4ecd72f0cf89756382e6e97ff0345a71523e04b5e443ac3c0213bea68b5215942656dacd1a92dfa098ead6b5be4991df8b61ae07b0631cc563cf66e28f03362c4c3c61c2b4cc59e25a2e10e714d9bb250fed45a68da3ef72a43dc425141c132d8addd7c688b8f09a6855a767c2d96c1808b7dcdbe6824d0a1889c035b8232b4a3fe757d5ee566fa28cd2c7b430eba358d2b5edf23500159f9dea293f11230e629f00aac9b25b51def316392281681de8b5aad8eda3f1b90f200777022df6275ec3c9ddd6f81f4ba68399aad754dff0545e4676a116f1a565a21076d31d0c620b4e598856de1e137e47916ec3e27e597ba98a7b93301bdf0cd75894fef2b404447672609e4ebd891ae223fafa387458e58d171b17527f8536908e4a1f6f48fb8917f6706ced04bbd815b4f3c0cf3da79a4d0b078ac292f164744e435b68dad138566f73cb7dbe7ecde3d2ee97793fda3fed3520e755c379a9d27654316111eb80b29f03ad0355d48c76aa5179df291dbc44cdfabdbd95540e751e2567d5c304ae2400f7ebcd048a2985dee49d2a963c0fdba5ac602ebcda04db8fd53bef7510387267527f3cfbf6ad4d9f8186037d6df6b5acb642c8162c7a6b5eccce5d0667bdc113b83c9f9106256f048f37924bb12bd281392e1fbb717156cb3630e9b4a793ec02c65605c5b4306fb9ec7ec707b4836d05d3885153375ada779a1ab57178455a68cd9bc36230d1ccc6fc074cb472b3e9fef19bf2a47746467217ac895f28d968f71b2c674d58c82069be8a2ac9adcad856c1f9097434ada0ad342ba19551b9bc003f5bec481b8a727e2bd561d4fdcdca094ce7436ca7387936944809122e290c6026f071cb26fc8fbbf54566bc823dbfb654e8f0b091d79f3551dccbf5bd43121f9a15509d36edf84cd4e4b067a38f0fd207a74eeac9edf8ebc174a160c2884b3d68602c879e3533eb77ea14ab9a2025b80edf222b6e9aea11c595a216aaf8d48c733efbb8b094cf12c58fa7ca1e70759def9ebeed9b1faf303a475abe95f1122a5727858e5efd431d7f671c8c0d7949d9f5fc571a65511b98f8fda1d56a538417cf86e4a2322a7114991b83d3592def3255718d7d7150d943c929fd7413357dc7d4e9ba3e4afbe0f04a6b8c7ab38720df99311e0cb3fad8963cdb978dd4fc2361ada0181df27b3f0e7116aafb11fa4337937076cc55f2e2067c1e896619743f2aa89ba4cd86895c7330cdbc61f7bb4028777870f701b68adadb648d61459a342f2341ecab88a78b93f5201973900b4f1aaa5da74201aa3b3ca83cbe829ff9ff839d8565cdb7adbfe7833ab47c9fb0be6c25bd24a53170ab871dd8fb002b4cbf29651134f7b7e4453b8ba5bfbfd3efc6cf4a30d450c726b3f57a9b52ab7842706c88bca3491621fd94ce64dd97cd7196be8a85e35f93398d19586fdc2cc47fe19b5831f74ec7b2f19d1efb7b0fcc1f003a5a979c101d9e883ee2f722ea911a41a86ff50293a3e155687b5c75af9fe5b7b7f6f3a52cafa1c717213320330d9f8ae6369ef7d23c22b3c51403e34b104201f6e9fff34f78cdf2da29278823406b6211d257d2a69d21b9de0ec9d2fc19037231c69b3f1c14cdfc7320ba2de53a60b35b55dec6c8bf221f4965062e3b2c1ef1f5292cb621592855c0be97b66b2d4c0b8e7596a5c2cc742867110911bc4f69034b6ae0f10c0630e3542f8c4ce2a5ac10e55d97894aa1c02ca1cd83957e3eea03141155c2c6ce571a9618579a7c03e50e61e49bcd0a3dc07287d92a02f63b88147713d7a76c360f0dbf086fc5a02019afff1fb70d8294c62504036d1a774cea38ef7a7a5d65e9b2c3b732c1122508a0ac737955504ca5edb14ecd89c1405a06b730472de29eb252128fb0d61a0aa0b20f0ede7b820429f3bf477f3dc02dad57797fe38db95c2458bbacc3b6d94d9e945ad17ccea1267ae9e18cf6acfae1502f9eb8825fd544f7776582080b3ee53197ca461a81da8a18f5be46deac34e06d5b3f4d8d73eb7ac398b85c25fc9302374f7f9e95414aa99c9837c7d76992c86671839ffeeb62fab5ae7ba5859b6f2a308f94ace60fae789662a41422ecee449ee5d5885ecd8e8a012c9b08055ae5db18721a2656fe014a6d5aea0fb732ca2a885300b9be8cddcfb479fc1ac498ada2ef3a0bb2fc79a45e1af6f690f9bdeb6550df86d4bc435d3ef2404e42ddfe6e46c40c149d01af72144a2eee4f5cf181e615ce6ff7a34da5187358e22bea20343a83ca7240edea77f9bfb0e6e0f48e6ee77c37709a93c2da153db70c18b65b6a85ad8ef3d1b1dadc810e16f5daa83ec6a56d9fcfb46918debfc40327c38318968bfb92d70dad85f378254ddfe0de7dbaddcbe94ec13ac0ad8a2bdf0ddf7afee0427ff74275ec8446289c775dcd600847a3443945699d8991c2768f7360ee5f8cd234c88256f7d192001c6e8d896e5897892da2c05b48262bc24593d6c4ce4fd129a452412a6724954eac2076000e349611f90a6743530c205a73c21ba9a66e9df87693e1754f644fa943dde00e24d554fd0cf2867693ee86aa8ffd4b251d46a0901161c4e36b458effff1fe11bc5737cac31c72126f3c375406c64c506a6f76e85cc242f54927158e2d8e5e0bc56ed166fc2984286179456ae08cc6fef50b92f8e002b369051a1446fdc63bc0f85d1d3b770e57e6d4c0e40c533d2ce289cbb64ce4519124809b96583ac7652f54c4558f192b3c21e3b9023a5ca38dd90b7f8885b90dbf72d3cbcc4d77deb268c1d3b2c8d99f9762503a5e06b80582421843956e6379e0bc2373faf0bac571b690ce940dc01d28105b6cc158a7781f19594ac3ec920f8e9dadc22b043b703d9b47102303e84e49fce9d529f59e6657d9bfca136ce6079a9fd859db6bcf3ab89f21238360369fa33e061b25f0458be8266aa9300858ca09e6c8541661d0c34116d110b8a3e76e6e922b0fad08f2c9a27e776aa4e951e4bee7725f40de29b56737d387021f6d8ccddeee070400d5bd500a454038f05aace4a3f00bbf371a4ff5d68ac3b1e7f6d8600f3d4afdf37af2aa5990ef41797c484837f1dbe228bf421212b1a1da17a9db510b696ae"}, 0x80) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200, 0x0) accept4$ax25(r4, &(0x7f0000000340)={{0x3, @bcast}, [@netrom, @rose, @netrom, @null, @remote, @remote, @rose, @netrom]}, &(0x7f0000000400)=0x48, 0x80800) write$vhci(0xffffffffffffffff, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000001480)={[], 0x7, 0x2, 0x80000001, 0x0, 0x5, 0x0, 0x3000, [], 0xffffffffffffffff}) [ 1366.649972][T25193] FAT-fs (loop4): bogus number of reserved sectors [ 1366.674998][T25193] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1366.694548][T25193] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:41 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x4c00}, 0x2) 17:01:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:01:41 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="4a4b45c6d367cfc3c1eddee294ac11464207002937cae15ad3c2ebe71e70d0019e3d7073b76cd1d38f5de2751d49fc935b0a0becbf2c41f7bdee6231b39216363ed8d2f937dd113905797dc53ad81968c7d81239f15faeea9b491c8eb8009a9d5e13f135a62920cc046deb43b160510690fd2ab30e6efc84844488815c6578b404a42b38264b8a7faa1c18ea1f2889cc06cec109a67bfa17ac86d421f4b558fda53214d93bc1d2c74f6de58e9e489ca41c353e82cd72c4c30cc75454d2ba62c4c5ce3ba12f6a6bcecfc18e9b0448e28ec9921507e32c3a5bac13978599efe6fcf74a0c2f71e7560dead62db944ba0761e8f52105", 0xf4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008916, &(0x7f0000000240)="f9db1f127c12fd04275ab2") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:01:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1000) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:01:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1377.207338][T25443] FAT-fs (loop4): bogus number of reserved sectors [ 1377.251677][T25443] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:01:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_\x00\x00e@\x00en\x00\x90\xb0\x821\x80\xa3\xe8\x00\x00\x00\xbe\xbcvO({o9\x9a\x10\xca\xf3\xad\x818z\xd5B\'(\"~\'\x98\x13J\xe4\x89\xa1f]\x00\xe9\x9b\xe3\xb6\xdc^9KD\xb9\xbf\x8e\f\x95`<\r\'\x94\xa6\x0f\x93Bk\x19\xda\xb5\x0e\x1f\v\x02,\x8f\xb8\x92B\x99\xdf\x84\xac\xaa#\xd0\xfa\x81R\x85\xb5V\x98\xde8=T\xe9\x1b\xbeM\xb3\x06\xa1\xf1\xd6\xec\x9f\xa5\xd5\x7f') 17:01:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x10001) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000040)=0x1) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1377.294115][T25443] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x200000) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:01:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000000c0)={0x5, 0x0, [], {0x0, @bt={0x3, 0x3, 0x1, 0x2, 0x6, 0x8, 0x1000, 0x3, 0x3, 0x4, 0x1ff, 0x81, 0x97, 0x7, 0x2961dc73474f169e}}}) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:01:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r2 = dup3(r0, r0, 0x80000) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1b, 0x10, 0x70bd2d, 0x25dfdbfd, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40088c0) [ 1377.468307][T25660] FAT-fs (loop4): bogus number of reserved sectors [ 1377.495301][T25660] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1377.513020][T25660] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:52 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x6087}, 0x2) 17:01:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x100000000084880, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'vcan0\x00', 0x49}) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x2, 0x1, 0x9, 0xd809}) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:01:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) 17:01:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x40) 17:01:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:01:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x812f, 0x10000) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x20) [ 1387.464119][T25876] FAT-fs (loop4): bogus number of reserved sectors [ 1387.487591][T25876] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1387.505831][T25876] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:52 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x6800}, 0x2) 17:01:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:01:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:01:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "454f81a5b6ff1aebd669988aba412c522f1a84ea3ce4257aa9009cf83044de2d8665836ef0257aae4ccc30e032696c3962aede5790466b0d8ba0485ee5ab764292ff8fefba28c72288a36d9ecd09a328ef91aabebc4bf82a2bf14274fe8b0a445f6092b0c4a0698b4db4e030c991c72c3486ae654a9989aebb3f31bf9afa173540a55ac1"}, 0xfffffff0) 17:01:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000000c0)={0xffffffff, [0x8, 0x7fffffff, 0x1, 0xdd0, 0x7f80000, 0x2b4, 0x4c, 0x4, 0x6, 0x8, 0xffffffffffff0001, 0x2, 0x40, 0x7, 0x80000001, 0x7fffffff, 0x3, 0x80000000, 0x5, 0xfffffffffffffffa, 0x0, 0x8, 0x9, 0xe7e4, 0x2, 0x9, 0x80, 0x8, 0x5, 0x100000000, 0x0, 0x6, 0x80000001, 0x8, 0x4, 0x7, 0x81, 0x1ff, 0x1, 0x8, 0x1ff, 0x8001, 0x7, 0x80, 0x8, 0x1, 0x1, 0x3], 0xf}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="65c7b591059e08631dc98bf8158fb79c675d356a7fac78606bf212d405873c38aa68b61ff2e76fd236657e16c09265929e767da95fc390f9a559fd09f99b27e4641aa8f4cd6ea2f09d5067f367fd41aa1ce714d2feabb076e005468bb41901fa507ff70c6ee7c38564e1ba4357ed8c345e1e1a8faf7bff05a6e47f98832e3cc898cfa2049cef3c2bb6b246ac5ce7b767eafd97a5b6038837900ac168dfa8fc128d4817c21c130892de2a52d694eb223d4fd298ef53bb0f35bc214a5bbe39e634147e61", 0xc3}, {&(0x7f0000000140)="7aa74a2c7ad8", 0x6}], 0x2, 0x6) 17:01:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x900, 0x41) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000000, 0x4000) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x101500) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1000000000000000, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2a, 0x4, 0x0, {0x1, 0x5, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) [ 1387.676270][T26096] FAT-fs (loop4): bogus number of reserved sectors [ 1387.691660][T26096] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:01:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000000)=0x1f, 0x4) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) recvfrom(r0, &(0x7f0000000080)=""/141, 0x8d, 0x2, &(0x7f00000005c0)=@can={0x1d, r2}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) [ 1387.740682][T26096] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:52 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x7fff}], 0x8000, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c7768696e745f6d6f64653d6f66662c6e0b3d261227d80943f4bcae8a976be26f686561702c70726a71756f74613d73656c696e75785e3a2b70726f63405d70707030232c6673796e635f6d6f64653d706f7369782c6e6f666c7573685f6d657267652c646f6e745f686173682c00"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:01:52 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='/dev/md0\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x1, 0x20080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r0, r1, 0x0, 0x9, &(0x7f0000000200)='/dev/md0\x00', r2}, 0x30) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x244100000000) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe(&(0x7f0000000100)) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r4, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:01:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 1387.936342][T26327] FAT-fs (loop4): bogus number of reserved sectors [ 1387.943182][T26327] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1387.952662][T26327] FAT-fs (loop4): Can't find a valid FAT filesystem 17:01:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:01:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="042d3e97d752db1cc1488314df3a01422c2ea9115222dad292be9ba3dfb13472436ca28eb87a2f8d3d979dc91f93a472b7805d3786398b4217ca541a6709f2da797ed2e366d120bf934c5cd06b50759ae563376138447f7c3a7bbbe91369fced80bf61a0fcb9309b10bf3d8bc637d004920e2d4da5aacd226731bc65760c6c35d90ae4a87dc65203b6431a18d658cb9a7ce37bb8ec2a3eb6d9ee4fe50b001a763a8c9edee963b6500be3e200cc4892a4c28d86063fa9a13e1c5b368c0db361efb5ca28398750bafc6c74d4eb3e5722d070c6c1c601f5beb0836d87443085aa31e09f06"], 0x494) 17:02:02 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x6c00}, 0x2) 17:02:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:02:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:02:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 17:02:02 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400000, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000)) ioctl$BLKPG(r0, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="d888b1854dee8553ca476a6203bef40d211b6ce772820d6abadf1a3303089a197e55", 0x22, 0xfffffffffffffff9) keyctl$link(0x8, r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000080)=0xd1da) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000380)={0x1, 0x0, {0xfffffffffffff604, 0x0, 0x5, 0x9}}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000100)="640f01b2f53f3e673e2ef367f467de87c5a57b86f20f300f00d566b99809000066b8ba42322266ba000000000f3066b9800000c00f326635000400000f300fd8cbbaf80c66b846dfbe8f66efbafc0cedf3f20f2023", 0x55}], 0x1, 0x60, &(0x7f0000000200), 0x0) [ 1398.358450][T26741] FAT-fs (loop4): bogus number of reserved sectors [ 1398.382677][T26741] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:02:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x402000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x7fff, 0xfffffffffffffffa, 0x3, @broadcast, 'team_slave_1\x00'}) [ 1398.415088][T26741] FAT-fs (loop4): Can't find a valid FAT filesystem 17:02:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:02:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) write$smack_current(r1, &(0x7f00000000c0)='\x00', 0x1) 17:02:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x10000, 0x400) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000080)=""/208) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:02:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x400, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x20000000, 0xffffffffffffffff, 0x1, 0x3f4, 0x2, 0x8, 0x20, 0xc2, 0xe8}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x10000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/uts\x00') 17:02:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:02:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x305641, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f00000000c0)=0x2) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:13 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x7, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 17:02:13 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x7400}, 0x2) 17:02:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:02:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 17:02:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80400, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:02:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x40000) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f00000000c0)={0x3}) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="2f3ab7a7", 0x4, 0x5c}, {&(0x7f0000000200)="946bd1d661d26bd8a663765ffb6e54708b4a6c2947310e66f04b27729d396d9f89338f27af6aab8250f436ecbd8a5865e0e9e132571dc37cfc11d201b5fa098248e43eb373195065ac35f0ebb2073c584ac234e777cf5190dbd9d623c2def9a4a558a85d12f5b308f04cbdd9c6b519fedf5cbebba60b61b0bc331de0fe05a96832e1a855d0c52b94a1", 0x89, 0xfffffffffffffff8}, {&(0x7f00000002c0)="94df478ef51251f0c4bf53b7c3a998441321", 0x12}], 0x2180041, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="7d0f86a98a0cc502be0c64a7ac2c3ee3", 0x10) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0}) 17:02:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x200, 0x6, 0x2, &(0x7f0000ffe000/0x2000)=nil, 0x7fff}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r2, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000100)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0x7f, 0x8000, 0x4, 0x1, 0x19, 0xffff, 0x4, 0x4, 0x1, 0x4, 0xffffffff, 0x9}) 17:02:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 17:02:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:02:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:02:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x202080, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x100, "ff4e780a6879fe2ad844eb6849d61721c4e2e662d1916e2b9c0747046bcdec0c", 0x7, 0x3f, 0x2, 0x0, 0xfffffffffffffe01, 0xfffffffffffffffc, 0xfa, 0x156, [0x0, 0x7, 0x2, 0x1]}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:02:23 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x7a00}, 0x2) 17:02:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:02:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x7f, 0x2, &(0x7f0000000180)=[{&(0x7f0000000200)="294aa6fdf3ded50fdffa8c2f0abb93d5588a8a9c67379ed82cff633c6326b0ef2ff23473fd8dfed481a7eb35c03ba83e655a36df95e6e20dd28a92c7ff78968ea87951e6a2f553eb2f79b129173fc7dcd4a9bb6d2f12ee3a56565628d89e4d1c67737b93c5eabff77fed0dfa5ed517f700e6f288ca36a5e7e48dcb4d1fb068d5c26353728a04bdb889051bab720208ac7a47b95cb8d7c9a907f6f9b579afa90dafa5bb4f569c3d952afbc8d842a7dd5334727e9f648f68be2b4a9524227d67dcc585643c3b294f6ee4df4c00d2418adc95545f69d3c084cf868ed8d10b8b1dcb80fddb8550bb753cd07a6a99", 0xec}, {&(0x7f0000000140)="75bd4021f632ea5e92f5", 0xa, 0x3}], 0x100244c, &(0x7f0000000300)='vboxnet1-$\x00') r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:23 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x3, 0xad, "4dec9a3b0494a8b6fcca0fd5e3f01e7aa8123af31f0baf1d179434d1f10d902c1600a2f26cc9782e378a6db9b037d55fe1d136036147d17c04a03aa83cc6200158e7252c5ac8f77e3dab9c83a2baf378e7642edcfe0dc2253ef5f390a3f423e9b679ef51986d65f0040cd58665696193808827f72110b33c61e7c179df61d22799d53b9be51344c87663fc8add8bdad680836e5d3885dfdb7b7a0b284832db71fc45e4a56be222e3f893884e2e"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r4 = fcntl$dupfd(r3, 0x406, r1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x80c0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000000)=r3) open_by_handle_at(r3, &(0x7f0000000100)={0x4c, 0x6, "11679a1ffcc4466652a6e98077be124c859eaa08543c593354d4b7a2a495281622a0c2262973220080a1517a2ca9b384ad1b859a160bea1ad753011e81bd48866e4d7048"}, 0x800) 17:02:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xda, 0xfffffffffffffffb, 0x5, 0x9, 0x74, 0xb9c, 0x20, {0x0, @in6={{0xa, 0x4e23, 0x40800, @ipv4={[], [], @loopback}, 0x3}}, 0x7, 0x8, 0x3, 0x7, 0x4f}}, &(0x7f0000000180)=0xb0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000300)=0x1ff) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0xc9, "3cd11ef7d19d47ca38bdb17f6163f77e2ec79bc78273cad0f28b98b9d5b5a0416b213088f04ee2a1e8a4fedd0383bda41006916eb9a8cc1760479ed5e3cb83b397b08a0b19bee59973bbd9570b432eb2877d26a1cf179cb61e547d70ef9cea7e2c8abbcb0ddd5f154fe6712b9c1e196c3b8941629525649ac0aea0c3753f9387607fbe38d96ba795f4ec07586ad9a470547fdc9e88aab288b00a99d362ac8265a737f0f5a72ed3b93253b11fb718ecf5f9bbb12dc373fdd063cc3e9a99e13e0af323206e09c97e42ad"}, &(0x7f00000002c0)=0xd1) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 17:02:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 17:02:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x208800, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xe19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13a6fe1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') write$vhci(r1, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2000a, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000a3}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xffffffffffffff23, r3, 0x304, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x29747a42c2ed23dd}, 0x1, 0x0, 0x0, 0x1ffffffc}, 0x85) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000080)=0x3) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000002c0)={0x6, 0x9, 0x3}) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000200)='bridge_slave_0\x00') fchdir(r1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x800, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x2) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000140)) setxattr$trusted_overlay_redirect(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.redirect\x00', &(0x7f0000000540)='./file0\x00', 0x8, 0x1) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) 17:02:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:02:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 17:02:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001880)={0xa, &(0x7f00000000c0)=""/223, &(0x7f0000001780)=[{0x9, 0x1000, 0x3, &(0x7f0000000200)=""/4096}, {0x5, 0x12, 0x0, &(0x7f0000001200)=""/18}, {0x101, 0xda, 0x6, &(0x7f0000001240)=""/218}, {0xea1, 0x45, 0x7, &(0x7f0000001340)=""/69}, {0x5c2, 0x33, 0xff, &(0x7f00000013c0)=""/51}, {0x9, 0x3e, 0x3, &(0x7f0000001400)=""/62}, {0x1ff, 0xbc, 0x100000001, &(0x7f0000001440)=""/188}, {0xffffffffffffffe0, 0xcf, 0x4, &(0x7f0000001500)=""/207}, {0x9, 0xe9, 0x80000000, &(0x7f0000001600)=""/233}, {0x80, 0x55, 0x9, &(0x7f0000001700)=""/85}]}) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r3, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') epoll_wait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0xfffffffffffffffd) [ 1419.737761][T27956] FAT-fs (loop4): bogus number of reserved sectors [ 1419.776276][T27956] FAT-fs (loop4): Can't find a valid FAT filesystem 17:02:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:02:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101200, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000080)) 17:02:34 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xff0f}, 0x2) 17:02:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000080)=0x80) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x1, 0x7fffffff, 0x5, 0xa44, @dev={[], 0xa}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 17:02:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3, 0x0, 0x3, 0x1}}, 0x2e) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r4 = gettid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x400000, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000100)={r6, r3, 0x87a6}) [ 1429.701714][T28183] FAT-fs (loop4): bogus number of reserved sectors [ 1429.715407][T28183] FAT-fs (loop4): Can't find a valid FAT filesystem 17:02:34 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$TIOCCONS(r0, 0x541d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 17:02:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:02:34 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12030}, 0x2) 17:02:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0xa61749624ce75214) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1003}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x3}}, 0x18) 17:02:34 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12031}, 0x2) [ 1429.957288][T28427] FAT-fs (loop4): bogus number of reserved sectors [ 1429.992509][T28427] FAT-fs (loop4): Can't find a valid FAT filesystem 17:02:34 executing program 5: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 17:02:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 17:02:34 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12032}, 0x2) 17:02:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x1) accept4$rose(r1, &(0x7f0000000040)=@short={0xb, @dev, @rose, 0x1, @default}, &(0x7f0000000080)=0x1c, 0x800) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) [ 1430.346714][T28620] FAT-fs (loop4): bogus number of reserved sectors 17:02:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xece, &(0x7f0000000040)="0adce61a6b296cac1b36c5") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x0}) 17:02:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') gettid() preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:02:35 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12033}, 0x2) 17:02:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x3, 0x100000000}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x40000) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$can_bcm(0x1d, 0x2, 0x2) r3 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xf, r3, 0x200, &(0x7f0000000140)="280cb5597e2b6601cc") syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1430.391353][T28620] FAT-fs (loop4): Can't find a valid FAT filesystem 17:02:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) clone(0x40000000, &(0x7f00000003c0)="459d9449bbc03557b20765f6ededc3289abf40c196e3ffdbe0c3800be90eaf38dfbcf3455bd6483b7da4077b8a0535b0e8a00ed3cb14f37f4234a71971e8ec6c263d7e134bf979c3793c3cd3222866afbd529c27b1dfbf4dcc1efc074a84fdae65c949e2ed264aaca0f777865e262f3162b45c396f35a72f58c55606849b45665706000000a7c1e90000000000000000000000000000009fa028eea2", &(0x7f0000000480), &(0x7f0000000100), &(0x7f0000000240)="ac523c6e11236288b9c599283b4b3b8b134a8180473e01bc37fc3c9f2e28052b0916ce095ca97a4c8dbb45b2ca2a02ad38435aa48afa098f2f48e305858d4c7443e3f6184c5711391c0f35097debefa87256ac22709b58aa12e2603030798a68910c439699239e440586f8c99eba554f4a139343e0405f") syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0xa0, 0x77) getrlimit(0x7, &(0x7f0000000140)) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x63, 0x2) 17:02:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:02:35 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12034}, 0x2) 17:02:35 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x8000000000000, 0xa4002) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000000c0)=0xafa, 0x4) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$BLKPG(r4, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000002c0)) [ 1430.695267][T28842] FAT-fs (loop4): bogus number of reserved sectors [ 1430.721497][T28842] FAT-fs (loop4): Can't find a valid FAT filesystem 17:02:35 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x0, 0x800}) 17:02:35 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 17:02:35 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0) connect$vsock_dgram(r0, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000005c0)={0x0, 0xa7, "cf8e4ee102a38f3c18d348e3934d86f16d0f8edcafd5da5beb1710563253aac8b2783ca216f5cac8d79cbd8f588cfd68455047719f38d37b8fa463cc4c2a58ef8b556e92692d4944864468988ab44686884858910a8e0db72522a46160a4d577a64b59eb767c18aac26861b510b442097938b9f9ed4f1c797719cfba8c398eaeda45a7bcac8df45829d2a2cc964fd8696299ab90744f761a8ea8aed497e3dce8857418aea73aa9"}, &(0x7f0000000000)=0xaf) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000740)={r2, 0xbb, "6442409250f3a5d80481fc01ac7d445bbf05525db97cae81d04b83f8777b4a0c99b992d0b6f89dc1fc3cae79a3a6402d48c1b8defd1abb95ef3da57548381f67e99a7b7be7ea8595130600006c4e58ee99179865c36ae5a271e76411f47a89d48e76cc9696af65131c257344320d6b37209c17fcd5f72c648c39a99e29e03f1054a16a1441db10b65139f3f914e767a0e18ffbf1a88e164e3a604a496c9045fa080dd7ca8947d25f38e373a639aa8d813cbcda8e3bcbb102949500"}, &(0x7f0000000180)=0x2e3) getsockopt$inet_buf(r1, 0x0, 0x3b, &(0x7f0000000300)=""/178, &(0x7f0000000240)=0xb2) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x1}, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r5, 0x77, "62b46b", "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"}}, 0x110) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:02:35 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12035}, 0x2) 17:02:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r2, r0) 17:02:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000300)={{0x400, 0x5}, 0x4}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x204001, 0x100) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000001c0)=0x2, &(0x7f0000000200)=0x2) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)={0x9, 0xf685}) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xa6c, 0x4, 0x101, 0x1, 0x0, 0x5, 0x10000, 0x1, 0x2, 0xaefc, 0x8, 0xffff, 0x7501, 0x81, 0x9, 0x1ff, 0x0, 0x81, 0x6f, 0x1, 0x5, 0x7, 0x100000001, 0x8d, 0x6, 0x2, 0x1, 0x1f, 0x7, 0xfffffffffffffb1b, 0x9c4, 0xfffffffffffffffd, 0x1, 0xc015, 0x7, 0x8, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x8}, 0x9c0, 0xeb6e, 0x2, 0xd, 0x8, 0x7, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0x9) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0xffffffffffffff81, 0x1f, 0x40, 0x9}, {0x7, 0x8819, 0x3, 0x51}, {0x8000, 0xffff, 0x23c4, 0x7}]}) ftruncate(r5, 0x5) 17:02:35 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12036}, 0x2) [ 1430.922800][T28957] FAT-fs (loop4): bogus number of reserved sectors [ 1430.934989][T28957] FAT-fs (loop4): Can't find a valid FAT filesystem 17:02:35 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12037}, 0x2) 17:02:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x0, 0x0}) 17:02:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) 17:02:35 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 17:02:35 executing program 5: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000180)="2e26660f71e0a9640fae553e0f017001650f01cabaf80c66b8f38e558466efbafc0cec0f20e06635400000000f22e066b98e0900000f32f80f08f618", 0x3c}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r3 = dup2(r2, r2) getsockname$tipc(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:02:35 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12038}, 0x2) 17:02:35 executing program 4: request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 17:02:35 executing program 2: socketpair$unix(0x1, 0x80000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') socket$inet6_dccp(0xa, 0x6, 0x0) 17:02:35 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12035}, 0x2) 17:02:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_dgram(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @reserved}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x6, 0x20, 0x1, 0xe2e}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r4, 0x3}, 0x8) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0xffffffff, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x3f, 0x1, 0x5, 0x100000001}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0xf1, 0x80000000, [], &(0x7f0000000040)=0xbdff}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:36 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12039}, 0x2) 17:02:36 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xff0f}, 0x2) 17:02:36 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1203a}, 0x2) 17:02:36 executing program 2: r0 = socket(0x3, 0x8000000004, 0x5) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7af6ca4333accb28a1e54ad2c108425743756e57e325c1b80979d1e5ce5b4b66d052288c5fcc19a25dbb4e389a652f4e74974035b98ff43f888931b2be6799b19eadc11b2bcd9e4d293b4846459e19e93290f7cad04bbfc644523e2343fa1476654bf47daad12ac71341447ed2d47a76173e257e3f813348223cffa3c2742c56091245c7", 0x84, 0xe6cf}, {&(0x7f0000000300)="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", 0x1000, 0xff}], 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f61636c2c6e6f61636c2c6e6f757365725f78617474722c757365725f78617474722c6f626a5f726f6c65392d2e7175626a5f726f6c653d6e732f7069645f0000655ff1034000006e002c00"]) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:02:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0}) 17:02:36 executing program 4: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x6800}, 0x2) 17:02:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x420000, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x1, 0x401}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1000) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000100)=[{&(0x7f00000001c0)="411c601093c835fac4c2c9e97901918d37aca3ad983d7714fdb43aea3fe7ec72378ab611188a152c5cd774cec16bd0ca78e1240f4df98b12672119864a87f8f0a5ea3b62f1e57e9c708bede3a3f48b290eb767854282cfe5ee214771e2dff39d6974d7cffa362692bc8d9c8f3e51ff34e279d2c15518f779f985965f2e034aa4667f4092e6d7e0c35d78eb06f533b21a6fe27a7025fbce35", 0x88, 0x1}, {&(0x7f0000000300)="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", 0x1000, 0x8000}], 0x1000010, &(0x7f0000000140)='+security&\x00') 17:02:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000012d) readv(r0, &(0x7f0000000580), 0x3c1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:36 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1203b}, 0x2) 17:02:36 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x3e00}, 0x2) 17:02:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:36 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1203c}, 0x2) 17:02:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/user\x00') syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x400000, 0x0) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xfff, 0x10000) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 17:02:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000012d) readv(r0, &(0x7f0000000580), 0x3c1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:36 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1203d}, 0x2) 17:02:36 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000380)={0x1, 0x1000, "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"}) pread64(r1, &(0x7f0000000000)=""/93, 0x5d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000013c0)={0x1, 'bridge_slave_1\x00', 0x1}, 0x18) r3 = dup3(r2, r1, 0x80000) accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x3, 0x1, 0x0, 0xf, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffd}, @map={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x4, 0x586f, 0x6, 0xa, 0x8, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x25}, @alu={0x7, 0x3, 0xf, 0xf, 0x4, 0xfffffffffffffffc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x3, 0x1, 0x6, 0xf, 0x40, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x3, 0x7, 0x0, 0x30, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x3f, &(0x7f00000001c0)=""/63, 0x41100, 0x1, [], r4, 0x4}, 0x48) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1000000000000000, 0x8e40) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 17:02:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) ioctl(r0, 0x1000008910, &(0x7f0000000000)="8200000002000000180000") ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x2080, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40003000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1bc, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x3364ef90b86613ad}, 0x0) poll(&(0x7f0000000100)=[{r0, 0x40}, {r0, 0x4}, {r0, 0x2020}, {r0, 0x10}], 0x4, 0x5) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000480)={0xb6, 0x1f, 0x7, 0xfffffffffffffffe, 0x20}) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x8) 17:02:46 executing program 4: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x2000}, 0x2) 17:02:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000012d) readv(r0, &(0x7f0000000580), 0x3c1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) 17:02:46 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1203e}, 0x2) 17:02:46 executing program 2: rmdir(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:47 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1f00}, 0x2) 17:02:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r0}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x1, @bcast, @bpq0='bpq0\x00', 0x31, 'syz0\x00', @bcast, 0x9, 0x4, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x10000) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40800, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="a03bb7c96d62e042ee72a771cef81160801d0cfab91e31dd4cc2b795", 0x1c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000240)) 17:02:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:02:47 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x5, 0x2, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, &(0x7f0000000040)={0x0, 0x20, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_delete(r1) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r2 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x80) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000180)=0x2) 17:02:47 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1203f}, 0x2) 17:02:47 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12040}, 0x2) 17:02:47 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1f00}, 0x2) 17:02:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r2, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r6, 0x501, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4) r7 = fcntl$dupfd(r1, 0xfffffffffffffffd, r4) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYPTR, @ANYBLOB="349bba3c"], @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r6]]) 17:02:56 executing program 4: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x700}, 0x2) 17:02:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:02:56 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1f00}, 0x2) 17:02:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:56 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xf23}, 0x2) 17:02:56 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x500}, 0x2) 17:02:56 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x300}, 0x2) 17:02:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x1f, 0xa10, 0x0, 0x3, 0x7ff, 0x7fff}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = fcntl$getown(r1, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x200000003ff) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:02:56 executing program 3: r0 = getgid() r1 = getgid() getgroups(0x2, &(0x7f0000000580)=[r0, r1]) r2 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() r6 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="040002000000000008000100", @ANYRES32=r4, @ANYBLOB="172f054fdd41d7fd84ef53460dbd5f7ebd5e3d0fcf3034331dea9309353cac08ac979f784f518e539671ba1196a0ad6d8b659d8ba3d362cecaa6fd33af76a03b41717c226e4c372d2cc326911ab8c6515d8a186a0aac01c134c05fd1b885801cbfe68bd5bf7e099f2558e028a7192c508b1795253a68127424569f1e807bdd3e1d359c52afd77e5be19105028c81e031dec74548ccbc7a957f7fe9ce05c5983adf63e0557ac46e00aaecac4208805e4e0ec429", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="10000400000000002000000000000000"], 0x54, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x1) mq_notify(r8, &(0x7f0000000200)={0x0, 0x36, 0x2, @thr={&(0x7f0000000080)="b8d62708a17ae54cba8e0e307d768e2a02c3a9636bdd026a3b386fa5050d9b8476878b289752505b5fd2f797910fbdfb1a100f3e2e0fc3d09f27a07c431b5806433e83e680cb9ccba625913319e8f258fed7429cad16480221bb8e70513915fe46b9a98b770a436e9b0315ab74625dbaff41b88612ae4dc36ad816a8370aa8935d94e2bd580518d27c4c174ca633591915a1e682efa6f128b798829fa376ba5ebf005b71103a3c2b3f092243ef53865be43b9aae8f41c844916c214e5feb0cbbab482da138f14f345b96e31c57c858dbca843c41773cefdd82dfb1b254091a9f287327d5a3731bddd7c013a3", &(0x7f0000000180)="bf67c1c1f851c4dde65e8d612032e2e124aa326c89ec1d12498992086ee67948b3871024d3d25653fbc36e958335ff00d0ce02e53a000c4d3f46546f4aacab7cdc6af0681f68ad8f613fa908a887f9efe4"}}) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r9, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) 17:02:57 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12041}, 0x2) 17:02:57 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x300}, 0x2) 17:02:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xb3) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00c\xf4.\x87\xc9\xabW\x83\x1c-T\xad\xbd\xd6mZ\xd5\x00\xe4\x05\x93\xa6\xdb\a\xe4\xc2\xa9\x94~ \x1b\xabB\x99\x14 ~\xe27\xafr\xfc\x9c\xe0Q\r;\x943_\xa2A\x04\xc5\x95\b\xc8\x8aA\a#\x9b\x1c\xf7;K\xe6\x00u\x8c\xa9\xf5n)N\x02\xd2\xa2~\xb1\x16!{\x7f\xec\xb3;\x05,\xef\xd2\x1fF\x1bW\x82\xc2>\xbd\aJ\xfd\tM`?\xa68e]\xaf`+R\xad\xfb\x9bL;d\xb5\x1b\x87\xe58\xfc\x8a(\x1ai\x85\b\x1c\xf7S6\xb5\b\xcf\xa6\xf8\xcb\xffW+oH\xe3\xb5\x93:\x1d\xe3t\x19l\xcc$\xc9T9L;\x85\xf7\x9aj\r\xf2cZ\x01\x9fF-R\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\xe0Uq\x84\x01\xf1\xe2;T\xa7|\x9a\x10E') ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x7ff, 0x7a, 0xc2}) 17:03:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="286364bfc662bd2832604703fa3e7cf8"}, 0x1c) 17:03:06 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x300}, 0x2) 17:03:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3f, 0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 17:03:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0xfffffffffffffff7}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) 17:03:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x10000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x4) 17:03:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000340), 0x0, 0x44, 0x0, 0x0) 17:03:07 executing program 4: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/134, 0x86}], 0x5, &(0x7f0000000640)=""/171, 0xab}, 0xfffffffffffffff7}, {{&(0x7f0000000700)=@can, 0x80, &(0x7f0000000880)=[{0x0}], 0x1, &(0x7f00000008c0)=""/225, 0xe1}, 0x3}, {{&(0x7f00000009c0)=@nl, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/254, 0xfe}], 0x1, &(0x7f0000000b80)=""/201, 0xc9}, 0x400}, {{&(0x7f0000000c80)=@ax25={{0x3, @null}, [@bcast, @rose, @remote, @remote, @default, @rose, @bcast, @null]}, 0x80, 0x0, 0x0, &(0x7f00000010c0)=""/182, 0xb6}, 0x800}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002600)=""/211, 0xd3}], 0x1, &(0x7f0000003740)=""/27, 0x1b}}], 0x5, 0x100, &(0x7f0000003b00)={0x0, 0x989680}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) 17:03:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) 17:03:08 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12042}, 0x2) 17:03:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@ax25={{0x3, @bcast}, [@null, @remote, @default, @remote, @rose, @bcast, @remote, @netrom]}, &(0x7f0000000040)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x100}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={r2, 0x7af7, 0x0, 0xfff}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x50000, 0x0) r4 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000880)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) r6 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000680), 0x4) keyctl$dh_compute(0x17, &(0x7f0000000300)={r4, r5}, 0x0, 0x0, &(0x7f0000000200)={0x0}) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000000)) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000440)='nr0\x00'}) sysinfo(&(0x7f00000007c0)=""/154) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f00000002c0)={0x3f, @multicast1, 0x4e23, 0x0, 'rr\x00', 0xa, 0x10001}, 0x2c) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r2, 0x2000000a}, 0xfffffffffffffe89) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) gettid() 17:03:08 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x480200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x3}) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:08 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x131862a6) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xfb8, 0x4) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 17:03:08 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x10, "3becc50bf99d9ae8cf0a44060f03aa59"}, 0x0) 17:03:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:03:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0adc1f123c123f319bc070") r1 = socket(0x40000000000010, 0x802, 0x0) write(r1, &(0x7f0000000080)="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", 0xfc) 17:03:08 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xff, 0x80200) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x9, 0x5, 0x2, 0x100000000}, 0x6) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x208001, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x17) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0x0, @initdev={0xac, 0x1e, 0x25d4, 0x0}, 0x4e24, 0x3, 'rr\x00', 0x1, 0x5, 0x57}, {@multicast1, 0x4e22, 0xba95b7c45430017d, 0x0, 0x5, 0x101}}, 0x44) 17:03:08 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12043}, 0x2) 17:03:08 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000740)='bcsf0\x00') socket$inet(0x2, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000b00)='bcsf0\x00\x00\x00\x00\x00\x00h\x11\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) socket(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f00000002c0), 0x208}}, {{&(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x5b, 0x0, 0x0, 0x0, 0x1d8}}], 0x3df, 0x0, 0x0) 17:03:08 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12044}, 0x2) 17:03:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x80000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$sndmidi(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0), 0x0) 17:03:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x7ffffffffc, 0x4) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x0, 0x0, 0xffffffffffffff06) getsockopt$inet_tcp_int(r1, 0x6, 0x1c, 0x0, &(0x7f0000000340)) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0), 0x2c5) 17:03:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:08 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TCSBRK(r1, 0x5409, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x1, 0x2, 0x0, 0x3, 0x10000, 0x10000, 0x92, 0x0, 0xc3c, 0x3, 0x8, 0xfff, 0x1}, {0x4, 0x2, 0x2, 0x5, 0xff, 0x8, 0x2, 0x5, 0x2, 0x81, 0x0, 0x5, 0xbf1}, {0xb0c, 0xb931, 0x0, 0x80000001, 0xc5, 0x4, 0x8, 0x6, 0xa66, 0x9, 0x10000, 0x4b, 0x2}], 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x6e, 0x0, &(0x7f0000000080)="a01b9da5000cbb156bc9c3567e94e8c87f315ab5a3ecadf10d5fce0e1f8e3d64666071edb3e7c05d69687250abe4d957e6f2cf2e96f39928be36744ecde0e35b3b720f2c145a34b08abbda64fe2eb23e3f88d7186a04b007b371fee4e5782b755e0bdae50785079eec5431b93959"}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 17:03:08 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xf9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 17:03:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r1, 0xf, 0x1}, 0x10) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x2000000009, 0x1011785d, 0x8, 0xfffffffffffffffb, 0x1, 0x4}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000000)=[{}], 0x1) 17:03:08 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) clone(0x1100002122001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffffffffffffffb}]}) 17:03:08 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12045}, 0x2) 17:03:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3199c070") r1 = socket$inet(0x10, 0x3, 0xc) getpid() sendmsg(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2400000002011f001cfffd946fa283005b580a000900020008fffffffffff4000404ff7e", 0x24}], 0x1}, 0x0) 17:03:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x100) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}], 0x2, 0x0, &(0x7f0000000080)={0x6}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) fstatfs(r3, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000400)="216658fe98be55dd1476177072cd711a74ff50e6d408a240c6b27fa48e5caaea103785ddfe98324e339e2e2edb6655d5a24ec20b36873e5bc64e6284ca9fe86e84c10920373af755c17c071660c043491686202df4adab5ec632f721948a3a4ff851379b18b0a46b2afb75c4faa2967e5cd9bf093d02136feb039c51acfc361ff808f3104a33ab2364766f254159fe4ac334797d972c74d41d0f7e3b5a672bd7cf8ccb5c762b4445d3dcf00720589a273fba8bd271a0b572089b6e6f3d0da0b66c9d83202cb92c1253e4cd4a359b73a21c6beb2e1bb9"}, 0x10) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 17:03:08 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12046}, 0x2) 17:03:08 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x810003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1464.337695][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1464.372669][T30780] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 17:03:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 17:03:09 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12047}, 0x2) 17:03:09 executing program 3: msgrcv(0x0, &(0x7f0000000040)={0x0, ""/91}, 0x63, 0xfffffffffffffffc, 0x0) [ 1464.452591][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:03:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f33"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1464.505497][T30959] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 17:03:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001880)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:03:09 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12048}, 0x2) 17:03:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3199c070") r1 = socket$inet(0x10, 0x3, 0xc) getpid() sendmsg(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2400000002011f001cfffd946fa283005b580a000900020008fffffffffff4000404ff7e", 0x24}], 0x1}, 0x0) 17:03:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 1464.766680][T31054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:03:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, &(0x7f0000000140), 0x0, 0x0) [ 1464.834904][T31054] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 17:03:09 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x12049}, 0x2) 17:03:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:09 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1204a}, 0x2) 17:03:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x57, 0x80000000800, 0x2, 0x100000000, 0xdab1]}, 0xe) semop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffffff7, 0x800}], 0x1) 17:03:09 executing program 5: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0xfffffffffffffec7) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_ROPEN(r1, 0x0, 0x0) 17:03:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:03:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:10 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1204b}, 0x2) 17:03:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x42402) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:10 executing program 1: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000440)='./file0\x00', 0x2) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) 17:03:10 executing program 4: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) 17:03:10 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000440)='./file0\x00', 0x2) creat(0x0, 0x1) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'user.', 'vboxnet1\x00'}, &(0x7f00000002c0)=""/179, 0xb3) 17:03:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1ff, 0x400800) ioctl$TIOCCONS(r1, 0x541d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:10 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1204c}, 0x2) 17:03:10 executing program 1: 17:03:10 executing program 4: 17:03:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) 17:03:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:10 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1000000}, 0x2) 17:03:10 executing program 4: 17:03:10 executing program 1: 17:03:10 executing program 5: 17:03:10 executing program 4: 17:03:10 executing program 4: 17:03:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='&ppp0\x00', 0xffffffffffffffff}, 0x30) ptrace$getsig(0x4202, r1, 0x5, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:10 executing program 1: 17:03:10 executing program 5: 17:03:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:10 executing program 5: 17:03:20 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x2000000}, 0x2) 17:03:20 executing program 1: 17:03:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x42000, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:20 executing program 4: 17:03:20 executing program 5: 17:03:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:21 executing program 5: 17:03:21 executing program 4: 17:03:21 executing program 1: 17:03:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:21 executing program 4: 17:03:31 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x2040000}, 0x2) 17:03:31 executing program 1: 17:03:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$nbd(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 17:03:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:31 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 17:03:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x313400, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x2, [0x80, 0x80000001]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e22, @rand_addr=0x4}}, 0x1, 0x0, 0x0, 0x1, 0x8a}, 0x98) 17:03:31 executing program 1: writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_0\x00'}, 0xfffffffffffffebd) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 17:03:31 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) 17:03:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0xe6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RCLUNK(r2, &(0x7f0000000280)={0x7}, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) execveat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000240)='/dev/net/tun\x00', &(0x7f0000000340)='[loselinuxloproc*vboxnet1-em0keyring-wlan0ppp1nodev{keyring!!-selfsystemtrustedem1\'\x00', &(0x7f00000003c0)='/dev/net/tun\x00', &(0x7f0000000400)=']}\x00,\x00'], &(0x7f0000000640)=[&(0x7f0000000480)='(}\x00', 0x0, &(0x7f0000000500)='/dev/net/tun\x00', &(0x7f0000000540)=']\xed([md5sum\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='[$\x00', &(0x7f0000000600)=']/\x00'], 0x1100) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x23e2bc60bfa40036}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000740)={0xb2, &(0x7f0000000680)=""/178}) 17:03:31 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0xe0, 0x100, 0x6, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0), 0x0, 0x3}, 0x20) [ 1486.982592][ T27] audit: type=1804 audit(1551978211.555:47): pid=31951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir679695522/syzkaller.CiJYUe/2344/file0/file0" dev="loop4" ino=127 res=1 [ 1487.017905][ T27] audit: type=1804 audit(1551978211.555:48): pid=31825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir679695522/syzkaller.CiJYUe/2344/file0/file0" dev="loop4" ino=127 res=1 [ 1487.313046][ T7867] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1487.321862][ T7867] FAT-fs (loop4): Filesystem has been set read-only 17:03:41 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x3000000}, 0x2) 17:03:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:41 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:41 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x3e}, 0x2) 17:03:41 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 17:03:41 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:41 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 17:03:41 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xa}, 0x2) 17:03:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1a1200, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0)=0x1, 0x4) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') ioctl$int_out(r3, 0x2, &(0x7f0000000100)) r4 = dup2(r0, r0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xffff, @local, 0x3}, 0x1c) 17:03:41 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xffffffffffffffff}, 0x2) 17:03:41 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:51 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x4000000}, 0x2) 17:03:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:51 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 17:03:51 executing program 2: syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8eb, 0x6, &(0x7f0000000540)=[{&(0x7f0000000100)="761c9434ba7fbdc149200fa89d4caca2d43ab0da924ed4dbe5da245ad54464238f00578f1f823f74d57e8c4df4cf45e2c1a258542e24dfa3784bd1bfc41057bc7a28714d4a8dcb00c1db12ccf688e14726521435cb893f0dd87b806fabd5f5171cec325bedd94cf3b1d559fafd82a4039f4c96d39f0106b770b56d22dfe8", 0x7e, 0x2}, {&(0x7f00000001c0)="5789a1263c2f0bb3a309bb0c0e91e657ce11956cfc97748b3659e430c9e66eaaa47ce2429de87f9645473df5fab9bcc1b46af692d406dd101a4983276c16efce3f47a0d6f618a0cb28cecc082f2ec27a1525f0f3b5c52f362e2741a96294e8027dcae9f58ecd0091942769c7648c6f770bd652a709533a745c966eaa3a95f59582f6cbf26fa6f4e88cabbff66b10f9bf2c921c432a", 0x95, 0x5}, {&(0x7f0000000300)="7428363ce1ed0e54b99736e9e8c077cef3eb770cedd1e4da5f85e6b6286d00de49b803727c604a4eb455da40fcef0fd9a4b140cefa20043283f118d10843bf948b7555d829a63ba88ba4616be4b68d5e8731ff1bcde4d26dd46e6c4d11cdbd56284fae61818a95169b1ed4b5e8337c3e26d0251e16ef44f8e3e8e5988641a06b1c29ae7c49fc0f9df31bfa740fa12161343d8860dc821a7f02032f72a32142ea5874d24dab8857c07dd5eee30c2c", 0xae, 0xfffffffffffff800}, {&(0x7f00000003c0)="c274d52175398fc008ae0591e3511584704276732f55f0b764036ddc12867b28b8681dac39e17bc79d2460f0db7450f74d9c7a31ab69e4595044da6236597a65b516fdb88c58d7b3d7cef2ddfecebdaaab2d4c063215d2ccfa54c9ee6af91b76cb2650e431fed64d5c9c4e237a08246eb0c2b7f5d9ba9a1d644e9ae8d28ecd04ceaf6ac1b87b652c6dd96cc08cbb6925422b8e647daa17fa446607a3ad048c15cd", 0xa1, 0x3}, {&(0x7f0000000480)="b51651825b41ba50fa21623b92f48e60ae7c7dd2402402e1e75ae2e40da4aea5b0731bb3ea17b11f0aafde6d7ace68f37f52f438bb56d58b1d63c7d06a27bd0d93902a61add034f0d8fc01b216a7c08f802c14d45462f90d2e9fb4d745c153a429c657ff1e998ab1d1ce28782b30459d51ef05d3a378be111be4cdaccc1485ba9dd3ad1159f4c9181037ff63f3", 0x8d, 0x9}, {&(0x7f0000000280)="5bd10725fd2bad957a2e91516f3f131aaad72f717e", 0x15, 0xb222}], 0x2020000, &(0x7f0000000600)='/dev/qat_adf_ctl\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x208001, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:03:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x800, 0x2) getpeername(r1, &(0x7f0000000280)=@ax25={{0x3, @bcast}, [@null, @netrom, @bcast, @bcast, @rose, @rose, @null, @bcast]}, &(0x7f0000000300)=0x80) prctl$PR_SET_SECUREBITS(0x1c, 0x8) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="57e66fbc75d56b4a12ae08b14684ee2d16557ec4739a5a63c708bc402d0ab33a1b34d795f48345ae57ed1bd5862d986728ce846f0a38fbf23bc9778ab990c6ef3efb183d94303c732af96f8c42c0777352c5a5a023baf962b8e3fa95407cfa6f0083b8df7f396a7a3870293aee303f02a53cf0d60c806deac8cd32e358270e16c5289e5bc9f3ad51d13d3cea3b07f98b37f6aa759a161a8eb9ee0e73b9f977cdc845c7c52d88acf50634867cc9ce322f5d15b2adee6a8b255dffac2705", 0xbd}, {&(0x7f0000000340)="c298681b3560f9519c2683d25379aac8098313e2f06c748d8df572be6487f0b61ed7ffc98e61a98b9b6d64167dbf867a11", 0x31}, {&(0x7f00000014c0)="5da183c5a08058a263298ae2bf8eaf8cb82bd756cf93e43f025e61f61462ed6ee23a4a37199d933f2ef177a409f900420450974b04c4c4b2cd839270f4af2154f480d69073e776220a9fa0a8165d44e2e99be72ae0eade87", 0x58}, {&(0x7f0000000380)="3586d9937f2ae47ef7b2f8793ba0cbd0ef09ecbbc05972222cee46b0", 0x1c}, {&(0x7f0000001540)="e6ae10a4d89b3c8a07f5139df3dc38e8c89fb416563469195153f671", 0x1c}, {&(0x7f0000001580)="d6db644dd840427820c974bc1061ae605739552744b1cdf400dd97cb22434e3a320c3a8eb5eca0e1199932448f2f6fd4c638dcf55c68aeb596b502389a09dec422c9736cd68ccceddb07a09c002140cbce61dab94716ffa257bc9a108801878824a10e7e7234fa29e6f92e2f88ad52116d2868777849015b7fb275a3c152433fc3a6c4f6a59703099bb5831db13b9437f2b333a4501177f04b14753c71968d1321782d703a4a903b43c4143b38085ea1909b79d1b6c591855196d96c7c2b363835a109", 0xc3}], 0x7, &(0x7f0000001700)=[@assoc={0x18, 0x117, 0x4, 0x56}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x110, 0x117, 0x2, 0xf5, "950955952e91a5baaabfc08ff9e74587b02f5ab3d5ea34aa87de938e5602e3e73acd1f82395fe32e727a0ad14ff16d3885616d640b8c1d6efbfece89c519606615d472b494f36d2c9ca46fd7cb8c1acde5d487ed62957bc6b883ca34a10cbd47956bda4b93d2a26eca1d9f14c8de18e532742f23817dcf6b7e6206d3388f9c0a3255bf9b2cd8ded8eb5c47c45a98d064bdb116bce676891ffbbb81fff2695345386183d5dbff62b5047620449d867d2a26386be6a510744fe857a391f5685d5ec0cd6303ec51a9a1838e0de2babdb7b83301e465d9a26aaf30fa1503d797046f03d8f2e5cf5f81a04e861d280aac8fbe0e23330916"}, @op={0x18}], 0x158, 0x80}, 0x4000000) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000240)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x400, 0x10200) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001900)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r4, 0x1}, 0x8) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000180)={@empty, @multicast2}, &(0x7f00000001c0)=0x8) 17:03:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:51 executing program 2: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000100)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x521000, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8225, 0x10000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sockstat6\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:03:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:51 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 17:03:52 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:03:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) r3 = accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711}, 0x10, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000040)={0x80000001, 0x90a, 0xc00000, 'queue0\x00', 0x1}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x40000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000@0160000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',default_permissions,blksize=0x0000000000001000,max_read=0x000000000000e8c3,max_read=0x0000000000003f0d,func=FILE_CHECK,subj_type=cpuset(,audit,func=MMAP_CHECK,fowner<', @ANYRESDEC=r6, @ANYBLOB=',euid>', @ANYRESDEC=r7, @ANYBLOB=',\x00']) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r2, 0x0, 0x7, &(0x7f0000000600)='queue0\x00'}, 0x30) r9 = fcntl$getown(r3, 0x9) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r1, &(0x7f0000000680)={r2, r3, 0x6}) socket$bt_hidp(0x1f, 0x3, 0x6) 17:04:02 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x5000000}, 0x2) 17:04:02 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[]}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='#(\\\\em1\x00', 0xffffffffffffffff}, 0x30) setpgid(r1, r2) 17:04:02 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:02 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:04:02 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000180), 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x4008000, 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000300)=[0x3, 0xb]) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0xa, 0x80000000, 0x6, 0xea}}) getsockopt$sock_buf(r2, 0x1, 0x40, &(0x7f00000002c0)=""/60, &(0x7f0000000180)=0x3c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d}, {0x2, 0x4e23}, {0x2, 0x4e1d, @multicast1}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, 0x0, 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @broadcast}, 0xfd, 0x6, 0x20, 0x40, 0xfffffffd}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r8, 0x8912, &(0x7f0000000580)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0xfffffffffffffe8f) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1d) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000440)=0x28e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000700)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r9, 0xe, r5, 0x2) fcntl$dupfd(r7, 0x406, r6) 17:04:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:02 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[]}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) [ 1518.044128][T32235] IPVS: length: 654 != 8 17:04:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pmd_\x00\x00e_\xf1\x03@\x00en\x00kX\xbb\xba\xcf\xa4\x18)\x8f\x17\x82\x92\x1a\xa8V\xd8\xc8\xf7\xe6\xde\x1a^\x97M\x8c\xde\x11\xc4ki\x9d\xfe\xe3\xbdDO\x16\xc0\xd5p\xc2)x\xd2\x96\x0f\x0f\xc1\x10\xf4,\xa8f\xf1\xa7\xcb\x82\x8b5\xce\x03}\xafJ\x0e\xe4\xe86G\x85*\x81\xc2\x85%\x1e\xe1\xf2b+\x03783\"b\xd0Wv\xef$\xe2\xf4\x9b\'wl\xfd\xea Jk\xf6\xa6p\xb6\x12\xa2a\xf8\xab\x18c\x92\t\xd0x_\t=') [ 1518.108980][T32246] IPVS: length: 654 != 8 17:04:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x02', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:02 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[]}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x244000, 0x140) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffd, 0x14, 0xa995, @buffer={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000140)="905ff95d36a8d3baefff1d8663d1f8a20157de77", &(0x7f0000000240)=""/103, 0x3, 0x4, 0x2, &(0x7f00000001c0)}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x41fffd, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x2) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @multicast1, 0x0, 0x2, [@broadcast, @local]}, 0x18) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0x8) ioctl$void(r0, 0x5451) 17:04:13 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x6000000}, 0x2) 17:04:13 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000180), 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x4008000, 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000300)=[0x3, 0xb]) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0xa, 0x80000000, 0x6, 0xea}}) getsockopt$sock_buf(r2, 0x1, 0x40, &(0x7f00000002c0)=""/60, &(0x7f0000000180)=0x3c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d}, {0x2, 0x4e23}, {0x2, 0x4e1d, @multicast1}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, 0x0, 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @broadcast}, 0xfd, 0x6, 0x20, 0x40, 0xfffffffd}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r8, 0x8912, &(0x7f0000000580)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0xfffffffffffffe8f) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1d) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000440)=0x28e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000700)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r9, 0xe, r5, 0x2) fcntl$dupfd(r7, 0x406, r6) 17:04:13 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) arch_prctl$ARCH_GET_CPUID(0x1011) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[], 0x4000) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000100)) 17:04:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x04', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:04:13 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:13 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TIOCSTI(r0, 0x5412, 0x3) socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') [ 1528.951455][T32370] IPVS: length: 654 != 8 17:04:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x05', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:13 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:13 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x100000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 17:04:13 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000180), 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x4008000, 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000300)=[0x3, 0xb]) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0xa, 0x80000000, 0x6, 0xea}}) getsockopt$sock_buf(r2, 0x1, 0x40, &(0x7f00000002c0)=""/60, &(0x7f0000000180)=0x3c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d}, {0x2, 0x4e23}, {0x2, 0x4e1d, @multicast1}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, 0x0, 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @broadcast}, 0xfd, 0x6, 0x20, 0x40, 0xfffffffd}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r8, 0x8912, &(0x7f0000000580)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0xfffffffffffffe8f) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1d) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000440)=0x28e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000700)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r9, 0xe, r5, 0x2) fcntl$dupfd(r7, 0x406, r6) [ 1529.169943][T32501] IPVS: length: 654 != 8 17:04:23 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x7000000}, 0x2) 17:04:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000040)="e33e93e260f372dbf4a8aa70ef73497534e54262266365df433c2e2b981c45aaead8eafad43b6013661754e95644127e00b3efa7e8665b4f973dcbab1db6e02c7a6e963243fc241c", 0x48) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0x1) 17:04:23 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bf230000000000000703000020fedfff7a0af0fff8ffffff79a4f0ff00000000b7060000fd17d1fe2d6405000000000065040400010000000704000000000000b70400000000000c6a0a00fe00000000850000005cf00000b7000000000000009500000000000001"], 0x0}, 0x48) 17:04:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x3}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:04:23 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x7, 0x74, &(0x7f0000000040)="72e02ee5191cf68157a8d4a9bb22a1d3fc1038df30e67549126517adf1e49aec1e70a1551b12ca79e767d21e95bf3b808951bbcd52e1a037ae7ffc0ba97c3ddc4dcb33d2721ece3eb9314e6f107a054d827814f657422aaf21178c74a2d399b800fa11abfcf921449fb775f33b1944d928020af7", 0x2, 0x4, 0x7ff, 0xffffffff8585afcc, 0x0, 0x1, 0x1000000000, 'syz0\x00'}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x200000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e22, 0x20, @remote, 0x80}, {0xa, 0x4e22, 0x81, @ipv4={[], [], @multicast2}, 0x7}, 0x8, [0x3, 0x65, 0x6, 0x2, 0xfffffffffffffffd, 0x4, 0xd46f, 0x3]}, 0x5c) 17:04:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @dev}, 0x10) 17:04:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:04:23 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) [ 1539.331487][T32642] bridge0: port 1(bridge_slave_0) entered disabled state 17:04:33 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x8000000}, 0x2) 17:04:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x1, 0x2, 0x5, 0x7f, 0x0, "96fac8c22d7c4e30626267929866e4eb34384ba39337a92b2b6cc357eae5ecd1b888a0a5eae62958a72e05cb89e9be761eea2365fb912d33475d73f9d3a170", 0x2c}, 0x60) truncate(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000000)="98f7283076dcf53b4f750eba6a23ff9d8b14e0c9bb9c800ca812db71ee9435e3125e7366b36f3a1f3a") 17:04:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:33 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:33 executing program 1: r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment, 0x8) write$binfmt_aout(r0, 0x0, 0x0) 17:04:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x8}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:04:34 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:34 executing program 1: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xfffffffffffffffa, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 17:04:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:34 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc6, &(0x7f0000000040)) 17:04:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x9f, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x7ff}, 0x1c) 17:04:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x400003, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0xf, @sliced={0x6, [0xffffffff, 0x8, 0x6e65, 0x1, 0x9, 0x8000, 0x6, 0x43c7bf77, 0x2, 0x1e4, 0x6, 0x800, 0x3ff, 0x80, 0x2820, 0x3, 0x80000001, 0x1ff, 0x8, 0x3, 0x5, 0x3, 0x9, 0x7f, 0x7ff, 0x3, 0x6, 0x10001, 0x2, 0x6, 0x2, 0xb7, 0x3f, 0x378, 0x7, 0x1, 0x4, 0x4, 0x4d58, 0xb800000000000, 0x1, 0x7ff, 0x8, 0xffffffff00000001, 0x100000001, 0x531f, 0x3440000000000, 0x2], 0xd6}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xf97) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:04:44 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xa000000}, 0x2) 17:04:44 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)) 17:04:44 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000002600)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000002640)=0x6, &(0x7f0000002680)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:04:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) 17:04:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x64}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:04:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xffff0020, 0x1000000000000000, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 17:04:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xdb) listxattr(&(0x7f0000001200)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000011c0)=""/15, 0xf) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:04:44 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)) 17:04:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\xff', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:45 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:04:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x1000000001ffffe) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shutdown(r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:04:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0xffffffffffff05a9) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2400, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000080)={0x1, 0x7f, 0x1}) 17:04:55 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)) 17:04:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\xff', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:55 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x10000000}, 0x2) 17:04:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/134, 0x86}], 0x6, &(0x7f0000000640)=""/171, 0xab}, 0xfffffffffffffff7}, {{&(0x7f0000000700)=@can, 0x80, &(0x7f0000000880)=[{0x0}], 0x1, &(0x7f00000008c0)=""/225, 0xe1}, 0x3}, {{&(0x7f00000009c0)=@nl, 0x80, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x400}, {{&(0x7f0000000c80)=@ax25={{0x3, @null}, [@bcast, @rose, @remote, @remote, @default, @rose, @bcast, @null]}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d00)=""/42, 0x2a}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000800)=""/10, 0xa}, {&(0x7f0000000e40)=""/5, 0x5}, {&(0x7f0000000e80)=""/220, 0xdc}, {&(0x7f0000000f80)=""/154, 0x9a}], 0x7, &(0x7f00000010c0)=""/182, 0xb6}, 0x800}, {{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f0000001380)=""/86, 0x56}, {&(0x7f0000001400)=""/228, 0xe4}], 0x4, &(0x7f0000001580)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1, &(0x7f0000003740)=""/27, 0x1b}, 0xd3f7}], 0x6, 0x100, &(0x7f0000003b00)={0x0, 0x989680}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) 17:04:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x300}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:04:55 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, 0x0) 17:04:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss={0x2, 0x2}, @mss], 0x3) 17:04:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\xff', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:55 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, 0x0) 17:04:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:04:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\xfc', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:04:55 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, 0x0) 17:04:55 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000440)='./file0\x00', 0x2) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') 17:04:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:04:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 17:05:05 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1f000000}, 0x2) 17:05:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\xf6', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0xfffffffffffffffe, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000001240)=""/4096, 0x1000) 17:05:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x5f9}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:05:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000040)={0x1}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/67) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) 17:05:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, r0}, 0x0, 0x0, 0x0) 17:05:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x1) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0x0, 0x8, {0xffffffffffffc6e2}}, 0x18) close(r0) 17:05:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="c7", 0x1}], 0x1}], 0x1, 0x0) 17:05:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\xfe', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000040)=""/134, &(0x7f0000000100)=""/71, &(0x7f00000001c0)=""/158, 0x7002}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:05:06 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff89, 0x8, 0x5, [@loopback]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 17:05:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)={&(0x7f0000000140)='./file0\x00', r1}, 0x10) syz_open_dev$loop(0x0, 0x0, 0x0) sysinfo(0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) fsetxattr(r3, &(0x7f00000003c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='TIPC\x00', 0x5, 0x2) socketpair(0x5, 0xf, 0x4, &(0x7f0000000300)) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) write$cgroup_subtree(r4, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) write$FUSE_LK(r1, &(0x7f0000000080)={0x28, 0x0, 0x8, {{0x1, 0x5, 0x1}}}, 0x28) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000480)=0x60, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 17:05:16 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x20000000}, 0x2) 17:05:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x401, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000340)=0x3, 0x4) fgetxattr(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7365637d726974792e5c25776c616e30232a7365637572697579246574683176626f786e6574302b74727573746564736563757269747900e881682f1367e28b506655cad5016dff41b744ea3983c50300000000000000930568349a576d2ca6b51d1fefd0871336161adab8aeef91ddf4a9ceafe755a4c5661ccb20c663401810bbba9ca1ecabe3b02558f947ded35389567fd53228376b4e30761541dd5a6f8f06cbb4a08cd4d284921f96b81db9aec5e1493172e5e6516c367def401d01672c4435d97a34f50151c2626b43b3e5e24c4aaef2817c27781d57c8599aa3530bd0c3b21c"], &(0x7f00000000c0)=""/83, 0x53) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000140)={0x200, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:05:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000001240)=""/4096, 0x1000) 17:05:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x1ff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpgid(0x0) ptrace$getenv(0x4201, r1, 0x3ff, &(0x7f0000000140)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000580)={@dev, 0x0}, &(0x7f0000000600)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2bf4, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffec}]}, &(0x7f0000000100)='GPL\x00', 0x100000000, 0xd2, &(0x7f0000000240)=""/210, 0x41000, 0x1, [], r2, 0x5}, 0x48) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:05:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x2000}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:05:16 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x2, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x105) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x49, 0x416280) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/221, &(0x7f0000000140)=0xdd) creat(&(0x7f0000000340)='./file0\x00', 0x40) 17:05:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) 17:05:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:16 executing program 3: r0 = socket(0x10, 0x80002, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="a2e7c993d76a9117e392c86b2050e7c0cef794a0f91b6bd2a8cad85755a3e8a27e4944ed51969830958edac087dd0e9e1ccc2fa01832f402d56e1b31604648b2e010fc4c19e3d54e27cac4ee49bdade0db9e501fadf761746e974cad19d624d5c7cd3532c9fb35057aaeec0a3cc556ba4b892a048540fbcd515e51dd7045e1de7aa23d8a01829948609a4180fe1a26d175e28fba3c877c6df19751ba5332d86b59f7753457a713cd4e5b1a252b628d8f97223c6463e755ee755b68a3f8f75c4ea4dfd03af66202dd5b5d5eb7a601", 0xce, 0x0, 0x0, 0x0) 17:05:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x2c7) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], []]}, 0x378) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280)=0xda9, 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)="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", 0x506}], 0x1) 17:05:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x406, r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:05:26 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x230f0000}, 0x2) 17:05:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0xff, 0x6, 0x4f8f, 0x7, 0xa, 0x9, 0x85, 0x80000000, 0x100000000, 0x3ff, 0xf26b, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:05:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:05:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r1) 17:05:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x6400}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:05:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x200000) ioctl$TCSBRKP(r1, 0x5425, 0x200) 17:05:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) 17:05:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/244, 0x4}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:05:26 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x40000000005c3400) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7fff, 0x6, 0x1ff, 0x5, 0x4}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r3 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000380)=r3) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f0000000300)=""/120, 0x78}], 0x3, 0x0) 17:05:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:36 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x30200100}, 0x2) 17:05:36 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x664a) close(0xffffffffffffffff) 17:05:36 executing program 1: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000300)="0adc1f123c123f3188b070") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000011000/0x3000)=nil, 0x2000}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x68) 17:05:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) 17:05:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0xf905}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:05:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:05:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 17:05:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:36 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x39, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:05:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:36 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x10001, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') 17:05:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 17:05:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r1, r1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x000\n\x96i\x06\xea\xc4}#\x03\xb7\xf3\x81\xe4$\xca\xf0z\x0f\x19Y\xb9\xd6\xcf=\xa4:h\x8a\xf9\x14\x82=\xe0\xaa;\xc00lY\xef\x9a< \x8f\x81W\xa8\\Z\xcd\x1cF\xef*\x95\x90?\xbb\xf5AL\x1b8\xf9qi\xe6\x8e\xb7.\xf7\xdc\x9c\xf0\x93E\xe2e\x16\xec\x1e\vJ+\x06\xca\xe3N\xaesz\x00[\xba\xb8tO\x14.>T\x17\xff\x9c\xfb\r\x12<\xc0\x1aB\xc0\x80\xda1\xf5\x00zP8\x17\xf4\xfaG\xe11\xd0\x1e{\xa7\xbf\xf2\xb7\x1a\xfdd\x9c\xe9\x01H\x95\xe6\xa9\x10f\xba\xfb\xc4\x90\x02\x7fY\x7f\xa8!U Axe\xecc\xee\xfe\x18UIq\x7f\xe8\x9f\xd7T\x98\xf4z\xf2\xea\x9a\x87\x83a\x8e\xb1\x12\x89\v\xb8\xeaJ\r\x99') ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000100)=0x5) write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) 17:05:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x1000000}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:05:46 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x31200100}, 0x2) 17:05:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002800), &(0x7f0000002840)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:05:46 executing program 1: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000300)="0adc1f123c123f3188b070") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000011000/0x3000)=nil, 0x2000}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x68) [ 1622.355620][ T3123] hfsplus: unable to find HFS+ superblock [ 1622.369888][ T3134] ================================================================== [ 1622.377988][ T3134] BUG: KASAN: use-after-free in lockdep_register_key+0x3b9/0x490 [ 1622.385704][ T3134] Read of size 8 at addr ffff88808d7d2118 by task syz-executor.0/3134 [ 1622.393847][ T3134] [ 1622.396185][ T3134] CPU: 0 PID: 3134 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1622.404762][ T3134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.414818][ T3134] Call Trace: [ 1622.418119][ T3134] dump_stack+0x172/0x1f0 [ 1622.422456][ T3134] ? lockdep_register_key+0x3b9/0x490 [ 1622.427831][ T3134] print_address_description.cold+0x7c/0x20d [ 1622.433811][ T3134] ? lockdep_register_key+0x3b9/0x490 [ 1622.439185][ T3134] ? lockdep_register_key+0x3b9/0x490 [ 1622.444571][ T3134] kasan_report.cold+0x1b/0x40 [ 1622.449370][ T3134] ? lockdep_register_key+0x3b9/0x490 [ 1622.454758][ T3134] __asan_report_load8_noabort+0x14/0x20 [ 1622.460400][ T3134] lockdep_register_key+0x3b9/0x490 [ 1622.465636][ T3134] alloc_workqueue+0x427/0xe70 [ 1622.470412][ T3134] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1622.476147][ T3134] hci_register_dev+0x1b8/0x860 [ 1622.481007][ T3134] ? hci_init_sysfs+0x7c/0xa0 [ 1622.485690][ T3134] __vhci_create_device+0x2d0/0x5a0 [ 1622.490893][ T3134] vhci_write+0x2d0/0x470 [ 1622.495233][ T3134] new_sync_write+0x4c7/0x760 [ 1622.499915][ T3134] ? default_llseek+0x2e0/0x2e0 17:05:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_\x00\x00e_\xf1\x03@\x00en\x00') r2 = dup(r1) write$P9_RAUTH(r2, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x88, 0x4, 0x3}}, 0x14) [ 1622.504774][ T3134] ? common_file_perm+0x238/0x720 [ 1622.509801][ T3134] ? __fget+0x381/0x550 [ 1622.513965][ T3134] ? apparmor_file_permission+0x25/0x30 [ 1622.519518][ T3134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1622.525767][ T3134] ? security_file_permission+0x94/0x380 [ 1622.531401][ T3134] __vfs_write+0xe4/0x110 [ 1622.535752][ T3134] vfs_write+0x20c/0x580 [ 1622.539992][ T3134] ksys_write+0xea/0x1f0 [ 1622.544228][ T3134] ? __ia32_sys_read+0xb0/0xb0 [ 1622.548986][ T3134] ? do_syscall_64+0x26/0x610 [ 1622.553641][ T3134] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1622.559690][ T3134] ? do_syscall_64+0x26/0x610 [ 1622.564365][ T3134] __x64_sys_write+0x73/0xb0 [ 1622.568935][ T3134] do_syscall_64+0x103/0x610 [ 1622.573506][ T3134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1622.579374][ T3134] RIP: 0033:0x457f29 [ 1622.583249][ T3134] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1622.602834][ T3134] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1622.611224][ T3134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1622.619170][ T3134] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1622.627159][ T3134] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1622.635111][ T3134] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1622.643059][ T3134] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 00000000ffffffff [ 1622.651013][ T3134] [ 1622.653325][ T3134] Allocated by task 32737: [ 1622.657720][ T3134] save_stack+0x45/0xd0 [ 1622.661889][ T3134] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1622.667499][ T3134] kasan_kmalloc+0x9/0x10 [ 1622.671811][ T3134] __kmalloc_node_track_caller+0x4e/0x70 [ 1622.677426][ T3134] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1622.682785][ T3134] __alloc_skb+0x10b/0x5e0 [ 1622.687198][ T3134] alloc_skb_with_frags+0x93/0x580 [ 1622.692305][ T3134] sock_alloc_send_pskb+0x72d/0x8a0 [ 1622.697507][ T3134] sock_alloc_send_skb+0x32/0x40 [ 1622.702453][ T3134] __ip_append_data.isra.0+0x19a4/0x2dd0 [ 1622.708063][ T3134] ip_make_skb+0x249/0x2c0 [ 1622.712465][ T3134] udp_sendmsg+0x1db0/0x2820 [ 1622.717038][ T3134] udpv6_sendmsg+0x13a4/0x28d0 [ 1622.721776][ T3134] inet_sendmsg+0x147/0x5d0 [ 1622.726259][ T3134] sock_sendmsg+0xdd/0x130 [ 1622.730653][ T3134] ___sys_sendmsg+0x3e2/0x930 [ 1622.735305][ T3134] __sys_sendmmsg+0x1bf/0x4d0 [ 1622.739967][ T3134] __x64_sys_sendmmsg+0x9d/0x100 [ 1622.744883][ T3134] do_syscall_64+0x103/0x610 [ 1622.749450][ T3134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1622.755323][ T3134] [ 1622.757650][ T3134] Freed by task 0: [ 1622.761354][ T3134] save_stack+0x45/0xd0 [ 1622.765499][ T3134] __kasan_slab_free+0x102/0x150 [ 1622.770427][ T3134] kasan_slab_free+0xe/0x10 [ 1622.774947][ T3134] kfree+0xcf/0x230 [ 1622.778737][ T3134] skb_free_head+0x93/0xb0 [ 1622.783152][ T3134] skb_release_data+0x576/0x7a0 [ 1622.787994][ T3134] skb_release_all+0x4d/0x60 [ 1622.792584][ T3134] kfree_skb+0xe8/0x390 [ 1622.796739][ T3134] udp_destruct_sock+0x300/0x4b0 [ 1622.801663][ T3134] __sk_destruct+0x55/0x6d0 [ 1622.806158][ T3134] rcu_core+0x928/0x1390 [ 1622.810428][ T3134] __do_softirq+0x266/0x95a [ 1622.814902][ T3134] [ 1622.817208][ T3134] The buggy address belongs to the object at ffff88808d7d2000 [ 1622.817208][ T3134] which belongs to the cache kmalloc-512 of size 512 [ 1622.831236][ T3134] The buggy address is located 280 bytes inside of [ 1622.831236][ T3134] 512-byte region [ffff88808d7d2000, ffff88808d7d2200) [ 1622.844487][ T3134] The buggy address belongs to the page: [ 1622.850119][ T3134] page:ffffea000235f480 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0x0 [ 1622.858954][ T3134] flags: 0x1fffc0000000200(slab) [ 1622.863868][ T3134] raw: 01fffc0000000200 ffffea0002435708 ffffea0002a68448 ffff88812c3f0940 [ 1622.872622][ T3134] raw: 0000000000000000 ffff88808d7d2000 0000000100000006 0000000000000000 [ 1622.881192][ T3134] page dumped because: kasan: bad access detected [ 1622.887574][ T3134] [ 1622.889880][ T3134] Memory state around the buggy address: [ 1622.895488][ T3134] ffff88808d7d2000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.903522][ T3134] ffff88808d7d2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.911559][ T3134] >ffff88808d7d2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.919605][ T3134] ^ [ 1622.924433][ T3134] ffff88808d7d2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.932478][ T3134] ffff88808d7d2200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1622.940531][ T3134] ================================================================== [ 1622.948571][ T3134] Disabling lock debugging due to kernel taint [ 1622.954719][ T3134] Kernel panic - not syncing: panic_on_warn set ... [ 1622.961321][ T3134] CPU: 0 PID: 3134 Comm: syz-executor.0 Tainted: G B 5.0.0-next-20190306 #4 [ 1622.971267][ T3134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.981297][ T3134] Call Trace: [ 1622.984603][ T3134] dump_stack+0x172/0x1f0 [ 1622.988977][ T3134] panic+0x2cb/0x65c [ 1622.992855][ T3134] ? __warn_printk+0xf3/0xf3 [ 1622.997428][ T3134] ? lock_downgrade+0x880/0x880 [ 1623.002266][ T3134] ? lockdep_register_key+0x3b9/0x490 [ 1623.007620][ T3134] ? trace_hardirqs_off+0x62/0x220 [ 1623.012716][ T3134] ? trace_hardirqs_off+0x59/0x220 [ 1623.017815][ T3134] ? lockdep_register_key+0x3b9/0x490 [ 1623.023171][ T3134] end_report+0x47/0x4f [ 1623.027315][ T3134] ? lockdep_register_key+0x3b9/0x490 [ 1623.032674][ T3134] kasan_report.cold+0xe/0x40 [ 1623.037343][ T3134] ? lockdep_register_key+0x3b9/0x490 [ 1623.042702][ T3134] __asan_report_load8_noabort+0x14/0x20 [ 1623.048330][ T3134] lockdep_register_key+0x3b9/0x490 [ 1623.053512][ T3134] alloc_workqueue+0x427/0xe70 [ 1623.058269][ T3134] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1623.063984][ T3134] hci_register_dev+0x1b8/0x860 [ 1623.068812][ T3134] ? hci_init_sysfs+0x7c/0xa0 [ 1623.073490][ T3134] __vhci_create_device+0x2d0/0x5a0 [ 1623.078669][ T3134] vhci_write+0x2d0/0x470 [ 1623.082987][ T3134] new_sync_write+0x4c7/0x760 [ 1623.087645][ T3134] ? default_llseek+0x2e0/0x2e0 [ 1623.092478][ T3134] ? common_file_perm+0x238/0x720 [ 1623.097478][ T3134] ? __fget+0x381/0x550 [ 1623.101640][ T3134] ? apparmor_file_permission+0x25/0x30 [ 1623.107183][ T3134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1623.113413][ T3134] ? security_file_permission+0x94/0x380 [ 1623.119026][ T3134] __vfs_write+0xe4/0x110 [ 1623.123352][ T3134] vfs_write+0x20c/0x580 [ 1623.127605][ T3134] ksys_write+0xea/0x1f0 [ 1623.131856][ T3134] ? __ia32_sys_read+0xb0/0xb0 [ 1623.136631][ T3134] ? do_syscall_64+0x26/0x610 [ 1623.141313][ T3134] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1623.147377][ T3134] ? do_syscall_64+0x26/0x610 [ 1623.152047][ T3134] __x64_sys_write+0x73/0xb0 [ 1623.156614][ T3134] do_syscall_64+0x103/0x610 [ 1623.161193][ T3134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1623.167082][ T3134] RIP: 0033:0x457f29 [ 1623.170965][ T3134] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1623.190544][ T3134] RSP: 002b:00007f6c354edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1623.198931][ T3134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1623.206880][ T3134] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1623.214829][ T3134] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1623.222775][ T3134] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c354ee6d4 [ 1623.230728][ T3134] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 00000000ffffffff [ 1623.239378][ T3134] Kernel Offset: disabled [ 1623.243694][ T3134] Rebooting in 86400 seconds..