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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000505c0)={0xfffffffffffffffb, [], 0x44, "c3268b4ed1d6ae"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000515c0)={0x0, 0x0, "f3dc657ad6deec78fa9130a2f9f985830cfb62af0371e2bf8ea052bfc358f6762aab49c557ffced0b57519e5da2d02ee0c27c87a5d75b072762d5d480806d29424d40ac3a1081e2ad3f568d600fe187db5a7710ea679d6b2e8c299390e308c3b9026b5c0084d3a33b63906bcabb309b6b0c4530ee05937edb64fb2b8eab38854c8948440c2c9c47ce323295eae0c0d872c77685663b673a57be35eef72973dedd0ff7200839e423d666adb6c2b8c783178a2c85ec8d45410ef624ebc6d199c85240bed54399d36e08654c187184bc598ee455965df20995b260feb4528b2590cbf016981c83c9a449adaa60f0c97d8603dd37669f247f946a563615a74e1378d", "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"}) 12:09:03 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0245720, 0x0) [ 394.969563][T17127] fuse: Bad value for 'fd' 12:09:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000240)={0x1b}, 0x0) 12:09:03 executing program 3: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000700)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, 0x0]) 12:09:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:03 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:03 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x24}}, 0x0) 12:09:03 executing program 4: syz_mount_image$erofs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}]}, 0x2c, 0x0) 12:09:03 executing program 3: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000700)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, 0x0]) 12:09:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000000040)='/', 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r2 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(0xffffffffffffffff, 0x0, 0x7fff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x8, 0x0, 0x8000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x480, &(0x7f0000000500)=ANY=[@ANYBLOB="faa2aeeb4bff8d91cfd7c80bc30f7e935335cb11072e7771fd785e9ced2df80761b0aa2873d54c7f3493c335a2338688874dc625cf072c0c32125c44d7d4a42039f6ca32f6414f12961411418caad7207541587a0384edea48d5b0567f16f2a583b042939200be87fc64abd2afbcd35e92de302fab23b958c3a713a36f51769b1d423672cc35896c5e1d2aca848e9d3422d128b9e77b0113875a5b681d4e812829e020aff971d6b6d7aaecf7f209dce1fccece62a24fe6", @ANYBLOB, @ANYBLOB=',r/otmodm=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="81f4"]) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000), 0x10) 12:09:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') keyctl$search(0xa, 0x0, &(0x7f0000000040)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) ioctl$TIOCGSID(r1, 0xb701, 0x0) r2 = getpid() clone3(&(0x7f0000000280)={0x28000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') 12:09:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x11, 0x4, 0x81000000004, 0x200007, 0x4, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x40) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) 12:09:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 396.004681][T17184] fuse: Unknown parameter 'K ~S5.wqx^-a(sL453M%' 12:09:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:04 executing program 5: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') keyctl$search(0xa, 0x0, &(0x7f0000000040)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) ioctl$TIOCGSID(r1, 0xb701, 0x0) r2 = getpid() clone3(&(0x7f0000000280)={0x28000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') [ 396.218200][T17178] fuse: Unknown parameter 'K ~S5.wqx^-a(sL453M%' 12:09:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b49915270425cbdbe1f87d3d738617f41196ad45e71a61dcaf9727e42c1f610fbe7cf4dbce06165c3d75d3261eba59f8a2fe7abac9a805214f416963811544b9a492a7c847be060de22582696cc0d0f0a96c574dbb6abe164386af60def6e8b1d22b789e691644c4604b0cab838ae6723318fb794bb113e32953a06df60666facd5ade36ea527541769ad08966ebdf246bf423343e65b000628201ce49cb1f524ab652edfd063b6cbda2021be5c13daecd43d59b445d82fb30145d5bede62e932ce2", 0xc2, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000480)="98", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000017c0)={r0, r0, r1}, 0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={'blake2b-160\x00'}}) 12:09:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:04 executing program 5: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:04 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 12:09:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="8bacf0a0c26166643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d27b0e95fe1586d94449ea70b355645f9965892359390c40f4fecb2910c3ba56c878c9d4a053f0c71218770dd6e3c727fc1b03497c0df1d1f9f8b1fd110a582a66bda836831ee98e93fbb9a23c673f5a6f558096b331b21d53622101ca775e69c3b061bf4969df8acf6cf673d40212227dd9eb6da3884152c2eda9e9139e645672ebf9ae89890f0217823ac865973e523e9f9217391f288dffe29c3f57e6bff506f23877223747392a4fcde740d1c7d9c39ed28a0379d74c3309cc7062707addd44e757c7e3e05d6af1013a75e4c82272067b0c5dc9459c122e2c0c89e664c6c3ff999a3a5b308b00f059cd", @ANYRESDEC=0x0]) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x220100, 0x0) read$FUSE(r0, &(0x7f0000001840), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, &(0x7f0000003000), 0x1150) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xd0, 0x4, 0x3, "2b318098395a05bc5e8e6e0dc03b73fcbb5d4942622d8a338aed956400f14532", 0x494e4f4b}) 12:09:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:05 executing program 5: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udplite6\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@loopback, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xffffffffffffffbc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='9p_client_req\x00'}, 0x10) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) open(0x0, 0x0, 0x46) ptrace(0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000008c0)={0x0, 0x2, {0x8001, @usage, 0x0, 0x5, 0x3ff, 0x1ff, 0x0, 0x101, 0x2, @usage=0x8, 0xffffff21, 0x8000, [0x800, 0x0, 0x0, 0x0, 0x0, 0x3]}, {0x4, @struct={0xffffffc0, 0x1ffe0000}, 0x0, 0x25d7b9d5, 0x81, 0x8, 0x1, 0x0, 0x1, @usage=0x5, 0xe3c, 0x0, [0x7, 0x9f3f, 0xcbf9, 0x1f, 0xaab0]}, {0x33, @struct={0x7, 0x7}, 0x0, 0x2800000000000000, 0xd, 0x0, 0x9, 0x2, 0x4c8, @usage=0x9264, 0x0, 0x4, [0x5, 0x0, 0x43c5327d, 0x80000001, 0x0, 0x1000]}, {0x20, 0x8001, 0x4}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001340)={0x0, "bff6ac8e4b0297dd2ed27a37a1dc5f71"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000cc0)={0xa, 0x2, {0x1, @usage=0x3, r2, 0x8, 0x9, 0x7ff, 0x8, 0x0, 0x80, @struct={0x100, 0x8a2}, 0x9, 0x6, [0x1f, 0x4, 0x6, 0x7, 0x10000, 0x44]}, {0x8, @usage=0x2, r3, 0x5, 0x100000000, 0x7ff, 0x3f, 0x80000001, 0x478, @usage=0x973a, 0x7fffffff, 0x0, [0xfffffffffffff353, 0xa948, 0xd7e, 0x9, 0x100000001]}, {0x0, @usage=0x4, 0x0, 0x1, 0x2, 0x656, 0xd48, 0x8, 0x84, @usage=0x8, 0x1, 0x0, [0x1a6, 0x3, 0x0, 0x8000000000000, 0x0, 0x9]}, {0x800, 0x1, 0x7}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x5, 0x0) [ 396.988532][T17225] fuse: Unknown parameter 'afd' 12:09:05 executing program 5: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) [ 397.057554][T17225] fuse: Unknown parameter 'afd' 12:09:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@local}) 12:09:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:06 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_genetlink_get_family_id$nl80211(0x0) r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket(0x0, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @dev}, 0x10) mlockall(0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000000240)=[{0x0, 0x0, 0x0}], 0x492492492492494, 0x5dc) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2, 0xe7]}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000280)={0x0, 0x0, @start={0x2}}) socket$nl_generic(0x10, 0x3, 0x10) 12:09:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:06 executing program 5: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:06 executing program 3: pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x81) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000000)={@multicast1, @loopback}, 0x1) 12:09:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:06 executing program 5: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)=0x6b) 12:09:07 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8000000000000, 0x40, &(0x7f0000000c00)=ANY=[], 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @private}, 0x10) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0xffff}, 0x0, 0x0, r2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x100) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:09:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:07 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x14}}, 0x0) 12:09:07 executing program 3: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='cpuset.sched_load_balance\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) clone3(&(0x7f0000000200)={0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100), {}, &(0x7f0000000140)=""/52, 0x34, &(0x7f0000003300)=""/102400, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x8, {r2}}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x4, 0xc8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) 12:09:07 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 398.934322][T17307] overlayfs: failed to resolve './file1': -2 12:09:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$SOCK_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d292b184fd5b7af464"}]}, 0x24}}, 0x0) [ 399.034323][T17308] overlayfs: workdir and upperdir must reside under the same mount 12:09:07 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000937fed)=""/2, &(0x7f0000000040)=0x2) 12:09:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:07 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)={0x8}, &(0x7f0000000040), 0x0) 12:09:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:07 executing program 5: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e009b"], 0x70) write$binfmt_aout(r0, &(0x7f0000000080)={{}, "22ba"}, 0x22) 12:09:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 12:09:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300), 0x0}) ioctl$sock_SIOCBRDELBR(r0, 0x890b, &(0x7f0000000040)='batadv0\x00') 12:09:08 executing program 5: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$qrtrtun(r0, 0x0, 0x0) 12:09:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x127a273cc847230b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}, {0xc, 0x7, {0xc00}}, {0xc}}}]}]}, 0x48}}, 0x0) 12:09:08 executing program 5: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x5, 0x2}) 12:09:08 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r0) 12:09:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000900)={0xffffffffffffff55, 0x0, 0x0, "ff8a403ff617ebd5f620d5d4046642ff3b627f3c1c30590e0ece15a7f8db81f7895d5e394bc1348a9489513bfe33bda45a1f3a4b203846096d72ab67b87c91ad51e7442332bc24ceba5722ee06e152c117ea4b99cd3ecd582be69a10b947d8f8af85032e35b44a901ba57af91f9042c3fe769f4236d2a85f3e529fda6f5599cc2517f00cb20bf8b92d456f8a7bea820000eba529fc412ca9a3068e4024d0d7eb33949d933b752d0d55e1d94a1f06e9f7efd8781759e6c22fdd90b09fd9afabdd96b39b257f32542a3bd33a1bb012000000006e8300"/240}) 12:09:08 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:08 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) 12:09:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xc6e2, 0x8, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0x2}, r3, 0xd, r2, 0x5) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xd9, 0x4, 0x20, 0x2, 0x0, 0x7, 0x0, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000200)}, 0x10208, 0x6, 0x6, 0x7, 0x8, 0xeb, 0x8000}, r0, 0x0, r2, 0xa) syz_io_uring_setup(0x54bc, &(0x7f0000000280)={0x0, 0xccaf, 0x2, 0x2, 0x17e, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f00000003c0)) pipe2$9p(0x0, 0x800) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x3}, 0xfffffd02) 12:09:08 executing program 1: ioperm(0x0, 0x5, 0x7) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 12:09:08 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) [ 400.329198][T17392] x_tables: duplicate underflow at hook 1 [ 400.473232][T17399] x_tables: duplicate underflow at hook 1 12:09:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:09:09 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@abs, 0x5e) 12:09:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) 12:09:09 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:09 executing program 4: mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000002, 0xa, 0xb1478afe60e0e972, 0xffffffffffffffff, 0x0) 12:09:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x0, 0x2}) 12:09:09 executing program 1: semtimedop(0x0, &(0x7f0000000080)=[{}], 0x1f4, 0x0) 12:09:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:09:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x0, 0x2}) 12:09:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2b, &(0x7f0000002040), 0x4) [ 401.045933][T17415] x_tables: duplicate underflow at hook 1 12:09:09 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) 12:09:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x0, 0x2}) 12:09:10 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) read$usbfs(r0, &(0x7f0000000140)=""/147, 0x93) 12:09:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:09:10 executing program 4: timerfd_create(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0xbf8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x222500, 0x0) r1 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, 0x0) 12:09:10 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5}) 12:09:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:10 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f00000000c0)) 12:09:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5}) [ 402.200819][T17466] x_tables: duplicate underflow at hook 1 12:09:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x5}) 12:09:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:11 executing program 4: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc0205649, &(0x7f00000002c0)={0xffffffff, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0x40, 0x2, 0x0, "395b54b2"}, 0xfffffffd, 0x3, @fd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() syz_open_dev$vim2m(0x0, 0x400, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsmount(r0, 0x0, 0x2) fsopen(&(0x7f0000000080)='proc\x00', 0x0) io_setup(0x8001, &(0x7f0000000040)) 12:09:11 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c18f000000004000000020"], 0x20}}, 0x0) openat$vcsu(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:09:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x9) clock_gettime(0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="82", 0x1, 0x88d1, &(0x7f0000000080)={0xa, 0x4e23, 0x104, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) [ 402.713364][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 12:09:11 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) [ 402.801045][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 12:09:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000200)}, 0x0, 0x1, 0x0, 0x8, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x0, 0x1) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0xb95, 0xffffffffffffff33}, {&(0x7f0000000080)="03307df38070ace752e386ed45446733d21a2f2e50d7160681f89aed51", 0x1d}], 0x51d5ea82cf7ed9de, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 12:09:11 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0xa002, 0x0) [ 403.087313][T17510] x_tables: duplicate underflow at hook 1 12:09:11 executing program 4: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x4, 0x1, 0x1}}, 0x80, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0xab7d}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x7ab}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff9664}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xd8}, 0x40004) r2 = io_uring_setup(0x192b, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x2, 0x960000, 0x4000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x3, 0x0, 0x0) io_uring_setup(0x2b03, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x0) 12:09:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x86, 0x8, "e8c89aca487a"}]}}}], 0x18}}], 0x1, 0x0) 12:09:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x83, 0x1200, 0x9f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6}, 0x20) 12:09:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:12 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:12 executing program 4: r0 = socket(0x23, 0x5, 0x0) connect$unix(r0, 0x0, 0x0) 12:09:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) 12:09:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 12:09:12 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0x8000, 0x3}) [ 404.277569][T17561] x_tables: duplicate underflow at hook 1 12:09:12 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000026000f56"], 0x4c}}, 0x0) recvmsg$can_j1939(r0, &(0x7f000000e440)={0x0, 0x0, &(0x7f000000e400)=[{&(0x7f000000d300)=""/4096, 0x1060}], 0x8, 0x0, 0x7a}, 0x0) 12:09:12 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@v2={0x5}, 0x9, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140), 0x1, 0x0) 12:09:13 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0x8000, 0x3}) 12:09:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 404.516498][T17581] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 404.586862][T17583] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 404.623336][T17581] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 404.650427][T17583] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 12:09:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x5, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x80000000]}}}) 12:09:13 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:13 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_getoverrun(0x0) 12:09:13 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0, 0xffffff7f}}, 0x0) 12:09:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x1, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d98cf41bda1552b0aacbb9", 0x2a}], 0x1) close(r0) 12:09:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x9}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x12}}]}, 0x3c}}, 0x0) 12:09:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 12:09:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="501971d62bf100a76c7b3363e17b3380a34e9eeae8c7e30ea53de3d3ab1cd34e", 0x20) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) 12:09:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}}, 0x0) [ 405.116817][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 405.139917][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:09:13 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 405.328396][T17606] x_tables: duplicate underflow at hook 1 12:09:13 executing program 5: syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000680)='gfs2\x00') syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000700)) [ 405.640055][T17640] gfs2: not a GFS2 filesystem 12:09:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 12:09:14 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$packet(0x11, 0x2, 0x300) getsockname(r1, &(0x7f0000000200)=@tipc=@id, &(0x7f0000000280)=0x80) 12:09:14 executing program 4: r0 = socket$inet(0xa, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0xa, 0x0, 0xffffff7f, 0x1000000}, 0x1c, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="8f2f4d78f7a0387a6d2fade66f9a5eac999f321670971e337823326865c3f34706a6e277c031c0acd174a72e6c87e165f7f0622461b3de93f267a8246e99b3"], 0x14}, 0x1, 0xff000000}, 0x0) 12:09:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000180)="410f78cb64410fc737260f0766f341a5f04281124e0e00000f23f1b9550a00000f320f224526460f32c481555fb300000000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 12:09:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)) [ 406.299986][T17670] x_tables: duplicate underflow at hook 1 12:09:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000280), 0x0}, 0x20) 12:09:14 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0xa, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x17) 12:09:15 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x140d, 0x821, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x20}}, 0x0) 12:09:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x2, 0x82031, 0xffffffffffffffff, 0x200000000000000) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 12:09:15 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) readahead(r2, 0xb6cd, 0xbd14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x200100}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:09:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0xc21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 12:09:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={0x0, 'ip6gre0\x00'}, 0x18) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000240)=""/49, &(0x7f0000000280)=0x31) socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@sr0='/dev/sr0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x8c0b, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) [ 407.282312][T17701] x_tables: duplicate underflow at hook 1 12:09:16 executing program 5: pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 12:09:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', @ifru_mtu=0x531101}) socket(0x25, 0x5, 0x0) 12:09:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:16 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890c, &(0x7f0000000000)={'syztnl2\x00', 0x0}) [ 408.419295][T17737] x_tables: duplicate underflow at hook 1 12:09:17 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x11, 0x20000000000000a, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0xc0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 12:09:17 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r0, &(0x7f0000001c40)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 12:09:17 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x114, 0x3, 0x0, 0x10) 12:09:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:17 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 12:09:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 409.384828][T17755] x_tables: duplicate underflow at hook 1 12:09:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000001240)) 12:09:18 executing program 5: r0 = socket$inet(0x2, 0x3, 0xff) sendto$l2tp(r0, &(0x7f0000000000)="df90a509ad28210fcdb2709e0ff48ae51014ae9cc42d359637ed516982f89fcf436590172fc13e48933ad384888b7661faa2fd5c379cd9c02c4c7a57", 0x3c, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 12:09:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8}]}]}, 0x44}}, 0x0) 12:09:18 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 12:09:18 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:18 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local}}}, {{@arp={@empty, @empty, 0x0, 0xff, 0x4, 0xd, {}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x0, 0x328, 0x400, 0x3, 'veth1_to_batadv\x00', 'veth0_vlan\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private, @broadcast, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:18 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 12:09:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="675f07000005eb301420384897f1ac1dea61a7a765760036f300000000007d7cff30f363", 0x24}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x5) 12:09:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc040565f, &(0x7f00000006c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b00df9f5"}, 0x0, 0x0, @fd}) 12:09:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xbcb10200, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) [ 410.662402][T17803] x_tables: duplicate underflow at hook 1 12:09:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$tun(r0, &(0x7f0000000200)={@val={0xa00}, @val, @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x1b29, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xad1, 0x0, [], "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"}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "4b47ee276a68d85ac50bf46b3c5d779ecb4efc306839de420abd2f9665c71910559d8be6725e311f38ea203277fa661550d12896c20614a588cbd81d830dddb53373c4c60014bd34cbfe2a771da9cf612da07e3c0e95b77d4771b9cc040a713e5f317bee06f71e9f30e2e82bd2c52e04bb6c4fbe7fca201395fc4361694fb8c0972c4b94c12771ff7da571b24ad1d41e9dcdc51c61262bf6034af0ccc599b4cd622ad51f83d4223616e4eb84bb96a2f286d77f2b498024edf1bbb9f775387ee5435face8d4c6e5fa434281f11fb838a0efeb5d2ab5e1b534a4e10114c8487ef6a2f8ee24b532bd2e1015c60128cc85ad29ca0fc3194ffa89b5f499fbe5c74456bc6eb76600bf2aa37a77e21e25b556ffde40cd23fd9f96ade40dd098eac6db63c4b36cb7909a81a0c8c6000d776288ae7932354c7b99be4630b86ee213563c5323f95f2ceb15b58c5805263e075a146819399b4bb5327ac641e9b8e304cde111bc935be74492399ced7e40a1a323848448c573a8092090066a42c5d32d0de3c9c9511cb8766bf67fbd6fa33e6c7b6ab361f77c6f07481ecf76cbc6d2e4c96568a1aa0947404fa2aba419682b3ed220b2baa6a704e56f7323522cbe10c9c99a7401fdb6b19ff155dd914c37252a123328e4d974240115c7f6fc8c3e2482251ef83718d79270d8a4b6a2e216e608206298bdbb149fc96d8baa2daf476ed776ad241f555adc9382cae147589172ce2a6ea7aeaabcf4e5086de159f6dfd62cebaf235cd33f4615be19456a8f7f668e1930e61ee2d68fbf30f99b8b4bcefa57e8604a2aa592ed34034f87497fd3a3a921250552c78f5cbd146b6627a82f1040cba05fb0086005b48e8d40d23554f5407b6cad5fb9c3c32023d5435a1c14a669bc33d921d4ace5073b3fc9f08a753dcd9322349bf2e7debe8a117f4b958d264c4a319d2626be7c84c57deacea043e37bb32b920920e617dcf8cce91d5ee56c35af117fe43594adfb040fa4063a5791d5f8ce56e050bb357bbf05ebdad5aea075e3d2cb542f6d354b7214449c6e3e88f65644bcc6fd3438b89bcfa80093afdc80bdedc5c292da9873eba4a18e18330305796933fb9f80a35db770bc9c005007ab4d0fb2075b9391bbca03b123dbe8fe8e648c9f0ebafef428cbf2be266ca448ae0c10d2de0c078bc17d5f09b0524df6c6dc968a153a68ac3c2f8c057ce37bb86bed77e1740a2d901ce8b7e6dd09c755c596cb7f9f7d2c5ea54b3c714da2ce3ebb1cdf3060cc71545da2c49d0a5a2a8c09f16aad0c5620287ec58170815e6d88930ae7462dfb1fd2f47417698471d4948060b24ad7c27173affe8bbed3868347b15dc5e82665082aaa1694ba685d008990b9345a4557de9ece8c0a79e7cc0d849fb9c298a7fc0931a1723fc35a7d131b1cdf9633c2d19e747e6a418b10624022525bbfe566cf4475875b4674c169bfedafa070a86b6a96bf08e70ff6cd4d28fdcda0ee6a30b1501f95b3950208d4267a19df75f48b7b7f94a782c1ff3d61006a24ad5dc3b7e54c6ecdcd8295a03d52ad6910a5cd8df3acd0f94c278cb8f8c1246d7400b5df6f16fc2f0711d35d0e5549e3d995258c30fe12998ac911ddbde0f34175ba2853dfc4421cbe90a701cd085d58ec02fd13375b3085573e50e8d8548175693b94529f44552bce4dcbf0550216a9b90f390dbd58dce760da3f12b481145f21c0635337c726023c3f5df4287bc4c31d0a24a1ea28284e7f59eed67d046945c493562ef23de5d90e55fb045c09db18c1ed5d8a8fdbc7bcb2f28a58e7a360654d7cbd59804d2239fb540f2b5345bbd67deec9054ce7206d544463d2a7d6f49dc01f54dd001892c4178b163024dffef59bf6cebbece7ccde9a9e6fd7b7749b5debaaca23f9b1ca06bcc65d6e7ceaf6c1686924c0ec1e05099d758328501ad26b57d56860688b1fbb9deeb6a5ecfbc69ed6a8fb555f1374b39fc3aed4ad150197f38c9c811fc1badd9c3bededc5bb6e58cd14c8e351d4ec0d0f7cb713a616b66a68bee10a1ac21dade461eea335cf1b5d0bf451cfbb4b8084b8d3caae6b0e6d04209a84433b4d74c49f47b748d90a47ab2ba060e07f966c713eae8dffc26637e0a34e6bf0123e86cb131c634900090d5aaf71a0ac4e1abcaa5b7ed75971e59de500081b59a961d03bd31c77fc2d7b24c01898547fcbf4fd21c5ba2896af9bf7189b65142e0d779137020eadc1d33066aed11a64abbc9ee61ece9072e23da97eb7b8339dcac41d893f1d5ef8edebd2907bf41e6c9bc26d2f354847d7bfae9f3c51804dd0f30561a5604f1137ece73dc972dbff41d2f7289307ca93bc03cde9c8668c41d9ada67ea82749a1cc82fa272ee00ce7171700b3693c9e9b794eed30e01bb690ccae30bfa1ba8fa41df565547fc60f364cd4b6eabb69d57119e7645a3c8f5dc1d3c0e6b77a88958b31d804b5f247994627b4424de6fe8eb0247529cc4bbd6553f43fa5c1b22b02e6b05a0720bf23e2a061a24c43c3dd0963053c9e817e769644c43ff1a3468bf8266f2d5c888f56f53915d8b186493016122e2b7e41db45807beb8b47f1f73a6022ae5011745f1423c007fe5736c61190f1e52ac53c762a42274856e9a177f474c994cfec19c240a516be2ca68cda3c31a8b6e0904b38def8b178ede9e5a72b8957722b056a76b94049531ddb26cffaa5b3e4dfc2dcdb89922fdd41eb89ecaa92e0c4e1e3ccdf645c5afcc595725d43c5b87884f79685198ad60b10c9cbba2503fb09f538e3f14885da51b9cc35c93f2f12cd6d0f38bfd69c7896b460d5a658588b1606e22bf81237591633d45a6b194c435fdeed054ce6d336c84676fc2b823a7b9ee930972518d22e36451392cec1a7b9f95770be8a28e2c4ab7c6469f1a83ff8063a0bb9df8a6be7147f8a7128fe5ec2d5da3bca8cb0f1797d5126254be878ce5b0835c5ed07e6e15b6a22b46336e9ed2271b7495402638eb01a3dde02d92df43ae533d396269ce2d49771a54cd3734c2306b589fec248c06f688e76c8ad58a8a4e35bb50c50774c3043e2e6076ce6b2ed22c6fc83121f557861946c5dd1085275b710298aada4f7db99dfd1a8bb3b05c3028a61849797fa25c1e31eb27ba1bea6635688117937f772ce7ef900026cdabab8957535719656cd561a7296195167ffb5aad8aa9ad5dd4b8ddcf4dc71ec148fe4f0ab9285541107bcb27c81b4bb19c65a061be659cdeb4ec9fadf39c91eb3c98b1911b3dba99edd6605b54c5e66c4af5fabf0859a5e2e98616720d2c61958df6b9548493c4b3ea8fa3704fabd8a909bda8f2e1225f7182ebf9e0c24d9999c4384d48183535ada20002cd4df651c99482a92766d37a3c531fc5d01bc0c3c3230d967b14a2d6a6021c53bb73044f9e279808e45e0f3fc5e9920eed7a7dec086d4222537fa8dcb63d77835d920688f9502ff962611a6d22654cf975b7dedc2ed7d3bf48654cdd5ec4ec43a57c61d85d0d5af1b4da129ad5526cb4dbd5ae324589e37af8f660a2ab0e45bb325248a5adf06bf220b2f75bbe973a97dea6c3ccc3546c29186623dcab31f3617c99f6f52b0f572b0d00fefe051d69d2f10c0476d339dbdf18b34702fd9fb1794b4053cc528a8026f0b5939b5fb57a99ccef47c713332be976bc62112f4e3f8370d782b512f5fc2968e5b819662727c54a21e4701ea6e88e0db14e55bbf5fa5bcc98f5e543786741cfa995582911f3492fb96871f15f1b9e81d9f4ffb4f4195664faafb04436d3c93473cb5147fe0ab3763b68f07cfbcb54a1af5d16d79afbf4639c01fac1c8e0ae8133ee06e27cefa2c980f0956b107ba49eb297435834191ad9a34abe2fdd3b00e8bacf0afa984bf6a862a3969a8d68b39190feaea1dbdb542166bb28cc83bfaecbbdfde565bf3c742ba910b3c4802ccbca61e4eca344a0815dabb758e42ed57eb1c330634a54cfe08c084da7515b280d33468a7e90612b9bbe18c61061397f44503046c67a2a7791095b771177fe13e78a47cef8f8351721c32e745e371e8dd9742059cff5e82c0ec137e653fe113506d2913af929e1f24f9d656d960c74474a4c634e2d0aa885985f593ae121ec2a085cfd543f35ff825e9de59fc4bce749da96db7fd7d94b0a8b63815c354e4ae0285dc8487f4bd7917b03221401fa3a94ce35c40ece99b394ecc6a1259bbefa0638b6b6799bb8e28facf0bfe2ca39edb9931b623cd3966809e936aa671de13d63b6258b81751d06fbf779bcb241ce22965d0190d0b48843dac8de9f42b3961eb6132e648ab412ed329a0622220a03f4799f3cd4cf0751f03e26393c87d620c7de2dd40e908f3826a8756cedd09aa4ac5cdcd755e16fc10d2607716c5b0b9a44a4683ac0d2f1c4cfd5b9f352011501d3f044aa71a38d9022ccf5c896fb47b2a337963f97fd04f1f9499898b83d0153453c4207d18f400683b4e35b91dc40dfd853600d93764bbccc11d0e8a3258d6ba2132abde098b3e4b0995f4dd5acb307e8d0c086f8fcaf2608de7b62e6367f3b3a74590e05d1ae9663acdbace79222a8e2b8a28f7429cac4940f6185bc967914263bd5e25c0e92bdbc2baf565921e429558c3b6d0051e1c7afce6ed3d65abb44b4f69829e0dcd96327ca7222d2ad3f3d997737fc6eb7a85f84383e54d08a048c86bd37570c7b6d20f28ffc1b06c78d2a8f991841c428274b6b0b17d973faa7b36bc8c6d8a3098b27741d50e800846b281d6fee7dc604933bac51476e2c95279f59f3601638b638a10133f1531405c5952eafcaa68f5e56c240a42a917fefdf769811f959600b4769c1d9c5a0e66f8e6c7b427f9882401fa1322f730c11a24d7a4f1ca3a05459f076346d1b2c5fb49d8b7f999d628ce980e90bd26c8db223e3c185b244e0e0c8f2874207afb3494a3480703156fa48ff0b9098b33a311a8d9ea6f03cf515dd9134634a2c5ebab09db8654e2e88d3369b4482300ab994f62deedb73201316ecd82b3cc23b21f0301b98f634dd4460626018a0f4a2dd9446d4a769d257ad0bfb3d415be4610eef8a7c490e82cf73fdc0a8245fa0af70bc0dc1017ad412a47a7e97be8f455441b23081dbd51711fe425a282692137b970d9a42429dbe6a618f4e8a9cd706753fd6b0e03b36557d11d4a0ecc915e39b4a23852e19ca1ebddcaf7596a0470076dd571956109754b5f5f7f9ff336e024736b37171143ab94819d579e2112cc739a0ef672d4c821eb7577473462eb04bee607d2d64c6718bb4340f161a79a3a5f1aaf37909e687092be1ecede5caebd0eaa067f05a9d79ccb239287989059f458c0ecc1d5b5d76fa603a988c195e00752b04f1e03e096a8868dc696bea7ff52b8f489f41a935c7ac33a71c038bfe340b4d9e1836bf56c37a9deb5a4211068c5dd04fc536798d8a2274d72135c5f1d55b45e6bb7603906f3a68a1dffc5355d07b5ff5d9dde1fa56f71f8fa4dc606f6e5da438181cebd680dbbf4bdf2f338b4e5c95ae69aad98fec14f666c036e6da111f34ca0060b56cb1f39cc42e500e0dcb95efb640fb12489953270fa0c79cd21b5228404151b1197c601b9ea9017516b78b532f4737eca931aaa7b5efda1d1dcd8e1ea7dd848ebca6858edd802abbf72ff44d417472f309f521465ac36d6cdcba57c0832ad358807ea8f28551e8254f9cb5a68b86c77ec708cc3c4acb78993a37bec898207e5ac5ac93ae008ee27c8f827d904764b67db978f415db6942ecd38bc7880d0ac3357abb79f12487d4f613404baaf0e7526b3fc704c18824494da19f3f8"}}}}, 0x1b37) 12:09:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:19 executing program 0: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010008, 0x2d, 0x0, 0xffffffffffffffff, 0x3000500}) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010008, 0x2d, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x346, 0x20, 0x1}) io_uring_setup(0xfd4b, &(0x7f0000000180)) select(0x40, &(0x7f000000e000)={0x0, 0x5, 0xbc, 0x0, 0x7, 0x0, 0xffffffff, 0x2}, 0x0, &(0x7f000000e080)={0x0, 0x2, 0x3, 0x0, 0x0, 0x2, 0xe3, 0x1}, &(0x7f000000e0c0)={0x0, 0x2710}) r3 = syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x0, 0x28040) read$char_raw(r3, 0x0, 0xeffdffff) read$char_raw(r3, 0x0, 0xde00) socket(0x0, 0x0, 0x3) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='*{\x00', &(0x7f00000000c0), 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x800005, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x10) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) 12:09:19 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="a4f9bf3ee4ec43e98498d6246cb471f5ea04ee717508e570c17ab02d0e3e7e4448b8eef11439828b8dfc651c580fa6a604df1abe46935c5a92c38146d9b1e464ec8b9973a5b1a54874bcebbe65c16e7c3c97d4f7eb54e33edc4220016e91ba4b152bfdbfaaa6192df05628eeb1ebbec442415fe28b68d8d9d2aeec8ad0b2b32b43dd7fc62bec80ce098bbe404ee50f26e2b3c3932886eeb817d77ec68e171b1b32486b21e4002e1328709fde464d013f4688b6073bd5c8c05bace8a717d467f0f0d46b5af8b01c407f089386d5613b4c2469", @ANYRESOCT, @ANYRES64], 0x171) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x149001) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) 12:09:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:20 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:20 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'team_slave_0'}, 0xf) 12:09:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) 12:09:22 executing program 5: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)={0x1}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) clone3(&(0x7f0000000480)={0x1801000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x20}, &(0x7f0000000140)=""/93, 0x5d, &(0x7f00000003c0)=""/149, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) wait4(r1, &(0x7f0000000500), 0x2, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) write$midi(r0, &(0x7f0000000280)="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", 0x136) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="737906746e6c31000000000000000000", @ANYRES32=r2, @ANYBLOB="000100100000008000000002431f004c0066000009049078e0000001e0000001890f77ffffffffe0000001ac1e0001891381e0000002ac141410ac1e010164010102940400000082048e00830b9200"/88]}) getrusage(0x0, &(0x7f0000000780)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r3, 0x4, 0x20, 0x9, 0x3, 0x40, @ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x1, 0x4, 0x2}}) 12:09:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) 12:09:22 executing program 0: umount2(&(0x7f0000000080)='.\x00', 0x1000000) 12:09:22 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:22 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:22 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local, 0x0, 0xa00}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000002e80), 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 12:09:22 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x8924, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b74294b3a19a87dbe65fc24c0c5df66a9bff52"}) 12:09:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='projid_map\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) dup3(r1, r0, 0x0) 12:09:22 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:23 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000002ac0)) 12:09:23 executing program 4: r0 = getpid() r1 = getpid() r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12:09:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:23 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="94", 0x1}], 0x1}], 0x1, 0x0) 12:09:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:24 executing program 5: r0 = socket(0x29, 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x40000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 12:09:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000002c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 12:09:24 executing program 3: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x3, 0x1, 0x0, 0x8, 0x6d90, 0x40}, 0xffffffffffffffff, 0x0, r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) [ 415.923765][T17952] virtio-fs: tag <(null)> not found [ 415.975122][T17956] virtio-fs: tag <(null)> not found 12:09:24 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0x4e, 0xd2, 0x0, 0x12d1, 0xcc32, 0xf093, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x19}}]}}]}}, 0x0) 12:09:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="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"}) 12:09:25 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 416.840924][ T7805] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 417.161084][ T7805] usb 6-1: device descriptor read/64, error 18 [ 417.560966][ T7805] usb 6-1: device descriptor read/64, error 18 [ 417.830956][ T7805] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 418.118112][ T7805] usb 6-1: device descriptor read/64, error 18 12:09:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x38) 12:09:26 executing program 0: socket(0x0, 0x80002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmmsg$inet6(r0, &(0x7f0000006500)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="380d1d2dcaff54b38f58ab6ef564ffa06b8b639d462966ecb754ca8b821ce4e959fc00a5428c9e4fb240596c628fc575082f4579fb139a7ba4065ef2e4b7b6ae90b4eda6d5c92bc36c92e7830b45bd1904a3274b3282ef7ecd00000080000000005fd6de0b44328cc66dd95112d6c4f27d5ed4407aad64654495f3856893c12c", 0x80}], 0x1}}], 0x1, 0x0) 12:09:26 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12:09:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0xc32f, &(0x7f0000001140)=0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) write$cgroup_type(r2, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x15) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000200)=@v3={0x3000000, [{0x9}]}, 0x18, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x784, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) write$FUSE_ATTR(r4, &(0x7f0000000200)={0x78}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc00004}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x140b, 0x100, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x41) [ 418.553018][ T7805] usb 6-1: device descriptor read/64, error 18 [ 418.681490][ T7805] usb usb6-port1: attempt power cycle 12:09:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000006000000e951e192e904000000ed3f6b00060000000e0001006e6574"], 0x44}}, 0x0) 12:09:27 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, &(0x7f0000001400)) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_mtu=0x531101}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 12:09:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:09:27 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 12:09:27 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff3000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000fed000/0x10000)=nil, 0x10000}) 12:09:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, r1, 0x735, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IE={0x5c, 0x2a, "7c54420dea70cc05d76917d75d52024108ffd9b017a398b8f7ae1f3d03148893982a6b56fe26bf15e17273a83d0352dd38a8824be33ffa52c56ee951e089faf6eeb35cc4dfb9cc076b6533e825c65eba795f97e1ee54ac79"}]}, 0x70}}, 0x0) 12:09:28 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:09:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, r1, 0x735, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IE={0x5c, 0x2a, "7c54420dea70cc05d76917d75d52024108ffd9b017a398b8f7ae1f3d03148893982a6b56fe26bf15e17273a83d0352dd38a8824be33ffa52c56ee951e089faf6eeb35cc4dfb9cc076b6533e825c65eba795f97e1ee54ac79"}]}, 0x70}}, 0x0) 12:09:28 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xcca) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) 12:09:28 executing program 3: socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x7fff, "43e849", 0x9, 0x3f}) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000040)="fb7f14559ae45153682c751eda41dc9ec8fc3eab08df04ef46dc2195559e4c65a9cd7874bb47152e6840a905cdc5e180d87be3d802f1213355d381570235706f5a390d936fc7bcff0bcef5eeff1201013aa94ce94eb197d4fd44225a06749beac720157314a05837e09757b98bc047b0838d862fd4ab0d90b22fda6cd9688d933bfc031ee6b1f9eac1e876c2bc057a8e9cac838c6a328f65a13665d057ef164af17341a43b9763b6b747a649ad8e09c6f3b60f55cb619ee0fa7301fe6afc779866e68783f469d43bfcd44586bb0d6ceeb9a2c92b80065a772573d6d256fa62e02a5e599785a6f96bbb40d608930f3c98927c3a07f1b2f5b76f34ecc250a2e24986aab25c77d5bb2ee430f7756c3a91dad11140b10f353438efe5fc824ae40f2ea7124da5cd4fb06f4c7032d474b343f18520d0cee80b7965822db5ea2ef16d45141b8a51269d400700d7a99a91bc31666cfafff234f8bfed79a54f650670c1373bf5cbe087064883db61e0e2402facd84af1eb5806201ec738113184cc668eacb39fb09dcc700f3086253e1f483ad81b8289aa1a1e9e01009d8b03a3e0f8fe87d9f06523ba7b0ad2df1c991ad23894b0d165a9fd85950e71c3bbe1d8432766c7132d09a75c4f5b7fa8c83c9fdec6d7812b24134f56ec9795dc9c37dfa45f1e4f135ac69aaf37fd5d5d2edd3e3dc5d191883e66089eb7590c2c2dfb6bca802c2ec0a407b967a83283d42b787377ada67717da8428852fb283deae399260b8f5217c350553e772afe3a598921d5c743a42cf58132bd334954b1008cd18a12dc60eac6aaaaa5f2cf4c297be7316f432c5dd527e4fb7d7fed3be786f42eb83bee82ce580509ad6854b2819efc32aa6e30e8a3479a1d4c08cf68e60fdf736808d9556a5c365a69f1b4e8707e216fe4aaee767279777b38eeea46403077d4154b8aa3254901c1ae2da9d0dcf937902b5e2f9383126d9b4d5515007170176a08e6d225cd0e7d9bd9eddccee081a746c988bd7ea559a5cde5269e00eaf833415076b59127e2f43fa014fd7597d535ef3e51fedbbfb96e731cc3e9d9e93c2fe352e5310c304cae3a29f016e1154d377a8f9d44720e5cff9d21b06892cf7d629e370ef460c5e9f5e78915a6aae582434f4a0cda7afc34660855942e9d5567b6be817bf5465a128ef99d1cc9f508be7116127ddc5588ae7729c5c55e463f78481c3b8d67b4c8804dac78c932cb7ee70e4af261599ba3d26315fcf0abd3b0e16720e0eb612b69d811f6f2471fb42ff92d16beac47f1b7776914db21980d1b4bccc45efb8f3fc83b2e89e51cff5a43bada20ffe851f162d53825012a2c717b21ff880737719352efd0761ba1dd52c69f7e3b7d03b456c4dbb3fdfddbca405ff3a9f41d327388b890638284f629a6633eda27d50df87dc9b294a6198025074e481f63fece3a7c7ac60b9a1add6117cba2ddcd06dc204e228adc76837ad7332cc35acbad0609c5b4dee775622768531f5347507a94771723172eeb46429ef464b8f03d953bf1cba0a8ae010bd569f460334baa8aee851dda308318d512bd9cc7d8652dbe2540c85fd91a0d9448fd9b88e70f8f9715f4e92270c2d60f63f160b66270345671b3615ef427919d17fee62d4a034cf8249f9e10fb1acf3a4b9bc0c4bcdab7298b0d22c852220f17aa6dc189027d2c077b595467ad369c09d248d6d137e9826cee6b105967ded59d65ecbe10676499f6381024dafcfd1c7eeb1ab3529602e64446591eb30b262dffa2c43abe71639e9efba8f5f2201b9c616f4c69d6db12ff635fa12dc6cb8432c3b36101f075d84ac21e51bd8ed85148ef3fdde287e30cd6b3e8f1fd4c9016a6546049c7b4d41a14446a84af1f6a9cdc9bf028434b52a4a7d73035aefa1746cef033c826d99aa82e9f9417a1751f1bbad4e5bf533090169e8fcbeac55a787aad18fc03c2da0f52f4cb02974f255f764bbdfcdbcd08eb85468e8b86bad328584bfba61ee6f2f9b1ca3120fcbfa5c50c8d35bbb5445de3f894b8fd7ae9a0afe4a7dbf440a47f45c2ed3505e095d13f8be7d475e0ad39d12eb8b97f2011e4b559af653cadc7cdef82ebe3b67a0ef2bc8ddbd639499d9f87984585576389fcfce3ff539e9f4abc8facc1829c4800962c20015f87bfdf768b45b28a2e3b612120b9f0b960b98024b10c02d7c55113f2fef0856cf034dc23f00def7243b1b4ad5f5e7cfacc929482062e89da684fc6c9009e14821ea0a9cb6ec83746c7e33d3f72ed21c2c5969b82257a79a5dfadff518ebd605f254b067ef90e96ecca00826770b93688360d7b060e6d1d6ab00a1d4036fefe27f02f209624cb000ac4c85c2e0cc4d873265ffb10504bffeaf5a2a9d1f2039e9e8aaa839fe337470622ec9d5843c60862afa02577999e83734e0b452a23c8c9ca9991088ce473810275de406eeb4d1030c20169944950b5ceae685282a78b591356ad542a4e13e96da727d8f32a5e1ae3d52f66e7a2c4807a14f5747517bc1e3aff5f63f78746d65c8fcf0062b82b47abcd4948e1f3a75d2de372a31e57ccb3d302479ac81e3368f142d5aa8bd1d48dfb49ae55439889f42792688ca19a7bcd58058fe53a94ec62c0338702d1ff3e8dc746496f1b2efd6722ffbde56d5b1f5e810f2f7d76a524edd956fd64cad5b18113b0373b8c4733c0a54e879f6ac8c998766628855e12e511066cad56ad66ed436e71b7e3f4a0491f6a8f73e7b6bae960d89b799b4db4f8233010949cc128c103d256b1841e3811c6eb2dd451ac740e9afe11f2d0b59e281e4f6e0365cd94d0d1c5ce6c6b07dfe93e83a9c4f39fd5270b1d1c9f1a55198fdf4155693b7adaf3770f224d905dec08451a5a56dd9dffb783c699197d5ad0378d7de50ea62469bf98127b93cea9ba647bdc4d25904fee9fffbd8c6a831a00ac60dc5df55758680721e070ca057a5afa172f6b41c86709adbac734e74ddcdbee1f5b8b1c65799599cf5bf7403c74d7567f0f18441d2ef2008e157725cfea60e187856e60ef06174bc8bf4a9f542e72b80ca32a7af063bb6b1e71589c6b2b8a36a61456f324eeb945b465090aaa9b7c9ccf89463376673b8b7f621f1b8342ccd79fd75dccb36a93dcbc266f370bc0c83eadf2ee0ff62b7e8910391d6d207d2cdefe90fba04bd255ba96d0fb9cf8ef22bb92ce597b539cbc8308c1e4eef29fd2dfe4035bf5e30064bd9a216d17bf6aa1196ad4e3ff3b2d8e799201b9a5dd7385231e7806f7af2154081a2376ce9106e953badb793a28d9ed338a21b38420b31d3b66f1aa8d848b8cfed0c1cef5fecc6ac67b0f34a0880ed3c12a889dd4f4539e4457ce474444e2b524819fe6abcee0a15c583440ff817d35b3c4cebb6b37b3bbadb2fede18a6c54a49ac4b6eb017b391be1f6b08017f46c2db2ecb06e5676261dba94f78d4f6c2483956682faddff3b57e5e387ce3a4cf5a869dc9e4fe353f77ef6cf31049156595c942c5bb7e36a230240a8f95332a0e79f26dcb55ecada0f5a60804f042cadbecffacd06058e977a0fd844d188b1b149bfe210cf970fb1bc443b20f7ba028ca8a0ff17a89c8e392d8e24a637733acade9c58635ab08656462d4498b7980b063ee925bf8c33dc415855c1e3c5c6894232ffef63c2657742f3f07a318eedf07bdaabef9488e1e9bf09c5bcf00b6ae2d69b2881bfd60d95b184c4a07c068702b63025ad04cc62e32d06be35ea21524d2449a38fb2ab953f6af183eda4d32e713fb3cddd640627a04f2182789f0246e58956549f738b5e1ca186ff28a6d606f69e74df4cb9f951c5fb26c88fb1491413c006002f09b5f6d8abbd1d4d9d954d26d3a5929e2951a11731c95e6fe75472d68076623eeb9eb8b689793c7b978f08449414a42b1b86aaa1b1068f259227fe0b686470b70f56ccb8473ae4701eb404d69d45a40633a17940c67a883ccf832e2176445f97200960d0ba07a68c998302a9e408aa5fbf57ca6d92da300c7378b6fac3eed0ecb6965f3aae0e483ed09eca83af9ddc6cfe1c92f3696dac1c5fc94427bc440a380de3780ae6ed0705f1b06a9ae82275cb9790510440c21b71efbcfa3ada9ec946c89f2a391c8037a5b5599c446364cb46c61f94a6ae002c31a53875bb1012eb6ff89c4832d222d8f29348da8f9e594361bb63ea4be34dedb01cf1de87e4db8788d5974996fee06b4474258d633e124f192d7371e5e3c083a091ac8d65fa2fe2df89df051c52eca48e5cc8dedf2b241127f4d7a033efa55a322b17a7fcb1c1c691db89dc21c7cfc0231d20766b30ebfad63a0a34ccf39f20c8f7edee50cc45ae81a48384cd384570586dd414857bd3d88bf2d7eccbf4bd474f86ecb5a291842f86141e21a57ced3ab05c78a564b993e99ef3bb25f7b5bee78d1058507bcd6f80ec3c962b43b0ada9cc141accd0cf5d4322e1a971b2387511ae3d65eb3479857ad9254816a84a6d07b32888c80079c4c389d2fb7c6b9271421b6b7ce3df7662542e092b96d7999e7a5ebf9228f196bb027ff8d986083c97dfc9fdfd2ab12ac7da0237c9f89cd0a7ee6ab7a4f395b709888b54377a779cbc155665c672b2ade2a102c4c3b2dcd767ae2773c01ecd18c70c46e5b17f543ed5644490a3ae683580c484b253f441baefce0009310d4571900d808a2c4fd8478f5e716c31333671311a038b31e3df8a10ecbd5d4514c2f65fe4d7d2459ab69697b457ace0ab95fbdd11c42aaa8d76443038dedf8e3049b735af4a0cbfbfd3ab0b13cdd75b830dc8294bf8f5c0746c329a2e0541142fedc07275b38db5d7f2bd38ea7850423b43152ff4632b417a2cb9df02aa313f0fd03c23e43a30f0b5a9827b7a7a2cdf828bef49b07a1f32362b7adbaf12b93500937c52cf524a9b1f004545bbd92804bae535a1f40f6271e46cf5449dd079689812d39f92729388ce395feb18dd26b1dece338150502b7f7197f8d462cbb0020ad61779286821596960dc0398535fe97c2fe0033704e32de4527717c7f78c6b324cc179e280e79d9ed78fa8a0ebf1e8b8f120f818e218d4c24eb8b2d4d396fa957249c14a4876fd16c7a00db17e6aebab0ef1d83e6eb6d762eca23b2611208bc0d6ba0d04059bcade7d1c9f6364f6868be20a7ec78ad4e8e087a26b2f30ed4ec6b4f9c2008503298d670b526226f22f65fc336ef3193612830f372e90584d65c7b616eebbe73b180d6ee9012f8897e7e2a1546caaf95851953197bc2bd6f2d2433c1ed8e8a4364429ece96268bf6b0ab0cd02fd3f0be876dfcfaeee12cff4f5d58a4278c3d5b9d4231ce207f2da36659c12984e78b8baa93019a7679f4165efb25892f70a224ca8eb04083aefce4793e181386ba73294b83103ff566258e688db12ebe28330de693620e956e0c5f5b61d5c139c7c1a4ae0396e7f7d12578fe57d70fba9846d19934c5f0bcd093a9909ac4354eac30f0c28d9ed2e4e35253f89b8c3d5fe1e231f362ba1c1077fb7b4cff3f6577e91b758900c986deb9f6c9504ccfd7218ff52b723c1271601dc9b62208437e514c58cb6e6081778f80fc06b07f25b5b1746c55fd0c819a7ec863d39f8fac39427b2e692c98f529f22e00e16c8309ad603b6b6b81825413caa89033276e00c6669d0dd65aab15c861767a9d49af7703f77b0ccc1c0689d08996762112f38eab936dcee173300ddfbe4b1241a4535d9357d89a8a96f53b29421e1cb20e87aa1a243712a5583d365dfb84da90447265ed408bdf2cdb3b87648ba308a5da06d10b3dff1e6a1c3d62b6486275a2d8dc9f0fc") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000001040)="b1f14bfab0ed8b2a44336d99b93ca4dfc4bc7d52e5697589b6f1c7a1950fbbb898c70d0202510388a3b889ff0b22e61cb56f39ff7954f7689b400dd691544ef6edf58bfa17267a7179daead47396f793cdf9305c3b8acdaea924297679ab1715e3349985fd9dc2bd6b54cdfda7c8f9cfb5d0992d4eb07046abf10386d794a2aa3b189e8e8a9f989fc7ac6bda7651f82bd9ce66efd406f211bdaee93d5ad939962bdf3291e7df44cfa0cb99f1b4c7d9e64ed875") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)) r2 = socket(0x2, 0x80000, 0x0) sendto$isdn(r2, 0x0, 0x0, 0x4040018, &(0x7f0000001140)={0x22, 0x2, 0x73, 0x16, 0x7f}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000001180)={0xffffffffffffffff, 0x401, "45a8fc", 0x1, 0x9}) socketpair(0x5, 0x4, 0x1f, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x64, 0x0, 0x200, 0xffffff01, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40894}, 0x4004000) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048080}, 0x81) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000001680)) 12:09:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, r1, 0x735, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IE={0x5c, 0x2a, "7c54420dea70cc05d76917d75d52024108ffd9b017a398b8f7ae1f3d03148893982a6b56fe26bf15e17273a83d0352dd38a8824be33ffa52c56ee951e089faf6eeb35cc4dfb9cc076b6533e825c65eba795f97e1ee54ac79"}]}, 0x70}}, 0x0) 12:09:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x4}}]}, 0x30}}, 0x0) 12:09:29 executing program 3: socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, r1, 0x735, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IE={0x5c, 0x2a, "7c54420dea70cc05d76917d75d52024108ffd9b017a398b8f7ae1f3d03148893982a6b56fe26bf15e17273a83d0352dd38a8824be33ffa52c56ee951e089faf6eeb35cc4dfb9cc076b6533e825c65eba795f97e1ee54ac79"}]}, 0x70}}, 0x0) 12:09:29 executing program 3: socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:29 executing program 4: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @local, 0x8}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000240)={r1}, 0x8) 12:09:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:09:29 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) 12:09:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:30 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:30 executing program 5: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8c"}}, 0x119) r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x141401) write$hidraw(r0, &(0x7f00000004c0)='g', 0x1) 12:09:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x2, 0x82031, 0xffffffffffffffff, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7]}) r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001900)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000003c0)="9c39d2d17d14bdc422eb88b55701b69d5869de0c8c", 0x15}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x44000}, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) 12:09:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000ec0)=""/4096, 0x1000) 12:09:30 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5008, 0x0) 12:09:30 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xeffdffff, 0x0, 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x3c0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40002022) 12:09:30 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 12:09:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0xfa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:09:30 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:31 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:31 executing program 3: perf_event_open(&(0x7f0000001840)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:31 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0}) 12:09:31 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:31 executing program 3: perf_event_open(&(0x7f0000001840)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 12:09:31 executing program 3: perf_event_open(&(0x7f0000001840)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:31 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0xc6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003040)='ip6tnl0\x00', 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 12:09:31 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:33 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:33 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:33 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 12:09:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 12:09:33 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:33 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:33 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:33 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:33 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:33 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x7c}}, 0x0) 12:09:33 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:34 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:34 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:34 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x5f2eafa0, 0x8, &(0x7f0000000100)}) 12:09:34 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:34 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:34 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3}}) 12:09:34 executing program 0: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x5d, 0x4800003a, 0xffffffffffffff9c, &(0x7f0000000000)='.\x00') fanotify_mark(r0, 0x5e, 0x4800003a, 0xffffffffffffff9c, &(0x7f0000000000)='.\x00') 12:09:34 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:34 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) close(r0) 12:09:34 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:34 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x1000)=nil, 0x5000) 12:09:34 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) close(r0) 12:09:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:35 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x80, 0x7, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0xb7, 0x0, 0x3, 0x0, 0x0, 0x2}, r0, 0xb, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x38, 0x1, 0x3, 0x2, 0x0, 0x788, 0x42080, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x3, 0x80}, 0x10100, 0x9, 0x401, 0x4, 0x5, 0x1, 0x2}, 0xffffffffffffffff, 0x0, r2, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x1, 0x3}, 'port1\x00', 0x36, 0x4002e, 0x5, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0xfff, 0x7, 0x0, 0x100}, {0x1, 0x8, 0xc0, 0x8}, {0x8}, {0x6, 0x5, 0x0, 0x4}, {0x2, 0x17, 0x3f, 0x8be7}, {0xd0c, 0x6, 0x12, 0x6}, {0x2, 0x18, 0x46}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000002c0)={0x0, 0xfff, 0x905}) 12:09:35 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x1000)=nil, 0x5000) 12:09:35 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:35 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) close(r0) 12:09:35 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:35 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:35 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(0xffffffffffffffff) 12:09:35 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x1000)=nil, 0x5000) 12:09:35 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:35 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(0xffffffffffffffff) [ 427.941454][ T27] audit: type=1326 audit(1599739776.402:25): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18324 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 [ 427.996684][ T27] audit: type=1326 audit(1599739776.402:26): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18324 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 428.019685][ T27] audit: type=1326 audit(1599739776.402:27): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18324 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 12:09:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:36 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) [ 428.045408][ T27] audit: type=1326 audit(1599739776.402:28): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18324 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45d5b9 code=0x7fc00000 [ 428.070763][ T27] audit: type=1326 audit(1599739776.522:29): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18324 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 12:09:36 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 12:09:36 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:36 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(0xffffffffffffffff) 12:09:36 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x1000)=nil, 0x5000) 12:09:36 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:36 executing program 0: ioperm(0x0, 0x2, 0x8001) getrandom(0x0, 0x0, 0x0) 12:09:36 executing program 4: socket$inet6(0xa, 0x80001, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:36 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:36 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:36 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) 12:09:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:37 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, r1) select(0x40, &(0x7f0000001780), 0x0, 0x0, &(0x7f0000001840)={0x77359400}) 12:09:37 executing program 5: r0 = syz_open_dev$video(0x0, 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:37 executing program 4: socket$inet6(0xa, 0x80001, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:37 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:37 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) 12:09:37 executing program 5: r0 = syz_open_dev$video(0x0, 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:37 executing program 4: socket$inet6(0xa, 0x80001, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:37 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:37 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) 12:09:37 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:37 executing program 5: r0 = syz_open_dev$video(0x0, 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:38 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:38 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:38 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x5000) 12:09:38 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:38 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14}}, 0x6c}}, 0x0) 12:09:38 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:38 executing program 0: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x1, 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') 12:09:38 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:38 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x5000) 12:09:38 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:38 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:39 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x4040, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) 12:09:39 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:39 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:39 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:39 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) [ 430.975063][ T27] audit: type=1800 audit(1599739779.432:30): pid=18521 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16369 res=0 errno=0 [ 431.038540][T18521] overlayfs: './file0' not a directory [ 431.074570][ T27] audit: type=1800 audit(1599739779.532:31): pid=18521 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16369 res=0 errno=0 12:09:39 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x5000) 12:09:39 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:39 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:39 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x7fff}]}}}]}, 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) 12:09:39 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:39 executing program 4: socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:40 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:40 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:40 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:40 executing program 4: socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:40 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(0xffffffffffffffff, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:40 executing program 4: socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) [ 432.011646][T18552] syz-executor.0 (18552) used greatest stack depth: 23584 bytes left 12:09:40 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x5000) 12:09:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x7fff}]}}}]}, 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) 12:09:40 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0x0) 12:09:40 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:40 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(0xffffffffffffffff, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:40 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0x0) 12:09:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(0xffffffffffffffff, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(r0) 12:09:41 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0x0) 12:09:41 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:41 executing program 0: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) getpgid(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x400448c9, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x400448ca, 0x0) 12:09:41 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:41 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x0) 12:09:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, 0x0, 0x0) close(r0) 12:09:41 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000}, 0x0) 12:09:41 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44800) 12:09:41 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:41 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) [ 433.226216][T18662] overlayfs: failed to resolve './file1': -2 [ 433.299619][T18655] overlayfs: workdir and upperdir must reside under the same mount 12:09:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, 0x0, 0x0) close(r0) 12:09:42 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x0) 12:09:42 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000}, 0x0) 12:09:42 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000080)="282526185e3dcc1d9e08fe66e991de60") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) 12:09:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, 0x0, 0x0) close(r0) 12:09:42 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000}, 0x0) 12:09:42 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:42 executing program 2: select(0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x0) 12:09:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080), 0x0) close(r0) 12:09:42 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:43 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x4000000}, 0x0) 12:09:43 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x4000000000000000}, 0x0) 12:09:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080), 0x0) close(r0) 12:09:43 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0) gettid() r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000880)='cpu&3\x00\x00\x00\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x0ff\xf0\xd2\x9ba\xfd\xe8eq*\xeb\x00\xb5x\x7fV-W\xeb\x9c\xf5\xe5 d\x99]O\x13\x99uJ\xbd\xefe\x83\xc2\x17~\x9e\\\xac\x1f\x93\x00\x00\x00\x80\x00)\x8e8P2g\x10\x19\xad\x92P\xea\x8f\xd4\x16\xec!6\x81\x01\xe6\x9abl\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\x00\x00\x00\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x0ff\xf0\xd2\x9ba\xfd\xe8eq*\xeb\x00\xb5x\x7fV-W\xeb\x9c\xf5\xe5 d\x99]O\x13\x99uJ\xbd\xefe\x83\xc2\x17~\x9e\\\xac\x1f\x93\x00\x00\x00\x80\x00)\x8e8P2g\x10\x19\xad\x92P\xea\x8f\xd4\x16\xec!6\x81\x01\xe6\x9abl\x00') 12:09:43 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x4000000000000000}, 0x0) 12:09:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080), 0x0) close(r0) 12:09:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0) gettid() r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000880)='cpu&3\x00\x00\x00\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x0ff\xf0\xd2\x9ba\xfd\xe8eq*\xeb\x00\xb5x\x7fV-W\xeb\x9c\xf5\xe5 d\x99]O\x13\x99uJ\xbd\xefe\x83\xc2\x17~\x9e\\\xac\x1f\x93\x00\x00\x00\x80\x00)\x8e8P2g\x10\x19\xad\x92P\xea\x8f\xd4\x16\xec!6\x81\x01\xe6\x9abl\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\x00\x00\x00\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x0ff\xf0\xd2\x9ba\xfd\xe8eq*\xeb\x00\xb5x\x7fV-W\xeb\x9c\xf5\xe5 d\x99]O\x13\x99uJ\xbd\xefe\x83\xc2\x17~\x9e\\\xac\x1f\x93\x00\x00\x00\x80\x00)\x8e8P2g\x10\x19\xad\x92P\xea\x8f\xd4\x16\xec!6\x81\x01\xe6\x9abl\x00') [ 435.036375][T18746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:09:43 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x4000000000000000}, 0x0) 12:09:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf42", 0x4) close(r0) [ 435.187529][T18746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.216521][T18746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:09:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000012c0), 0x100000000000017e, 0x10, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 12:09:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:44 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf42", 0x4) close(r0) 12:09:44 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:44 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={r3, 0x1, r4, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000002c0)={r3}) 12:09:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 12:09:44 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf42", 0x4) close(r0) 12:09:44 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:44 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:44 executing program 0: r0 = socket(0x1d, 0x2, 0x2) connect$nfc_raw(r0, &(0x7f00000001c0)={0x27, 0xffff0300}, 0x10) 12:09:44 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf424779", 0x6) close(r0) 12:09:44 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) [ 436.894227][ T27] audit: type=1326 audit(1599739785.352:32): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18794 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 [ 436.917378][ T27] audit: type=1326 audit(1599739785.352:33): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18794 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 436.942553][ T27] audit: type=1326 audit(1599739785.352:34): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18794 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 436.979634][ T27] audit: type=1326 audit(1599739785.352:35): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18794 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45d5b9 code=0x7fc00000 [ 437.039557][ T27] audit: type=1326 audit(1599739785.492:36): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18794 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 12:09:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:09:45 executing program 0: set_mempolicy(0x3, &(0x7f0000002700)=0x80000001, 0x5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) open(&(0x7f0000000000)='./bus/file0\x00', 0xf0, 0x0) 12:09:45 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:45 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x1, 0x83, 0x80, 0xf}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 12:09:45 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf424779", 0x6) close(r0) 12:09:45 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) [ 437.420030][T18853] overlayfs: filesystem on './bus' not supported as upperdir 12:09:45 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:45 executing program 0: r0 = socket(0x1d, 0x3, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) setsockopt$inet6_udp_int(r0, 0x65, 0x4, 0x0, 0x4) 12:09:45 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x0, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:46 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf424779", 0x6) close(r0) 12:09:46 executing program 2: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x10e1b) sendto$l2tp6(r4, &(0x7f0000000280)="1199a3b56a6c8bdc3a0df3caf543dc0f3dc036e305814f6800d6128451eecfb998db82a5cdea6f24192ec642caed9595401e03ad9221e572712aaf276f05aff661c96e132d389c5e5ce9cf6b", 0x4c, 0x14000895, &(0x7f0000000200)={0xa, 0x0, 0xfffffff8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x3}, 0x20) 12:09:46 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f", 0x7) close(r0) 12:09:46 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:46 executing program 2: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000240)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,index=on']) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000680), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x19c}}, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syncfs(r0) creat(0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x24) syncfs(0xffffffffffffffff) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) 12:09:46 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x0, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:46 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 12:09:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x7d, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x18) 12:09:46 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:47 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f", 0x7) close(r0) [ 438.511346][T18922] overlayfs: filesystem on './file1' not supported as upperdir 12:09:47 executing program 3: perf_event_open(&(0x7f0000001840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x0, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 12:09:47 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:47 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x0, 0x11, r0, 0x0) 12:09:47 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f", 0x7) close(r0) 12:09:47 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:47 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 12:09:47 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(0xffffffffffffffff) 12:09:47 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:47 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 12:09:47 executing program 2: setrlimit(0x7, &(0x7f0000000080)) socket$nl_rdma(0x10, 0x3, 0x14) 12:09:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='(\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 12:09:47 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:47 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(0xffffffffffffffff) 12:09:47 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0d05605, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xff, 0x0, 0x1a}, 0xf, 0x0, @offset, 0x101, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x43, 0x0, 0x1, 0x6, 0x0, 0xdd3, 0x11023, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x10020, 0x0, 0x5, 0x9, 0x7b4, 0x0, 0x1f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xfff0000000000000) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x541b, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7ff) r4 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0xa02) syz_open_dev$video4linux(&(0x7f0000000480)='/dev/v4l-subdev#\x00', 0x7, 0x8000) write$char_raw(r4, &(0x7f0000003000)={'0'}, 0xfffffdef) ioctl$CHAR_RAW_ZEROOUT(r4, 0x127f, &(0x7f0000000440)={0x100000000, 0x1}) r5 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0xa02) write$char_raw(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052c22ed60000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000"/516], 0xfffffdef) ioctl$CHAR_RAW_FRASET(r5, 0x1264, &(0x7f0000000180)=0x6) 12:09:48 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) write(r0, &(0x7f0000000080)="b0a2bf4247793f72", 0x8) close(0xffffffffffffffff) 12:09:48 executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:09:48 executing program 3: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x89a0, &(0x7f00000012c0)) 12:09:48 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ff01000000000000120d89"]) 12:09:48 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0xf5) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18}, 0x18) 12:09:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 12:09:49 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 12:09:49 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:49 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002200)='/dev/nullb0\x00', 0x109e01, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) write$FUSE_ENTRY(r0, &(0x7f0000000000)={0x90}, 0x90) 12:09:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblc\x00', 0x0, 0x8, 0x10000004}, 0x2c) 12:09:49 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000016c0)) 12:09:49 executing program 3: socket(0xa, 0x6, 0x0) 12:09:49 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblc\x00', 0x0, 0x8, 0x10000004}, 0x2c) 12:09:49 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0xdb) 12:09:49 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x1d, 0x0, 0x4f4000) 12:09:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$rds(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001640)={0x0, 0x3c0, "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"}, &(0x7f0000002680)=0x3c8) 12:09:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:09:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblc\x00', 0x0, 0x8, 0x10000004}, 0x2c) 12:09:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000200)="660f383a160f01cb48b823f0490c6b858d330f23c80f21f8350000b0000f23f8430f23b267420f781b66baa000ecb9ea0a0000b8b9000000ba000000000f30410f070f23be64470fc79d00600000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 12:09:50 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r1, r0, 0x0, 0x8400fffffffa) r2 = syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r3, r2, 0x0, 0x8400fffffffa) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r5, r4, 0x0, 0x8400fffffffa) r6 = dup2(r2, r5) write$apparmor_exec(r6, 0x0, 0x0) 12:09:50 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 12:09:50 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a400"}, 0x0, 0x0, @userptr}) ioctl$VIDIOC_DQBUF(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a400"}, 0x0, 0x0, @userptr}) 12:09:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblc\x00', 0x0, 0x8, 0x10000004}, 0x2c) 12:09:50 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r1, r0, 0x0, 0x8400fffffffa) r2 = syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r3, r2, 0x0, 0x8400fffffffa) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r5, r4, 0x0, 0x8400fffffffa) r6 = dup2(r2, r5) write$apparmor_exec(r6, 0x0, 0x0) 12:09:50 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:50 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 12:09:51 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:09:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[{&(0x7f00000006c0)="90", 0x1}, {&(0x7f0000000740)="1e", 0x1, 0x8000}, {&(0x7f0000001740)="8b87f597b432a3da563b1d994c759cfffc388e6498af058e1544c1f903b41c1f214181f1b00cb4880e8104e271a1dcc73298c8253e696abd2de22af1790b5e2d1738c340569f041bf4fe5d98d413f692933caa6339f6fce46ebc7c5d79fa7ce3b5fd5a40031de884e609efb97afaa7e1b9914b33f70756e3edc0968917551766c2838a6f6a678e45bb221ff7c152daefc39e11607f11cda7b33e02046d80b5ad4aa5dd227dfe5bf1d5bdfa5c85bb00e65cda1b3ad4b834543600389e8c03aa6b628c40c0e4b4efe8214a14df4a8afee58d0bb22afe", 0xd5}], 0x0, 0x0) 12:09:51 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000200)="660f383a160f01cb48b823f0490c6b858d330f23c80f21f8350000b0000f23f8430f23b267420f781b66baa000ecb9ea0a0000b8b9000000ba000000000f30410f070f23be64470fc79d00600000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 12:09:51 executing program 3: r0 = open(&(0x7f0000000580)='./file0\x00', 0x101042, 0x0) r1 = open(&(0x7f0000000580)='./file0\x00', 0x101042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000b40)=ANY=[], 0x290) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[], 0xfdef) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[], 0x290) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[], 0xfdef) read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020) write$hidraw(r0, &(0x7f0000000680)="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", 0xfdef) 12:09:51 executing program 0: r0 = socket(0x15, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e1, &(0x7f0000000040)) 12:09:51 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:51 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 12:09:51 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00"/71], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:51 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@get={0xe0, 0x13, 0x84e93376fb441163, 0x0, 0x0, {{'aegis128\x00'}}}, 0xe0}}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 12:09:51 executing program 3: r0 = socket$can_raw(0x2, 0xa, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001400)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2tp={0x2, 0x0, @rand_addr, 0x2}, @xdp={0x2c, 0x0, 0x0, 0x23}, 0xec, 0x0, 0x0, 0x0, 0x3, &(0x7f00000013c0)='wg0\x00', 0x600, 0x0, 0x9}) 12:09:52 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:09:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000200)="660f383a160f01cb48b823f0490c6b858d330f23c80f21f8350000b0000f23f8430f23b267420f781b66baa000ecb9ea0a0000b8b9000000ba000000000f30410f070f23be64470fc79d00600000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 12:09:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$usbmon(&(0x7f0000001000/0x1000)=nil, 0x149a000, 0x0, 0x11, r0, 0x0) 12:09:52 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00"/71], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:52 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r0, &(0x7f00000017c0), 0x286, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) 12:09:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x11) ftruncate(r0, 0x7) r1 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x32}, &(0x7f0000000100)=""/53, 0x35, &(0x7f0000000140)=""/32, &(0x7f0000000180)=[0x0, r1, 0xffffffffffffffff], 0x3, {r0}}, 0x58) write$qrtrtun(r0, &(0x7f0000001480)="847d64acc993fd117a2ead5d76a1d91619388914f5bbfcf96ad042756109d2b91165caed4d0ccb7be72c7061df6bef51251d6138b4c938fb01558afb1fae5a36e13d60af78f00245ca77c33bb55bea0604ed1f5a8392a68ccd9f13dabc7fc10295cb7934de2e05da900af930e32c677b9455513bc8a57a4eb42fcc1d841a18d89cbfc11229980de01a8a22c268b92de0f7b0ebe34bb4ced7793554b54f2f2221d099596352ac2bb57bdaa5d07a826d93449c0d98badcc968d9b1bbb68b78aa49bbdf1e800d5cf755a4dacd9ec81ac6fa711212607a811adaa453a33c1d247a469b0e73e7c0c828455de420c21fc0e7515a36c4494d30967344fa0bdbaf037c1edd7f24a206f50f5edd8b9be2b4bf3e4acda0ddfeedb5e9d6473efd0c6e15992a2db277d90f739400fd33d800800af20e5af189e800d5383773f038b0da1c044445707a8e6260840266c4d2e934d3d91ec9b74e3fef777a2c2ace3bb52de0840b26d2f97d063bfb1a073894afe400af0962bc3f91985776f236dbe698e318a7b580555a272babb87d2f0cc425a833b03d97475c7949e0750d3655c5c42260348b547a31a6553bf6d4a66f2ea121b178e87eb823a70de0b7953f07ad8a451f1855b6baa594107d95968d89e80f50c3cc45aa3f25bfede9260dbd5c11d0fce2eb230218f8d4fb4e89db6363647debc751773fb8dffbb662d4cd9f7ff50a99f78b65a457a05d3f475ba96880224f67a1ee03dc4f74a03805a4cba78ad49f3bfeb72ada74b02ac10d52038aaf1e0f608328aeee31f989f8b6895e51254bbb33ba2cad0f3a3cebb6d3959abffca9b21b95f552dcc2d9b2d3d8db8e77f40ba8cc16795e9c2e6317d2ec89f55ad72cb15607f69e43b0e6ee39033466eb4aaef5b8b6bac16f2caa8c9d64d25e1ea73cc503d269cdd2e18d0ef163a7b9d2ba08e4d40269927bf7f6d4694b264084f9917a1f0c67397873d4b539fcc8c474ba4aea21e2b40eb4f8ed01d613bb47a0383790b6ac9aadaa07f66d398bcc49c65aa66c2a689c68046b524f57fbc94097df1e7a8a29c2e3d3edfc4489ca2502991b31a8e1174fa7444f708d078bd001b1ef5b3a08af345a2336adc712eaaae2fad081fc305b49a575299db902f9293dedd42bacdce7f7562eeb3b34dacac3bc6219ba5121fce64371e76a7b1b0b86e4d4848a1c4d46da95cad858b598b4d2d10164dfa8e337b91a13d7c0680b6147fe7a2c50ccbcc3d03358e39ac6f0312450bb89e99821a672f373992effaac414b3f815aa62d59b454f575717e10817af3d4d70ef6f76660d7da5a33cb8ae213249c936e64ce378500fbfafbe5aa4178d0b72f1dbf13416d0fc08692eebd1ec16cbf48985584c05f22286d11ba95d621b02042f2119f108fc558a804f9fdba633b060e49b30cd0900965da440dbbfb4165d0594517f7f9fcc723f593a6526f767da344029125f76565754ce948fa55c418aa746ffd8cf9e3dbd42338770935794ea08babd6a223d18a5b746257fa525fc4136c2d07935b74b5abbabd7028552097b9b5dcf1c25ef9b66387c81620780afde8432c3d277f6ae5ab81940faa49b902246a19de54daedf43efb212bf20353cbcafa4ee5d1fbf4d805167441eef9e1f56494482adeb2c5557e47e7ee92c58d44ef0e4cb7ef8705b42f90a73add75af47217ff44c84b04dd02894d7053310dbe60ade009d2d6d8d3273b7106c551425b3df2612ade269a021aaafe22e4a5935b43758126e92baa249a5f4cd4ed122b35fd8f132185c0abdab65d6f5451096d212ba7354ee7560d8dfa27d7c34c43f82d8a32bbcd4d48431486bc2a7b1d1934ab5fc735163ccda6168f8ee584412a5306498115808ba519649764af5ef00dfc5b003c5811b93463d5f8c332d04f4188f9ea3d7a4b9a9e38c903736f59e5eba763a397cc06b1347596dfb6a80988edd78261cddf6dcb81ac51d19165e152e44f7e8bf2c89dcd409654546c8c6c15b849732991da50cb4516157b6b8d9c1fe8b35a81700495a4a9d26fc73f4ffa99f4b33ca9d37a0019c4d206251a51bf0b61a92cf5d7f7a827ff041ff1d949b67bb5790c388dfeadc596a70b2b0bd537f6f7769216c7e8c3f7e15833c665d9fecca8b946535820e3fc8570fa7cf1772edc04c268826d7f8297ebce29805a9a2703733cb7eb628d81315fa61c4da9e6326764d0049f7c0dac026418401df0ea154c0930ffa0e84c8e6342c0c99d600b79a32e7293a16eef17b34f399640adbce5d888dfc234fa329c040d8f0358e6fe7f8ffaca3a6baa085cadd57fdc528197e3c0de65288bccebad4b37afe42f6229a8cdb83d6abf6a940519d674aa79398645b033c00b593c0c9b920c113ab58ba9eb615486829070d12742902171f22ef6df4020bb934439a743c1b2021aa491c1db964c780f732dbe3e5b4c64a7f2cb729674dcf5d6df470ea3ec09d6b1f236bbdd7c5bcc84e3275d934ff3279517ccdc5b4a96af2437b01845e4c22b257d083638249edb6de0b3f38665250536f9348082b147cd9cc8d1b2cdcbee5910329c64cc6b60580a32ce57beb0ab83aabf0ef601a6ebd39d6632eb1c12cebadf647375210f36ba0e665a29ea3597a10dd842e61e9a28ef1d6e58cc5e6c0558a7b86c54f133bfdeec502e21096051508830e219ba4cdd420e4ef16632d7cbefb488b248cdf9fdac0c3f1a5bd0328c6202eb79e33e28585d56cf57ce436309e471057976de57696724e052003f6be14d9a339fc92436fcf2be4c93e34181287bc8d495c6c3e6f154302a23ef504c4a9fd99d065fa04962ce246044be241fad30b3257dbd3a34421d8c2b34b49b0f01c11f251bc7962d47a1e29a5f92ea2f6edcdaef993de0f0ef3f8293fef0683f7eb7de6126dcb0383d63ae7405cd45467186af63ee0b772ad947d2bbb9aafc8346a4d31c6a2a627931f6ff165ed92df6a6a3f93cd6d6dfc49ecd2bd12c98c51adf777425b8cc95050bbc2b08e24ca118119c63765ab065a13213be46eeb267867079945ea4cee273651f84099dd8073cc8b5218cd05e26664f415a4e6be1514824d51fb4289b955c5c3f6cd6dc7b045f1530a759f6f3866d9aecffc517adfd8a02cb5b051fea87de9221be6f82939ca0241ec25e4e66362c9b1e12ef044dfbe4a580321e581e01365d6954f091160105ce4a6b7886a24b19e0fc15d13a88fb2fcf3cc6ae2d5986cd8d8ef44ad7fb9457a9edabc36d6df54d77c838cf46a7213b76abce0728eab4ca32526c87d57a51e0cf09e6787d01ab8283bb3b41b11a42985c70220272fdb14cd6db33442891aa18797ad584805420af261aca5d97055af89609d847a6be46b6da2773f129211d3bbac61931217574c205dce9717c884604f57d5cf0f034e1799cdefb68b1c61e489597f6dc62ad6fcedc8ff9bc7d56df81ab31c3703942cc6f5152615c88b3bf72743083d105123aeca88d3a87f42002033993294aaacc166aa5c700c7b09c002308ea3f158dae5db85a57921ddc88eb44599073b4910e44227dc9401c50559e84158899ec6b35610f844fd087c85d05b58d80923872834e5858fa57e604c7eafe1a482005d786b6dd9ce55d37ade1e0055d22648a1ad7d5192ecac8773b28f4bc6f1674f33e25dd7316c536ad08fdf61ab464cfaa5f6e56dbaca7ab8b8efbba1b3663d0c34bd5cbd6ac1b9a5864d6c15e3df63810b9c272addb5ace656d98c77a1db2d06e75ee5f285039ba5e2198fdf72b5304f92110b5f65503cc52b1fb3f25661b590c292d978feda2ac40ae224dcdab83a36e073bf4418a953af540c4fab29e165c25ea6b39cc85b02c8e522f56b9af4a076396a3e066bdd526ffa2d3977629f25fbe4fb68841728813a1e0c2396399639aa5b6c0c21bfe4909faa34c0180a3fd5f5528f72dc92c1ba14858190abf10e6e7c053ba77bc5eef3121cfec322569b61b2894cfc3bb2f35755c4519f79257113ba6737272b6a25b54e0cb4a8104241f81b3f05004703840baccc4360d9a3da135cc11405b3adc6bb6c8c30903c46420dd564caa8836d8c178e614892a8958fc12fe1cd2a25964a0657254f82e6b4ce9b9a57eae0fea75132a150c8fd43e25ecbaf95829b8927bbdc08fd97278cd0012cc81facd9238b291457e6cf3939c96881ecb0ada7a6d6b20e7d4d1593ac648810823c228eb1a5b54f3d1fb9abd91bb765e03e4312113f3f9a155b06f6b1080c87b28d90b66e542a747a387e8d78cf385e34ff3302f251f6ef1c468fe0acefb9040fc52268e9eabf705875082cdadb2666e9998f4667f1c8d772afc188c7ff094b8ecd38da71f4a98772541d2ef6cb99201c5f4ab3968822ffd26f8453c007c9627c955d02acd0d34783068b78eda9597d413c13573813a795d0a2262ba2223d78ea0027350df8aadf37e25c9be9144f75950da9b03e1302fa87cadfe8745d27802e985d3af3f3ec2d8125334fe8b8eb074d47d53c83db43e8b653d014b435499dff81e359cce58b26ac98dcf8d2c31cfbc2bf050a93fdf5d1cd47a260fc900674c6aa1d5b0268805784bab93b878bd8091c1e534d5c7752ab9606ac214da448ce4d3f14459724dad58c2edae66966484c29d398e01bce90ff9f89ec70e3da84c920d7d8ac01dc8cbaea0e7b5ccb6529eff473846671834e5ed454b4b356cc30e8c5904d1c1ec2f481cc95952d13cc9f8f74e90b3f465f4709819f8d948195e1951507c7cecacf196d0dde831a8d664173cdd8917eb2816162e1c7d6a3731d8f5edfc0aeffe9f9ddcc1b6242d22cb090a97e15b792faecfbbcfc36b57ef2848601fed1f9d563217a68bed96a590df570e1f755cf889519a93a2a45dd53923ab0f63652481c3007e6e0b4f9c4b9b88e58966f1387970793a0e7a2ed39193f14d0f2608d6798681005843305da5b068c61265693c432f15c7ed77cc44d9fe046277260f70f41e4ada9f3fc5ef3e003ac7fe853cfcaad6d52f0e3d3135667b67a93005bd6bcbc7b34d2f8e65ec3263a4c6c6189ce8f7f72b3eafa080f9227c14385ac1c16f2461c26d27b7e8df08ddf0e22112708a25e4b4e6d19dcc39c46352044520d159f699360c3b141f02d0663c9e42694481aba10c1be25a38dcf200a367a4148e0318b696201b9e7f9e4b18ea97478e85f1716e1b2d1406bdceb0ac1360c1f76b6f0399794747e111955bc3a8ba492514995906d96114cc8432d3a60d767ed8744586c5968612c40b5bebb0cebb7f23259a9803fe7adb792db2576ebf5f732a69648959fa262d8d9ff79122d8e9a66000a4da5ab7b1a8d5f12fe5eb83e0c9fcea3deb836dd8a000cb0143658db5d64ba3633832d38966057dc73b8255d4a7f7a37299782e8799d7cb01c392ad37665cf60e140aa7116a03088cfcfc640b1330b971991e8031b6fb4c13b29b3995c91ca7f645ebd7ec278821abf4e3217dc6f503b5e49831623f948b7aa05bc8d6c7e35a605bb382460534b3e6100d0e89304fe6cf41c869d8c98342eea8a9524266ec4dd56b31ea7c0d61eacad4b7dce824a09356b25e9d6349de5f10a0ec760b5810871e63688eeadf60daeade7422c20c9aa1908506f76f32f1b4b6dbaa0a25b25b618c31afdcadb52f4176921d89c4a87c2d149938a0da3b929d5ad52277c9f75585e3933729b6f5f0f8f6e7b96a380994809dfb0c725e3c966b96c0c54291ff3e58e2c63d1d017b445da13a67109c193b70252738b04294b5a1c862c367de3b98301de212b23d02c7aa5c95b5e0bc5d6e0000000000000000006af3", 0x2000247a) 12:09:52 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00"/71], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:52 executing program 2: r0 = socket(0x29, 0x2, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x10}, 0x10}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001780)={0x14}, 0x7ffff000}}, 0x0) 12:09:53 executing program 5: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xd26d7973589026fa, 0xae97a53d5e37fa12) write$fb(r0, &(0x7f0000000100)='`', 0x1) 12:09:53 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900"/106], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:53 executing program 5: r0 = socket(0x2, 0x6, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) connect$llc(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 12:09:53 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="03", 0x1}], 0x1}, 0x0) 12:09:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:09:54 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:54 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900"/106], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:54 executing program 5: r0 = socket(0x2, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000000)=@name={0x2, 0x2, 0x0, {{0xe000}}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000040)='M', 0x1}], 0x1}, 0x80fe) 12:09:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:54 executing program 5: mq_open(&(0x7f0000000480)='$+/+%\x00', 0x0, 0x0, 0x0) [ 445.818645][T19218] BFS-fs: bfs_fill_super(): Inode 0x00000028 corrupted on loop3 12:09:54 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900"/106], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:54 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="0fae0dd0ee0f005a850f91d4360f0ff3b63ef0fe4e00660fe30a66b891d7e4700f23c00f21f8663503000a000f23f82e0f1c570f0f30", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)='\'', &(0x7f00000000c0)}}, 0x0) 12:09:54 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000140)='fscrypt-provisioning\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)={0x2, 0x0, "da035ed02b344dfbee99df9bab0c2df3"}, 0x18, 0xfffffffffffffffb) [ 446.153103][T19243] BFS-fs: bfs_fill_super(): Inode 0x00000028 corrupted on loop3 12:09:55 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:09:55 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900"/124], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:55 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:55 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'macsec0\x00'}) 12:09:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) pipe(&(0x7f00000003c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x1, 0x0) write$binfmt_elf64(r1, 0x0, 0x8) [ 446.851866][T19267] device veth1_macvtap left promiscuous mode 12:09:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) [ 446.899025][T19269] BFS-fs: bfs_fill_super(): Inode 0x00000028 corrupted on loop3 12:09:55 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:55 executing program 5: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531100}) set_mempolicy(0x8000, 0x0, 0x0) 12:09:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) [ 447.186907][T19292] BFS-fs: bfs_fill_super(): Inode 0x00000028 corrupted on loop3 12:09:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:55 executing program 3: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:09:56 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900"/124], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:09:56 executing program 0: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:56 executing program 3: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:56 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x18}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c0}, 0x48) 12:09:56 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900"/124], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:56 executing program 0: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="66b828008ec0b9800000c00f3235000800000f30b8010000000f01d9c74424000e000000c744240290c5b165ff2c249d40af410f78ef660f38de6100b9270800000f32c4c2f50575c5", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xae9a, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12:09:56 executing program 3: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:56 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000006702"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:56 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r1, 0x0, 0x0}, 0x10) 12:09:57 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:09:57 executing program 0: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8f, 0xc973, 0x9}, 0x40) 12:09:57 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000006702"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:57 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:57 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000100)="d2", 0x1}], 0x1}, 0x400c040) 12:09:57 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x1261) 12:09:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003280)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e2", 0x1}], 0x1, &(0x7f00000000c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote={0xac, 0x8}}], 0x18}], 0x1, 0x0) 12:09:58 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:58 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:09:58 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:09:58 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000006702"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:58 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:09:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f0000000740)=0x196, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 12:09:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:58 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:09:59 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2c, &(0x7f0000000140)={0x5}, 0x4) 12:09:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000200)={'vlan0\x00', @ifru_map={0x2}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080), 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x74, 0x0, &(0x7f0000000640)=[@free_buffer, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000400)}, 0x1000}, @acquire_done], 0x5f, 0x0, &(0x7f0000000740)="f3f4c103db4999cc2ad9654caf711c179a5c25bd4e911a4ad9dfcd254418b9508ff05e4199776ac4078e7ec7088eb96ceeaf683bbeb08647ee9a8c188ec610a061704ed921389ccfd20a8e48b6c9dbefc7f6e7ab7ff2a0dcc9f6973bf4d0d4"}) 12:09:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:09:59 executing program 5: r0 = memfd_create(&(0x7f0000000080)='$-@\x00', 0x4) lseek(r0, 0x0, 0x3) 12:09:59 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000670200000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:09:59 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:10:00 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:10:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:10:00 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000670200000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:00 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x8}, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) 12:10:00 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:10:00 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:10:00 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000670200000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:00 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) 12:10:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:10:00 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000006702000000000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:00 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000006702000000000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) 12:10:01 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x80ffff) 12:10:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:10:01 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:01 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd00000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000006702000000000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:10:01 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 12:10:01 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000670200000000000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/233) 12:10:01 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x80ffff) 12:10:01 executing program 5: clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="0201a5ffffff0a000000ff45ac00000000000500080000000000000035070000000000000000e10000008877007200300700a6ffffff00faffffff7f00da55aa", 0x40, 0x1c0}]) syz_open_dev$vivid(0x0, 0x0, 0x2) 12:10:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)=""/233) 12:10:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) 12:10:02 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x80ffff) 12:10:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)=""/233) 12:10:02 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:02 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000670200000000000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) [ 453.732314][T19568] loop5: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 453.732357][T19568] loop5: partition table partially beyond EOD, truncated 12:10:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)=""/233) [ 453.891541][T19568] loop5: p1 start 10 is beyond EOD, truncated [ 453.917161][T19568] loop5: p2 size 2 extends beyond EOD, truncated 12:10:02 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x80ffff) 12:10:02 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd0000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000670200000000000000"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:02 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 454.060081][T19568] loop5: p3 start 225 is beyond EOD, truncated [ 454.099382][T19568] loop5: p4 start 4294965760 is beyond EOD, truncated [ 454.149001][T19568] loop5: p5 start 10 is beyond EOD, truncated 12:10:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, 0x0) [ 454.192647][T19568] loop5: p6 start 10 is beyond EOD, truncated [ 454.216411][T19568] loop5: p7 start 10 is beyond EOD, truncated [ 454.252083][T19568] loop5: p8 start 10 is beyond EOD, truncated [ 454.276332][T19568] loop5: p9 start 10 is beyond EOD, truncated [ 454.320091][T19568] loop5: p10 start 10 is beyond EOD, truncated [ 454.326285][T19568] loop5: p11 start 10 is beyond EOD, truncated [ 454.344404][T19568] loop5: p12 start 10 is beyond EOD, truncated [ 454.351898][T19568] loop5: p13 start 10 is beyond EOD, truncated [ 454.360579][T19568] loop5: p14 start 10 is beyond EOD, truncated [ 454.366755][T19568] loop5: p15 start 10 is beyond EOD, truncated [ 454.396445][T19568] loop5: p16 start 10 is beyond EOD, truncated [ 454.421224][T19568] loop5: p17 start 10 is beyond EOD, truncated [ 454.441860][T19568] loop5: p18 start 10 is beyond EOD, truncated [ 454.461680][T19568] loop5: p19 start 10 is beyond EOD, truncated [ 454.478172][T19568] loop5: p20 start 10 is beyond EOD, truncated [ 454.488210][T19568] loop5: p21 start 10 is beyond EOD, truncated [ 454.502237][T19568] loop5: p22 start 10 is beyond EOD, truncated [ 454.509334][T19568] loop5: p23 start 10 is beyond EOD, truncated [ 454.525913][T19568] loop5: p24 start 10 is beyond EOD, truncated [ 454.537338][T19568] loop5: p25 start 10 is beyond EOD, truncated [ 454.546658][T19568] loop5: p26 start 10 is beyond EOD, truncated [ 454.559620][T19568] loop5: p27 start 10 is beyond EOD, truncated [ 454.575329][T19568] loop5: p28 start 10 is beyond EOD, truncated [ 454.584626][T19568] loop5: p29 start 10 is beyond EOD, truncated [ 454.596501][T19568] loop5: p30 start 10 is beyond EOD, truncated [ 454.605844][T19568] loop5: p31 start 10 is beyond EOD, truncated [ 454.617732][T19568] loop5: p32 start 10 is beyond EOD, truncated [ 454.627364][T19568] loop5: p33 start 10 is beyond EOD, truncated [ 454.643348][T19568] loop5: p34 start 10 is beyond EOD, truncated [ 454.667609][T19568] loop5: p35 start 10 is beyond EOD, truncated [ 454.675741][T19568] loop5: p36 start 10 is beyond EOD, truncated [ 454.690182][T19568] loop5: p37 start 10 is beyond EOD, truncated [ 454.696344][T19568] loop5: p38 start 10 is beyond EOD, truncated [ 454.710425][T19568] loop5: p39 start 10 is beyond EOD, truncated [ 454.733679][T19568] loop5: p40 start 10 is beyond EOD, truncated [ 454.752582][T19568] loop5: p41 start 10 is beyond EOD, truncated [ 454.761696][T19568] loop5: p42 start 10 is beyond EOD, truncated [ 454.778120][T19568] loop5: p43 start 10 is beyond EOD, truncated [ 454.784740][T19568] loop5: p44 start 10 is beyond EOD, truncated [ 454.791425][T19568] loop5: p45 start 10 is beyond EOD, truncated [ 454.797586][T19568] loop5: p46 start 10 is beyond EOD, truncated [ 454.804155][T19568] loop5: p47 start 10 is beyond EOD, truncated [ 454.811761][T19568] loop5: p48 start 10 is beyond EOD, truncated [ 454.817928][T19568] loop5: p49 start 10 is beyond EOD, truncated [ 454.824565][T19568] loop5: p50 start 10 is beyond EOD, truncated [ 454.840019][T19568] loop5: p51 start 10 is beyond EOD, truncated [ 454.846207][T19568] loop5: p52 start 10 is beyond EOD, truncated [ 454.862587][T19568] loop5: p53 start 10 is beyond EOD, truncated [ 454.868861][T19568] loop5: p54 start 10 is beyond EOD, truncated [ 454.886906][T19568] loop5: p55 start 10 is beyond EOD, truncated [ 454.893930][T19568] loop5: p56 start 10 is beyond EOD, truncated [ 454.901435][T19568] loop5: p57 start 10 is beyond EOD, truncated [ 454.907672][T19568] loop5: p58 start 10 is beyond EOD, truncated [ 454.914846][T19568] loop5: p59 start 10 is beyond EOD, truncated [ 454.921657][T19568] loop5: p60 start 10 is beyond EOD, truncated [ 454.927918][T19568] loop5: p61 start 10 is beyond EOD, truncated [ 454.935248][T19568] loop5: p62 start 10 is beyond EOD, truncated [ 454.943290][T19568] loop5: p63 start 10 is beyond EOD, truncated [ 454.949571][T19568] loop5: p64 start 10 is beyond EOD, truncated [ 454.957930][T19568] loop5: p65 start 10 is beyond EOD, truncated [ 454.964800][T19568] loop5: p66 start 10 is beyond EOD, truncated [ 454.974685][T19568] loop5: p67 start 10 is beyond EOD, truncated [ 454.982393][T19568] loop5: p68 start 10 is beyond EOD, truncated [ 454.988655][T19568] loop5: p69 start 10 is beyond EOD, truncated [ 454.995849][T19568] loop5: p70 start 10 is beyond EOD, truncated [ 455.008780][T19568] loop5: p71 start 10 is beyond EOD, truncated [ 455.037652][T19568] loop5: p72 start 10 is beyond EOD, truncated [ 455.074893][T19568] loop5: p73 start 10 is beyond EOD, truncated [ 455.093963][T19568] loop5: p74 start 10 is beyond EOD, truncated [ 455.102449][T19568] loop5: p75 start 10 is beyond EOD, truncated [ 455.108709][T19568] loop5: p76 start 10 is beyond EOD, truncated [ 455.115564][T19568] loop5: p77 start 10 is beyond EOD, truncated [ 455.122246][T19568] loop5: p78 start 10 is beyond EOD, truncated [ 455.128517][T19568] loop5: p79 start 10 is beyond EOD, truncated [ 455.135163][T19568] loop5: p80 start 10 is beyond EOD, truncated [ 455.148752][T19568] loop5: p81 start 10 is beyond EOD, truncated [ 455.161601][T19568] loop5: p82 start 10 is beyond EOD, truncated [ 455.167772][T19568] loop5: p83 start 10 is beyond EOD, truncated [ 455.174157][T19568] loop5: p84 start 10 is beyond EOD, truncated [ 455.180365][T19568] loop5: p85 start 10 is beyond EOD, truncated [ 455.186515][T19568] loop5: p86 start 10 is beyond EOD, truncated [ 455.193508][T19568] loop5: p87 start 10 is beyond EOD, truncated [ 455.199673][T19568] loop5: p88 start 10 is beyond EOD, truncated [ 455.205919][T19568] loop5: p89 start 10 is beyond EOD, truncated [ 455.213953][T19568] loop5: p90 start 10 is beyond EOD, truncated [ 455.220233][T19568] loop5: p91 start 10 is beyond EOD, truncated [ 455.226383][T19568] loop5: p92 start 10 is beyond EOD, truncated [ 455.232668][T19568] loop5: p93 start 10 is beyond EOD, truncated [ 455.238817][T19568] loop5: p94 start 10 is beyond EOD, truncated [ 455.245008][T19568] loop5: p95 start 10 is beyond EOD, truncated [ 455.251242][T19568] loop5: p96 start 10 is beyond EOD, truncated [ 455.257388][T19568] loop5: p97 start 10 is beyond EOD, truncated [ 455.263590][T19568] loop5: p98 start 10 is beyond EOD, truncated [ 455.269742][T19568] loop5: p99 start 10 is beyond EOD, truncated [ 455.276070][T19568] loop5: p100 start 10 is beyond EOD, truncated [ 455.282518][T19568] loop5: p101 start 10 is beyond EOD, truncated [ 455.288752][T19568] loop5: p102 start 10 is beyond EOD, truncated [ 455.295088][T19568] loop5: p103 start 10 is beyond EOD, truncated [ 455.302293][T19568] loop5: p104 start 10 is beyond EOD, truncated [ 455.308536][T19568] loop5: p105 start 10 is beyond EOD, truncated [ 455.314850][T19568] loop5: p106 start 10 is beyond EOD, truncated [ 455.322844][T19568] loop5: p107 start 10 is beyond EOD, truncated [ 455.329083][T19568] loop5: p108 start 10 is beyond EOD, truncated [ 455.335400][T19568] loop5: p109 start 10 is beyond EOD, truncated [ 455.341722][T19568] loop5: p110 start 10 is beyond EOD, truncated [ 455.348072][T19568] loop5: p111 start 10 is beyond EOD, truncated [ 455.354405][T19568] loop5: p112 start 10 is beyond EOD, truncated [ 455.360716][T19568] loop5: p113 start 10 is beyond EOD, truncated [ 455.366960][T19568] loop5: p114 start 10 is beyond EOD, truncated [ 455.373343][T19568] loop5: p115 start 10 is beyond EOD, truncated [ 455.379584][T19568] loop5: p116 start 10 is beyond EOD, truncated [ 455.385900][T19568] loop5: p117 start 10 is beyond EOD, truncated [ 455.392235][T19568] loop5: p118 start 10 is beyond EOD, truncated [ 455.398473][T19568] loop5: p119 start 10 is beyond EOD, truncated [ 455.404760][T19568] loop5: p120 start 10 is beyond EOD, truncated [ 455.412059][T19568] loop5: p121 start 10 is beyond EOD, truncated [ 455.418299][T19568] loop5: p122 start 10 is beyond EOD, truncated [ 455.424618][T19568] loop5: p123 start 10 is beyond EOD, truncated [ 455.433090][T19568] loop5: p124 start 10 is beyond EOD, truncated [ 455.439350][T19568] loop5: p125 start 10 is beyond EOD, truncated [ 455.445680][T19568] loop5: p126 start 10 is beyond EOD, truncated [ 455.452094][T19568] loop5: p127 start 10 is beyond EOD, truncated [ 455.458328][T19568] loop5: p128 start 10 is beyond EOD, truncated [ 455.464606][T19568] loop5: p129 start 10 is beyond EOD, truncated [ 455.471017][T19568] loop5: p130 start 10 is beyond EOD, truncated [ 455.477280][T19568] loop5: p131 start 10 is beyond EOD, truncated [ 455.483619][T19568] loop5: p132 start 10 is beyond EOD, truncated [ 455.489959][T19568] loop5: p133 start 10 is beyond EOD, truncated [ 455.496195][T19568] loop5: p134 start 10 is beyond EOD, truncated [ 455.502525][T19568] loop5: p135 start 10 is beyond EOD, truncated [ 455.508844][T19568] loop5: p136 start 10 is beyond EOD, truncated [ 455.515155][T19568] loop5: p137 start 10 is beyond EOD, truncated [ 455.522363][T19568] loop5: p138 start 10 is beyond EOD, truncated [ 455.528605][T19568] loop5: p139 start 10 is beyond EOD, truncated [ 455.534936][T19568] loop5: p140 start 10 is beyond EOD, truncated [ 455.543254][T19568] loop5: p141 start 10 is beyond EOD, truncated [ 455.549524][T19568] loop5: p142 start 10 is beyond EOD, truncated [ 455.555864][T19568] loop5: p143 start 10 is beyond EOD, truncated [ 455.562217][T19568] loop5: p144 start 10 is beyond EOD, truncated [ 455.568453][T19568] loop5: p145 start 10 is beyond EOD, truncated [ 455.574733][T19568] loop5: p146 start 10 is beyond EOD, truncated [ 455.581086][T19568] loop5: p147 start 10 is beyond EOD, truncated [ 455.587478][T19568] loop5: p148 start 10 is beyond EOD, truncated [ 455.593845][T19568] loop5: p149 start 10 is beyond EOD, truncated [ 455.600165][T19568] loop5: p150 start 10 is beyond EOD, truncated [ 455.606507][T19568] loop5: p151 start 10 is beyond EOD, truncated [ 455.612958][T19568] loop5: p152 start 10 is beyond EOD, truncated [ 455.619188][T19568] loop5: p153 start 10 is beyond EOD, truncated [ 455.625604][T19568] loop5: p154 start 10 is beyond EOD, truncated [ 455.632776][T19568] loop5: p155 start 10 is beyond EOD, truncated [ 455.639015][T19568] loop5: p156 start 10 is beyond EOD, truncated [ 455.645355][T19568] loop5: p157 start 10 is beyond EOD, truncated [ 455.653487][T19568] loop5: p158 start 10 is beyond EOD, truncated [ 455.659845][T19568] loop5: p159 start 10 is beyond EOD, truncated [ 455.666204][T19568] loop5: p160 start 10 is beyond EOD, truncated [ 455.672631][T19568] loop5: p161 start 10 is beyond EOD, truncated [ 455.679697][T19568] loop5: p162 start 10 is beyond EOD, truncated [ 455.686060][T19568] loop5: p163 start 10 is beyond EOD, truncated [ 455.692412][T19568] loop5: p164 start 10 is beyond EOD, truncated [ 455.698845][T19568] loop5: p165 start 10 is beyond EOD, truncated [ 455.705201][T19568] loop5: p166 start 10 is beyond EOD, truncated [ 455.711536][T19568] loop5: p167 start 10 is beyond EOD, truncated [ 455.717769][T19568] loop5: p168 start 10 is beyond EOD, truncated [ 455.724101][T19568] loop5: p169 start 10 is beyond EOD, truncated [ 455.730412][T19568] loop5: p170 start 10 is beyond EOD, truncated [ 455.736783][T19568] loop5: p171 start 10 is beyond EOD, truncated [ 455.744088][T19568] loop5: p172 start 10 is beyond EOD, truncated [ 455.751119][T19568] loop5: p173 start 10 is beyond EOD, truncated [ 455.757369][T19568] loop5: p174 start 10 is beyond EOD, truncated [ 455.765148][T19568] loop5: p175 start 10 is beyond EOD, truncated [ 455.771498][T19568] loop5: p176 start 10 is beyond EOD, truncated [ 455.777734][T19568] loop5: p177 start 10 is beyond EOD, truncated [ 455.784163][T19568] loop5: p178 start 10 is beyond EOD, truncated [ 455.790507][T19568] loop5: p179 start 10 is beyond EOD, truncated [ 455.796741][T19568] loop5: p180 start 10 is beyond EOD, truncated [ 455.803052][T19568] loop5: p181 start 10 is beyond EOD, truncated [ 455.809293][T19568] loop5: p182 start 10 is beyond EOD, truncated [ 455.815578][T19568] loop5: p183 start 10 is beyond EOD, truncated [ 455.821905][T19568] loop5: p184 start 10 is beyond EOD, truncated [ 455.828146][T19568] loop5: p185 start 10 is beyond EOD, truncated [ 455.834571][T19568] loop5: p186 start 10 is beyond EOD, truncated [ 455.841041][T19568] loop5: p187 start 10 is beyond EOD, truncated [ 455.847280][T19568] loop5: p188 start 10 is beyond EOD, truncated [ 455.854355][T19568] loop5: p189 start 10 is beyond EOD, truncated [ 455.860734][T19568] loop5: p190 start 10 is beyond EOD, truncated [ 455.866982][T19568] loop5: p191 start 10 is beyond EOD, truncated [ 455.874917][T19568] loop5: p192 start 10 is beyond EOD, truncated [ 455.881309][T19568] loop5: p193 start 10 is beyond EOD, truncated [ 455.887545][T19568] loop5: p194 start 10 is beyond EOD, truncated [ 455.893870][T19568] loop5: p195 start 10 is beyond EOD, truncated [ 455.900199][T19568] loop5: p196 start 10 is beyond EOD, truncated [ 455.906503][T19568] loop5: p197 start 10 is beyond EOD, truncated [ 455.912957][T19568] loop5: p198 start 10 is beyond EOD, truncated [ 455.919192][T19568] loop5: p199 start 10 is beyond EOD, truncated [ 455.925527][T19568] loop5: p200 start 10 is beyond EOD, truncated [ 455.931858][T19568] loop5: p201 start 10 is beyond EOD, truncated [ 455.938096][T19568] loop5: p202 start 10 is beyond EOD, truncated [ 455.944395][T19568] loop5: p203 start 10 is beyond EOD, truncated [ 455.950734][T19568] loop5: p204 start 10 is beyond EOD, truncated [ 455.956977][T19568] loop5: p205 start 10 is beyond EOD, truncated [ 455.964005][T19568] loop5: p206 start 10 is beyond EOD, truncated [ 455.970347][T19568] loop5: p207 start 10 is beyond EOD, truncated [ 455.976577][T19568] loop5: p208 start 10 is beyond EOD, truncated [ 455.984475][T19568] loop5: p209 start 10 is beyond EOD, truncated [ 455.990896][T19568] loop5: p210 start 10 is beyond EOD, truncated [ 455.997147][T19568] loop5: p211 start 10 is beyond EOD, truncated [ 456.003485][T19568] loop5: p212 start 10 is beyond EOD, truncated [ 456.009716][T19568] loop5: p213 start 10 is beyond EOD, truncated [ 456.016034][T19568] loop5: p214 start 10 is beyond EOD, truncated [ 456.022365][T19568] loop5: p215 start 10 is beyond EOD, truncated [ 456.028595][T19568] loop5: p216 start 10 is beyond EOD, truncated [ 456.034888][T19568] loop5: p217 start 10 is beyond EOD, truncated [ 456.041227][T19568] loop5: p218 start 10 is beyond EOD, truncated [ 456.047458][T19568] loop5: p219 start 10 is beyond EOD, truncated [ 456.053811][T19568] loop5: p220 start 10 is beyond EOD, truncated [ 456.060157][T19568] loop5: p221 start 10 is beyond EOD, truncated [ 456.066388][T19568] loop5: p222 start 10 is beyond EOD, truncated [ 456.073460][T19568] loop5: p223 start 10 is beyond EOD, truncated [ 456.079709][T19568] loop5: p224 start 10 is beyond EOD, truncated [ 456.086053][T19568] loop5: p225 start 10 is beyond EOD, truncated [ 456.093453][T19568] loop5: p226 start 10 is beyond EOD, truncated [ 456.099850][T19568] loop5: p227 start 10 is beyond EOD, truncated [ 456.106181][T19568] loop5: p228 start 10 is beyond EOD, truncated [ 456.112502][T19568] loop5: p229 start 10 is beyond EOD, truncated [ 456.118732][T19568] loop5: p230 start 10 is beyond EOD, truncated [ 456.125037][T19568] loop5: p231 start 10 is beyond EOD, truncated [ 456.131361][T19568] loop5: p232 start 10 is beyond EOD, truncated [ 456.137592][T19568] loop5: p233 start 10 is beyond EOD, truncated [ 456.143877][T19568] loop5: p234 start 10 is beyond EOD, truncated [ 456.150409][T19568] loop5: p235 start 10 is beyond EOD, truncated [ 456.156651][T19568] loop5: p236 start 10 is beyond EOD, truncated [ 456.162986][T19568] loop5: p237 start 10 is beyond EOD, truncated [ 456.169229][T19568] loop5: p238 start 10 is beyond EOD, truncated [ 456.175545][T19568] loop5: p239 start 10 is beyond EOD, truncated [ 456.182749][T19568] loop5: p240 start 10 is beyond EOD, truncated [ 456.188993][T19568] loop5: p241 start 10 is beyond EOD, truncated [ 456.195325][T19568] loop5: p242 start 10 is beyond EOD, truncated [ 456.203346][T19568] loop5: p243 start 10 is beyond EOD, truncated [ 456.209592][T19568] loop5: p244 start 10 is beyond EOD, truncated [ 456.216118][T19568] loop5: p245 start 10 is beyond EOD, truncated [ 456.222435][T19568] loop5: p246 start 10 is beyond EOD, truncated [ 456.228670][T19568] loop5: p247 start 10 is beyond EOD, truncated [ 456.235037][T19568] loop5: p248 start 10 is beyond EOD, truncated [ 456.241422][T19568] loop5: p249 start 10 is beyond EOD, truncated [ 456.247739][T19568] loop5: p250 start 10 is beyond EOD, truncated [ 456.254053][T19568] loop5: p251 start 10 is beyond EOD, truncated [ 456.260383][T19568] loop5: p252 start 10 is beyond EOD, truncated [ 456.266626][T19568] loop5: p253 start 10 is beyond EOD, truncated [ 456.272943][T19568] loop5: p254 start 10 is beyond EOD, truncated [ 456.279187][T19568] loop5: p255 start 10 is beyond EOD, truncated 12:10:04 executing program 5: clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="0201a5ffffff0a000000ff45ac00000000000500080000000000000035070000000000000000e10000008877007200300700a6ffffff00faffffff7f00da55aa", 0x40, 0x1c0}]) syz_open_dev$vivid(0x0, 0x0, 0x2) 12:10:04 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x80ffff) 12:10:04 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, 0x0) 12:10:04 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) 12:10:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/162) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, 0x0) 12:10:05 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:05 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x80ffff) 12:10:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_getevents(r0, 0x6, 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)={0x0, 0x989680}) 12:10:05 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x80ffff) 12:10:05 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x80ffff) [ 456.921364][T19641] loop5: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 456.921524][T19641] loop5: partition table partially beyond EOD, truncated [ 457.074576][T19641] loop5: p1 start 10 is beyond EOD, truncated [ 457.108114][T19641] loop5: p2 size 2 extends beyond EOD, truncated [ 457.201013][T19641] loop5: p3 start 225 is beyond EOD, truncated [ 457.233279][T19641] loop5: p4 start 4294965760 is beyond EOD, truncated [ 457.269359][T19641] loop5: p5 start 10 is beyond EOD, truncated [ 457.284173][T19641] loop5: p6 start 10 is beyond EOD, truncated [ 457.298918][T19641] loop5: p7 start 10 is beyond EOD, truncated [ 457.313165][T19641] loop5: p8 start 10 is beyond EOD, truncated [ 457.326766][T19641] loop5: p9 start 10 is beyond EOD, truncated [ 457.355592][T19641] loop5: p10 start 10 is beyond EOD, truncated [ 457.370054][T19641] loop5: p11 start 10 is beyond EOD, truncated [ 457.376245][T19641] loop5: p12 start 10 is beyond EOD, truncated [ 457.399419][T19641] loop5: p13 start 10 is beyond EOD, truncated [ 457.406634][T19641] loop5: p14 start 10 is beyond EOD, truncated [ 457.416271][T19641] loop5: p15 start 10 is beyond EOD, truncated [ 457.428412][T19641] loop5: p16 start 10 is beyond EOD, truncated [ 457.446024][T19641] loop5: p17 start 10 is beyond EOD, truncated [ 457.452870][T19641] loop5: p18 start 10 is beyond EOD, truncated [ 457.459029][T19641] loop5: p19 start 10 is beyond EOD, truncated [ 457.468758][T19641] loop5: p20 start 10 is beyond EOD, truncated [ 457.475627][T19641] loop5: p21 start 10 is beyond EOD, truncated [ 457.482554][T19641] loop5: p22 start 10 is beyond EOD, truncated [ 457.488711][T19641] loop5: p23 start 10 is beyond EOD, truncated [ 457.495715][T19641] loop5: p24 start 10 is beyond EOD, truncated [ 457.502519][T19641] loop5: p25 start 10 is beyond EOD, truncated [ 457.508794][T19641] loop5: p26 start 10 is beyond EOD, truncated [ 457.516471][T19641] loop5: p27 start 10 is beyond EOD, truncated [ 457.523309][T19641] loop5: p28 start 10 is beyond EOD, truncated [ 457.529622][T19641] loop5: p29 start 10 is beyond EOD, truncated [ 457.536641][T19641] loop5: p30 start 10 is beyond EOD, truncated [ 457.543381][T19641] loop5: p31 start 10 is beyond EOD, truncated [ 457.549538][T19641] loop5: p32 start 10 is beyond EOD, truncated [ 457.556502][T19641] loop5: p33 start 10 is beyond EOD, truncated [ 457.563332][T19641] loop5: p34 start 10 is beyond EOD, truncated [ 457.569615][T19641] loop5: p35 start 10 is beyond EOD, truncated [ 457.578176][T19641] loop5: p36 start 10 is beyond EOD, truncated [ 457.584879][T19641] loop5: p37 start 10 is beyond EOD, truncated [ 457.591667][T19641] loop5: p38 start 10 is beyond EOD, truncated [ 457.597820][T19641] loop5: p39 start 10 is beyond EOD, truncated [ 457.604934][T19641] loop5: p40 start 10 is beyond EOD, truncated [ 457.612653][T19641] loop5: p41 start 10 is beyond EOD, truncated [ 457.618922][T19641] loop5: p42 start 10 is beyond EOD, truncated [ 457.625795][T19641] loop5: p43 start 10 is beyond EOD, truncated [ 457.632584][T19641] loop5: p44 start 10 is beyond EOD, truncated [ 457.638742][T19641] loop5: p45 start 10 is beyond EOD, truncated [ 457.645865][T19641] loop5: p46 start 10 is beyond EOD, truncated [ 457.652831][T19641] loop5: p47 start 10 is beyond EOD, truncated [ 457.659051][T19641] loop5: p48 start 10 is beyond EOD, truncated [ 457.666085][T19641] loop5: p49 start 10 is beyond EOD, truncated [ 457.673056][T19641] loop5: p50 start 10 is beyond EOD, truncated [ 457.679300][T19641] loop5: p51 start 10 is beyond EOD, truncated [ 457.687675][T19641] loop5: p52 start 10 is beyond EOD, truncated [ 457.694367][T19641] loop5: p53 start 10 is beyond EOD, truncated [ 457.701165][T19641] loop5: p54 start 10 is beyond EOD, truncated [ 457.707322][T19641] loop5: p55 start 10 is beyond EOD, truncated [ 457.714324][T19641] loop5: p56 start 10 is beyond EOD, truncated [ 457.721053][T19641] loop5: p57 start 10 is beyond EOD, truncated [ 457.727207][T19641] loop5: p58 start 10 is beyond EOD, truncated [ 457.734238][T19641] loop5: p59 start 10 is beyond EOD, truncated [ 457.741006][T19641] loop5: p60 start 10 is beyond EOD, truncated [ 457.747253][T19641] loop5: p61 start 10 is beyond EOD, truncated [ 457.754543][T19641] loop5: p62 start 10 is beyond EOD, truncated [ 457.761303][T19641] loop5: p63 start 10 is beyond EOD, truncated [ 457.767461][T19641] loop5: p64 start 10 is beyond EOD, truncated [ 457.774951][T19641] loop5: p65 start 10 is beyond EOD, truncated [ 457.781658][T19641] loop5: p66 start 10 is beyond EOD, truncated [ 457.787813][T19641] loop5: p67 start 10 is beyond EOD, truncated [ 457.796252][T19641] loop5: p68 start 10 is beyond EOD, truncated [ 457.803045][T19641] loop5: p69 start 10 is beyond EOD, truncated [ 457.809203][T19641] loop5: p70 start 10 is beyond EOD, truncated [ 457.816231][T19641] loop5: p71 start 10 is beyond EOD, truncated [ 457.823008][T19641] loop5: p72 start 10 is beyond EOD, truncated [ 457.829165][T19641] loop5: p73 start 10 is beyond EOD, truncated [ 457.836138][T19641] loop5: p74 start 10 is beyond EOD, truncated [ 457.842893][T19641] loop5: p75 start 10 is beyond EOD, truncated [ 457.849050][T19641] loop5: p76 start 10 is beyond EOD, truncated [ 457.855995][T19641] loop5: p77 start 10 is beyond EOD, truncated [ 457.862787][T19641] loop5: p78 start 10 is beyond EOD, truncated [ 457.870915][T19641] loop5: p79 start 10 is beyond EOD, truncated [ 457.877081][T19641] loop5: p80 start 10 is beyond EOD, truncated [ 457.884178][T19641] loop5: p81 start 10 is beyond EOD, truncated [ 457.891107][T19641] loop5: p82 start 10 is beyond EOD, truncated [ 457.897275][T19641] loop5: p83 start 10 is beyond EOD, truncated [ 457.905913][T19641] loop5: p84 start 10 is beyond EOD, truncated [ 457.912724][T19641] loop5: p85 start 10 is beyond EOD, truncated [ 457.918994][T19641] loop5: p86 start 10 is beyond EOD, truncated [ 457.926007][T19641] loop5: p87 start 10 is beyond EOD, truncated [ 457.932831][T19641] loop5: p88 start 10 is beyond EOD, truncated [ 457.938988][T19641] loop5: p89 start 10 is beyond EOD, truncated [ 457.946019][T19641] loop5: p90 start 10 is beyond EOD, truncated [ 457.952814][T19641] loop5: p91 start 10 is beyond EOD, truncated [ 457.959398][T19641] loop5: p92 start 10 is beyond EOD, truncated [ 457.967116][T19641] loop5: p93 start 10 is beyond EOD, truncated [ 457.973920][T19641] loop5: p94 start 10 is beyond EOD, truncated [ 457.980671][T19641] loop5: p95 start 10 is beyond EOD, truncated [ 457.986831][T19641] loop5: p96 start 10 is beyond EOD, truncated [ 457.994015][T19641] loop5: p97 start 10 is beyond EOD, truncated [ 458.000826][T19641] loop5: p98 start 10 is beyond EOD, truncated [ 458.006982][T19641] loop5: p99 start 10 is beyond EOD, truncated [ 458.015565][T19641] loop5: p100 start 10 is beyond EOD, truncated [ 458.022381][T19641] loop5: p101 start 10 is beyond EOD, truncated [ 458.028623][T19641] loop5: p102 start 10 is beyond EOD, truncated [ 458.035680][T19641] loop5: p103 start 10 is beyond EOD, truncated [ 458.042519][T19641] loop5: p104 start 10 is beyond EOD, truncated [ 458.048762][T19641] loop5: p105 start 10 is beyond EOD, truncated [ 458.055827][T19641] loop5: p106 start 10 is beyond EOD, truncated [ 458.062678][T19641] loop5: p107 start 10 is beyond EOD, truncated [ 458.068931][T19641] loop5: p108 start 10 is beyond EOD, truncated [ 458.076303][T19641] loop5: p109 start 10 is beyond EOD, truncated [ 458.083170][T19641] loop5: p110 start 10 is beyond EOD, truncated [ 458.089419][T19641] loop5: p111 start 10 is beyond EOD, truncated [ 458.096584][T19641] loop5: p112 start 10 is beyond EOD, truncated [ 458.103424][T19641] loop5: p113 start 10 is beyond EOD, truncated [ 458.109756][T19641] loop5: p114 start 10 is beyond EOD, truncated [ 458.116926][T19641] loop5: p115 start 10 is beyond EOD, truncated [ 458.125364][T19641] loop5: p116 start 10 is beyond EOD, truncated [ 458.133159][T19641] loop5: p117 start 10 is beyond EOD, truncated [ 458.139411][T19641] loop5: p118 start 10 is beyond EOD, truncated [ 458.146408][T19641] loop5: p119 start 10 is beyond EOD, truncated [ 458.153689][T19641] loop5: p120 start 10 is beyond EOD, truncated [ 458.160570][T19641] loop5: p121 start 10 is beyond EOD, truncated [ 458.166820][T19641] loop5: p122 start 10 is beyond EOD, truncated [ 458.174058][T19641] loop5: p123 start 10 is beyond EOD, truncated [ 458.180915][T19641] loop5: p124 start 10 is beyond EOD, truncated [ 458.187153][T19641] loop5: p125 start 10 is beyond EOD, truncated [ 458.194519][T19641] loop5: p126 start 10 is beyond EOD, truncated [ 458.201440][T19641] loop5: p127 start 10 is beyond EOD, truncated [ 458.207692][T19641] loop5: p128 start 10 is beyond EOD, truncated [ 458.214886][T19641] loop5: p129 start 10 is beyond EOD, truncated [ 458.221853][T19641] loop5: p130 start 10 is beyond EOD, truncated [ 458.228099][T19641] loop5: p131 start 10 is beyond EOD, truncated [ 458.236705][T19641] loop5: p132 start 10 is beyond EOD, truncated [ 458.243597][T19641] loop5: p133 start 10 is beyond EOD, truncated [ 458.250509][T19641] loop5: p134 start 10 is beyond EOD, truncated [ 458.256759][T19641] loop5: p135 start 10 is beyond EOD, truncated [ 458.264016][T19641] loop5: p136 start 10 is beyond EOD, truncated [ 458.270903][T19641] loop5: p137 start 10 is beyond EOD, truncated [ 458.277146][T19641] loop5: p138 start 10 is beyond EOD, truncated [ 458.284151][T19641] loop5: p139 start 10 is beyond EOD, truncated [ 458.291692][T19641] loop5: p140 start 10 is beyond EOD, truncated [ 458.298025][T19641] loop5: p141 start 10 is beyond EOD, truncated [ 458.305263][T19641] loop5: p142 start 10 is beyond EOD, truncated [ 458.312170][T19641] loop5: p143 start 10 is beyond EOD, truncated [ 458.318500][T19641] loop5: p144 start 10 is beyond EOD, truncated [ 458.325519][T19641] loop5: p145 start 10 is beyond EOD, truncated [ 458.332437][T19641] loop5: p146 start 10 is beyond EOD, truncated [ 458.338681][T19641] loop5: p147 start 10 is beyond EOD, truncated [ 458.347198][T19641] loop5: p148 start 10 is beyond EOD, truncated [ 458.354116][T19641] loop5: p149 start 10 is beyond EOD, truncated [ 458.361084][T19641] loop5: p150 start 10 is beyond EOD, truncated [ 458.367334][T19641] loop5: p151 start 10 is beyond EOD, truncated [ 458.374401][T19641] loop5: p152 start 10 is beyond EOD, truncated [ 458.381401][T19641] loop5: p153 start 10 is beyond EOD, truncated [ 458.387650][T19641] loop5: p154 start 10 is beyond EOD, truncated [ 458.395048][T19641] loop5: p155 start 10 is beyond EOD, truncated [ 458.402081][T19641] loop5: p156 start 10 is beyond EOD, truncated [ 458.408337][T19641] loop5: p157 start 10 is beyond EOD, truncated [ 458.415439][T19641] loop5: p158 start 10 is beyond EOD, truncated [ 458.422312][T19641] loop5: p159 start 10 is beyond EOD, truncated [ 458.428554][T19641] loop5: p160 start 10 is beyond EOD, truncated [ 458.435631][T19641] loop5: p161 start 10 is beyond EOD, truncated [ 458.443032][T19641] loop5: p162 start 10 is beyond EOD, truncated [ 458.449275][T19641] loop5: p163 start 10 is beyond EOD, truncated [ 458.457980][T19641] loop5: p164 start 10 is beyond EOD, truncated [ 458.464809][T19641] loop5: p165 start 10 is beyond EOD, truncated [ 458.472321][T19641] loop5: p166 start 10 is beyond EOD, truncated [ 458.478590][T19641] loop5: p167 start 10 is beyond EOD, truncated [ 458.485645][T19641] loop5: p168 start 10 is beyond EOD, truncated [ 458.492513][T19641] loop5: p169 start 10 is beyond EOD, truncated [ 458.498759][T19641] loop5: p170 start 10 is beyond EOD, truncated [ 458.505832][T19641] loop5: p171 start 10 is beyond EOD, truncated [ 458.512650][T19641] loop5: p172 start 10 is beyond EOD, truncated [ 458.518903][T19641] loop5: p173 start 10 is beyond EOD, truncated [ 458.525936][T19641] loop5: p174 start 10 is beyond EOD, truncated [ 458.532790][T19641] loop5: p175 start 10 is beyond EOD, truncated [ 458.539037][T19641] loop5: p176 start 10 is beyond EOD, truncated [ 458.546091][T19641] loop5: p177 start 10 is beyond EOD, truncated [ 458.553049][T19641] loop5: p178 start 10 is beyond EOD, truncated [ 458.559289][T19641] loop5: p179 start 10 is beyond EOD, truncated [ 458.567783][T19641] loop5: p180 start 10 is beyond EOD, truncated [ 458.574681][T19641] loop5: p181 start 10 is beyond EOD, truncated [ 458.581541][T19641] loop5: p182 start 10 is beyond EOD, truncated [ 458.587778][T19641] loop5: p183 start 10 is beyond EOD, truncated [ 458.594816][T19641] loop5: p184 start 10 is beyond EOD, truncated [ 458.601626][T19641] loop5: p185 start 10 is beyond EOD, truncated [ 458.607872][T19641] loop5: p186 start 10 is beyond EOD, truncated [ 458.614952][T19641] loop5: p187 start 10 is beyond EOD, truncated [ 458.621772][T19641] loop5: p188 start 10 is beyond EOD, truncated [ 458.628020][T19641] loop5: p189 start 10 is beyond EOD, truncated [ 458.635264][T19641] loop5: p190 start 10 is beyond EOD, truncated [ 458.642120][T19641] loop5: p191 start 10 is beyond EOD, truncated [ 458.648361][T19641] loop5: p192 start 10 is beyond EOD, truncated [ 458.655443][T19641] loop5: p193 start 10 is beyond EOD, truncated [ 458.662290][T19641] loop5: p194 start 10 is beyond EOD, truncated [ 458.668534][T19641] loop5: p195 start 10 is beyond EOD, truncated [ 458.677760][T19641] loop5: p196 start 10 is beyond EOD, truncated [ 458.684629][T19641] loop5: p197 start 10 is beyond EOD, truncated [ 458.691659][T19641] loop5: p198 start 10 is beyond EOD, truncated [ 458.697900][T19641] loop5: p199 start 10 is beyond EOD, truncated [ 458.705036][T19641] loop5: p200 start 10 is beyond EOD, truncated [ 458.712005][T19641] loop5: p201 start 10 is beyond EOD, truncated [ 458.718251][T19641] loop5: p202 start 10 is beyond EOD, truncated [ 458.725420][T19641] loop5: p203 start 10 is beyond EOD, truncated [ 458.732307][T19641] loop5: p204 start 10 is beyond EOD, truncated [ 458.738558][T19641] loop5: p205 start 10 is beyond EOD, truncated [ 458.745774][T19641] loop5: p206 start 10 is beyond EOD, truncated [ 458.752773][T19641] loop5: p207 start 10 is beyond EOD, truncated [ 458.759028][T19641] loop5: p208 start 10 is beyond EOD, truncated [ 458.766133][T19641] loop5: p209 start 10 is beyond EOD, truncated [ 458.773035][T19641] loop5: p210 start 10 is beyond EOD, truncated [ 458.779369][T19641] loop5: p211 start 10 is beyond EOD, truncated [ 458.787907][T19641] loop5: p212 start 10 is beyond EOD, truncated [ 458.795291][T19641] loop5: p213 start 10 is beyond EOD, truncated [ 458.801646][T19641] loop5: p214 start 10 is beyond EOD, truncated [ 458.807878][T19641] loop5: p215 start 10 is beyond EOD, truncated [ 458.814256][T19641] loop5: p216 start 10 is beyond EOD, truncated [ 458.820599][T19641] loop5: p217 start 10 is beyond EOD, truncated [ 458.826961][T19641] loop5: p218 start 10 is beyond EOD, truncated [ 458.833260][T19641] loop5: p219 start 10 is beyond EOD, truncated [ 458.839504][T19641] loop5: p220 start 10 is beyond EOD, truncated [ 458.845827][T19641] loop5: p221 start 10 is beyond EOD, truncated [ 458.852155][T19641] loop5: p222 start 10 is beyond EOD, truncated [ 458.858390][T19641] loop5: p223 start 10 is beyond EOD, truncated [ 458.864700][T19641] loop5: p224 start 10 is beyond EOD, truncated [ 458.871050][T19641] loop5: p225 start 10 is beyond EOD, truncated [ 458.877345][T19641] loop5: p226 start 10 is beyond EOD, truncated [ 458.883658][T19641] loop5: p227 start 10 is beyond EOD, truncated [ 458.892569][T19641] loop5: p228 start 10 is beyond EOD, truncated [ 458.898833][T19641] loop5: p229 start 10 is beyond EOD, truncated [ 458.905167][T19641] loop5: p230 start 10 is beyond EOD, truncated [ 458.911556][T19641] loop5: p231 start 10 is beyond EOD, truncated [ 458.917996][T19641] loop5: p232 start 10 is beyond EOD, truncated [ 458.924314][T19641] loop5: p233 start 10 is beyond EOD, truncated [ 458.930639][T19641] loop5: p234 start 10 is beyond EOD, truncated [ 458.936889][T19641] loop5: p235 start 10 is beyond EOD, truncated [ 458.943240][T19641] loop5: p236 start 10 is beyond EOD, truncated [ 458.949476][T19641] loop5: p237 start 10 is beyond EOD, truncated [ 458.955787][T19641] loop5: p238 start 10 is beyond EOD, truncated [ 458.962123][T19641] loop5: p239 start 10 is beyond EOD, truncated [ 458.968359][T19641] loop5: p240 start 10 is beyond EOD, truncated [ 458.974663][T19641] loop5: p241 start 10 is beyond EOD, truncated [ 458.980997][T19641] loop5: p242 start 10 is beyond EOD, truncated [ 458.987237][T19641] loop5: p243 start 10 is beyond EOD, truncated [ 458.993623][T19641] loop5: p244 start 10 is beyond EOD, truncated [ 459.002504][T19641] loop5: p245 start 10 is beyond EOD, truncated [ 459.008763][T19641] loop5: p246 start 10 is beyond EOD, truncated [ 459.015085][T19641] loop5: p247 start 10 is beyond EOD, truncated [ 459.021432][T19641] loop5: p248 start 10 is beyond EOD, truncated [ 459.027666][T19641] loop5: p249 start 10 is beyond EOD, truncated [ 459.033969][T19641] loop5: p250 start 10 is beyond EOD, truncated [ 459.040387][T19641] loop5: p251 start 10 is beyond EOD, truncated [ 459.046622][T19641] loop5: p252 start 10 is beyond EOD, truncated [ 459.052933][T19641] loop5: p253 start 10 is beyond EOD, truncated [ 459.059179][T19641] loop5: p254 start 10 is beyond EOD, truncated [ 459.065501][T19641] loop5: p255 start 10 is beyond EOD, truncated [ 459.083060][ T3905] loop5: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 459.083071][ T3905] loop5: partition table partially beyond EOD, truncated [ 459.180606][ T3905] loop5: p1 start 10 is beyond EOD, truncated [ 459.186722][ T3905] loop5: p2 size 2 extends beyond EOD, truncated [ 459.195938][ T3905] loop5: p3 start 225 is beyond EOD, truncated [ 459.202202][ T3905] loop5: p4 start 4294965760 is beyond EOD, truncated [ 459.208959][ T3905] loop5: p5 start 10 is beyond EOD, truncated [ 459.215177][ T3905] loop5: p6 start 10 is beyond EOD, truncated [ 459.221339][ T3905] loop5: p7 start 10 is beyond EOD, truncated [ 459.227401][ T3905] loop5: p8 start 10 is beyond EOD, truncated [ 459.233529][ T3905] loop5: p9 start 10 is beyond EOD, truncated [ 459.239700][ T3905] loop5: p10 start 10 is beyond EOD, truncated [ 459.245930][ T3905] loop5: p11 start 10 is beyond EOD, truncated [ 459.252185][ T3905] loop5: p12 start 10 is beyond EOD, truncated [ 459.258330][ T3905] loop5: p13 start 10 is beyond EOD, truncated [ 459.264517][ T3905] loop5: p14 start 10 is beyond EOD, truncated [ 459.270922][ T3905] loop5: p15 start 10 is beyond EOD, truncated [ 459.277073][ T3905] loop5: p16 start 10 is beyond EOD, truncated [ 459.285752][ T3905] loop5: p17 start 10 is beyond EOD, truncated [ 459.292039][ T3905] loop5: p18 start 10 is beyond EOD, truncated [ 459.298194][ T3905] loop5: p19 start 10 is beyond EOD, truncated [ 459.304464][ T3905] loop5: p20 start 10 is beyond EOD, truncated [ 459.310713][ T3905] loop5: p21 start 10 is beyond EOD, truncated [ 459.316861][ T3905] loop5: p22 start 10 is beyond EOD, truncated [ 459.323088][ T3905] loop5: p23 start 10 is beyond EOD, truncated [ 459.329234][ T3905] loop5: p24 start 10 is beyond EOD, truncated [ 459.335467][ T3905] loop5: p25 start 10 is beyond EOD, truncated [ 459.341747][ T3905] loop5: p26 start 10 is beyond EOD, truncated [ 459.347892][ T3905] loop5: p27 start 10 is beyond EOD, truncated [ 459.354191][ T3905] loop5: p28 start 10 is beyond EOD, truncated [ 459.360431][ T3905] loop5: p29 start 10 is beyond EOD, truncated [ 459.366605][ T3905] loop5: p30 start 10 is beyond EOD, truncated [ 459.372841][ T3905] loop5: p31 start 10 is beyond EOD, truncated [ 459.378986][ T3905] loop5: p32 start 10 is beyond EOD, truncated [ 459.385184][ T3905] loop5: p33 start 10 is beyond EOD, truncated [ 459.393937][ T3905] loop5: p34 start 10 is beyond EOD, truncated [ 459.400309][ T3905] loop5: p35 start 10 is beyond EOD, truncated [ 459.406459][ T3905] loop5: p36 start 10 is beyond EOD, truncated [ 459.412809][ T3905] loop5: p37 start 10 is beyond EOD, truncated [ 459.418967][ T3905] loop5: p38 start 10 is beyond EOD, truncated [ 459.425183][ T3905] loop5: p39 start 10 is beyond EOD, truncated [ 459.432791][ T3905] loop5: p40 start 10 is beyond EOD, truncated [ 459.438954][ T3905] loop5: p41 start 10 is beyond EOD, truncated [ 459.445247][ T3905] loop5: p42 start 10 is beyond EOD, truncated [ 459.452152][ T3905] loop5: p43 start 10 is beyond EOD, truncated [ 459.458374][ T3905] loop5: p44 start 10 is beyond EOD, truncated [ 459.464716][ T3905] loop5: p45 start 10 is beyond EOD, truncated [ 459.470983][ T3905] loop5: p46 start 10 is beyond EOD, truncated [ 459.477223][ T3905] loop5: p47 start 10 is beyond EOD, truncated [ 459.483450][ T3905] loop5: p48 start 10 is beyond EOD, truncated [ 459.489603][ T3905] loop5: p49 start 10 is beyond EOD, truncated [ 459.495827][ T3905] loop5: p50 start 10 is beyond EOD, truncated [ 459.504043][ T3905] loop5: p51 start 10 is beyond EOD, truncated [ 459.510328][ T3905] loop5: p52 start 10 is beyond EOD, truncated [ 459.516488][ T3905] loop5: p53 start 10 is beyond EOD, truncated [ 459.522740][ T3905] loop5: p54 start 10 is beyond EOD, truncated [ 459.528889][ T3905] loop5: p55 start 10 is beyond EOD, truncated [ 459.535103][ T3905] loop5: p56 start 10 is beyond EOD, truncated [ 459.541335][ T3905] loop5: p57 start 10 is beyond EOD, truncated [ 459.547480][ T3905] loop5: p58 start 10 is beyond EOD, truncated [ 459.553692][ T3905] loop5: p59 start 10 is beyond EOD, truncated [ 459.559914][ T3905] loop5: p60 start 10 is beyond EOD, truncated [ 459.566058][ T3905] loop5: p61 start 10 is beyond EOD, truncated [ 459.572272][ T3905] loop5: p62 start 10 is beyond EOD, truncated [ 459.578427][ T3905] loop5: p63 start 10 is beyond EOD, truncated [ 459.584725][ T3905] loop5: p64 start 10 is beyond EOD, truncated [ 459.592155][ T3905] loop5: p65 start 10 is beyond EOD, truncated [ 459.598479][ T3905] loop5: p66 start 10 is beyond EOD, truncated [ 459.604781][ T3905] loop5: p67 start 10 is beyond EOD, truncated [ 459.613573][ T3905] loop5: p68 start 10 is beyond EOD, truncated [ 459.619890][ T3905] loop5: p69 start 10 is beyond EOD, truncated [ 459.626038][ T3905] loop5: p70 start 10 is beyond EOD, truncated [ 459.632280][ T3905] loop5: p71 start 10 is beyond EOD, truncated [ 459.638427][ T3905] loop5: p72 start 10 is beyond EOD, truncated [ 459.644624][ T3905] loop5: p73 start 10 is beyond EOD, truncated [ 459.650990][ T3905] loop5: p74 start 10 is beyond EOD, truncated [ 459.657150][ T3905] loop5: p75 start 10 is beyond EOD, truncated [ 459.663360][ T3905] loop5: p76 start 10 is beyond EOD, truncated [ 459.669514][ T3905] loop5: p77 start 10 is beyond EOD, truncated [ 459.675754][ T3905] loop5: p78 start 10 is beyond EOD, truncated [ 459.681998][ T3905] loop5: p79 start 10 is beyond EOD, truncated [ 459.688244][ T3905] loop5: p80 start 10 is beyond EOD, truncated [ 459.694450][ T3905] loop5: p81 start 10 is beyond EOD, truncated [ 459.700708][ T3905] loop5: p82 start 10 is beyond EOD, truncated [ 459.706853][ T3905] loop5: p83 start 10 is beyond EOD, truncated [ 459.713091][ T3905] loop5: p84 start 10 is beyond EOD, truncated [ 459.719284][ T3905] loop5: p85 start 10 is beyond EOD, truncated [ 459.727454][ T3905] loop5: p86 start 10 is beyond EOD, truncated [ 459.733737][ T3905] loop5: p87 start 10 is beyond EOD, truncated [ 459.739957][ T3905] loop5: p88 start 10 is beyond EOD, truncated [ 459.746115][ T3905] loop5: p89 start 10 is beyond EOD, truncated [ 459.752388][ T3905] loop5: p90 start 10 is beyond EOD, truncated [ 459.758538][ T3905] loop5: p91 start 10 is beyond EOD, truncated [ 459.764740][ T3905] loop5: p92 start 10 is beyond EOD, truncated [ 459.770999][ T3905] loop5: p93 start 10 is beyond EOD, truncated [ 459.777209][ T3905] loop5: p94 start 10 is beyond EOD, truncated [ 459.783537][ T3905] loop5: p95 start 10 is beyond EOD, truncated [ 459.789685][ T3905] loop5: p96 start 10 is beyond EOD, truncated [ 459.795937][ T3905] loop5: p97 start 10 is beyond EOD, truncated [ 459.802168][ T3905] loop5: p98 start 10 is beyond EOD, truncated [ 459.808310][ T3905] loop5: p99 start 10 is beyond EOD, truncated [ 459.814534][ T3905] loop5: p100 start 10 is beyond EOD, truncated [ 459.820881][ T3905] loop5: p101 start 10 is beyond EOD, truncated [ 459.827115][ T3905] loop5: p102 start 10 is beyond EOD, truncated [ 459.835909][ T3905] loop5: p103 start 10 is beyond EOD, truncated [ 459.842282][ T3905] loop5: p104 start 10 is beyond EOD, truncated [ 459.848585][ T3905] loop5: p105 start 10 is beyond EOD, truncated [ 459.854956][ T3905] loop5: p106 start 10 is beyond EOD, truncated [ 459.861301][ T3905] loop5: p107 start 10 is beyond EOD, truncated [ 459.867556][ T3905] loop5: p108 start 10 is beyond EOD, truncated [ 459.873865][ T3905] loop5: p109 start 10 is beyond EOD, truncated [ 459.880222][ T3905] loop5: p110 start 10 is beyond EOD, truncated [ 459.886524][ T3905] loop5: p111 start 10 is beyond EOD, truncated [ 459.892853][ T3905] loop5: p112 start 10 is beyond EOD, truncated [ 459.899095][ T3905] loop5: p113 start 10 is beyond EOD, truncated [ 459.905377][ T3905] loop5: p114 start 10 is beyond EOD, truncated [ 459.912338][ T3905] loop5: p115 start 10 is beyond EOD, truncated [ 459.918580][ T3905] loop5: p116 start 10 is beyond EOD, truncated [ 459.924965][ T3905] loop5: p117 start 10 is beyond EOD, truncated [ 459.931323][ T3905] loop5: p118 start 10 is beyond EOD, truncated [ 459.937650][ T3905] loop5: p119 start 10 is beyond EOD, truncated [ 459.945882][ T3905] loop5: p120 start 10 is beyond EOD, truncated [ 459.952358][ T3905] loop5: p121 start 10 is beyond EOD, truncated [ 459.958596][ T3905] loop5: p122 start 10 is beyond EOD, truncated [ 459.964943][ T3905] loop5: p123 start 10 is beyond EOD, truncated [ 459.971274][ T3905] loop5: p124 start 10 is beyond EOD, truncated [ 459.977506][ T3905] loop5: p125 start 10 is beyond EOD, truncated [ 459.983877][ T3905] loop5: p126 start 10 is beyond EOD, truncated [ 459.991138][ T3905] loop5: p127 start 10 is beyond EOD, truncated [ 459.997487][ T3905] loop5: p128 start 10 is beyond EOD, truncated [ 460.003805][ T3905] loop5: p129 start 10 is beyond EOD, truncated [ 460.010167][ T3905] loop5: p130 start 10 is beyond EOD, truncated [ 460.016400][ T3905] loop5: p131 start 10 is beyond EOD, truncated [ 460.022677][ T3905] loop5: p132 start 10 is beyond EOD, truncated [ 460.028912][ T3905] loop5: p133 start 10 is beyond EOD, truncated [ 460.035229][ T3905] loop5: p134 start 10 is beyond EOD, truncated [ 460.041541][ T3905] loop5: p135 start 10 is beyond EOD, truncated [ 460.047776][ T3905] loop5: p136 start 10 is beyond EOD, truncated [ 460.056477][ T3905] loop5: p137 start 10 is beyond EOD, truncated [ 460.062840][ T3905] loop5: p138 start 10 is beyond EOD, truncated [ 460.069073][ T3905] loop5: p139 start 10 is beyond EOD, truncated [ 460.076513][ T3905] loop5: p140 start 10 is beyond EOD, truncated [ 460.082874][ T3905] loop5: p141 start 10 is beyond EOD, truncated [ 460.089108][ T3905] loop5: p142 start 10 is beyond EOD, truncated [ 460.095421][ T3905] loop5: p143 start 10 is beyond EOD, truncated [ 460.101749][ T3905] loop5: p144 start 10 is beyond EOD, truncated [ 460.107982][ T3905] loop5: p145 start 10 is beyond EOD, truncated [ 460.114300][ T3905] loop5: p146 start 10 is beyond EOD, truncated [ 460.120622][ T3905] loop5: p147 start 10 is beyond EOD, truncated [ 460.126852][ T3905] loop5: p148 start 10 is beyond EOD, truncated [ 460.133157][ T3905] loop5: p149 start 10 is beyond EOD, truncated [ 460.139397][ T3905] loop5: p150 start 10 is beyond EOD, truncated [ 460.145695][ T3905] loop5: p151 start 10 is beyond EOD, truncated [ 460.152064][ T3905] loop5: p152 start 10 is beyond EOD, truncated [ 460.158311][ T3905] loop5: p153 start 10 is beyond EOD, truncated [ 460.166544][ T3905] loop5: p154 start 10 is beyond EOD, truncated [ 460.172913][ T3905] loop5: p155 start 10 is beyond EOD, truncated [ 460.179148][ T3905] loop5: p156 start 10 is beyond EOD, truncated [ 460.185488][ T3905] loop5: p157 start 10 is beyond EOD, truncated [ 460.191846][ T3905] loop5: p158 start 10 is beyond EOD, truncated [ 460.198080][ T3905] loop5: p159 start 10 is beyond EOD, truncated [ 460.204400][ T3905] loop5: p160 start 10 is beyond EOD, truncated [ 460.210750][ T3905] loop5: p161 start 10 is beyond EOD, truncated [ 460.216983][ T3905] loop5: p162 start 10 is beyond EOD, truncated [ 460.223257][ T3905] loop5: p163 start 10 is beyond EOD, truncated [ 460.229515][ T3905] loop5: p164 start 10 is beyond EOD, truncated [ 460.235859][ T3905] loop5: p165 start 10 is beyond EOD, truncated [ 460.242202][ T3905] loop5: p166 start 10 is beyond EOD, truncated [ 460.248426][ T3905] loop5: p167 start 10 is beyond EOD, truncated [ 460.254710][ T3905] loop5: p168 start 10 is beyond EOD, truncated [ 460.261038][ T3905] loop5: p169 start 10 is beyond EOD, truncated [ 460.267267][ T3905] loop5: p170 start 10 is beyond EOD, truncated [ 460.276028][ T3905] loop5: p171 start 10 is beyond EOD, truncated [ 460.282365][ T3905] loop5: p172 start 10 is beyond EOD, truncated [ 460.288681][ T3905] loop5: p173 start 10 is beyond EOD, truncated [ 460.294986][ T3905] loop5: p174 start 10 is beyond EOD, truncated [ 460.301331][ T3905] loop5: p175 start 10 is beyond EOD, truncated [ 460.307563][ T3905] loop5: p176 start 10 is beyond EOD, truncated [ 460.314117][ T3905] loop5: p177 start 10 is beyond EOD, truncated [ 460.320461][ T3905] loop5: p178 start 10 is beyond EOD, truncated [ 460.326782][ T3905] loop5: p179 start 10 is beyond EOD, truncated [ 460.333100][ T3905] loop5: p180 start 10 is beyond EOD, truncated [ 460.339335][ T3905] loop5: p181 start 10 is beyond EOD, truncated [ 460.345698][ T3905] loop5: p182 start 10 is beyond EOD, truncated [ 460.352026][ T3905] loop5: p183 start 10 is beyond EOD, truncated [ 460.360090][ T3905] loop5: p184 start 10 is beyond EOD, truncated [ 460.366323][ T3905] loop5: p185 start 10 is beyond EOD, truncated [ 460.372667][ T3905] loop5: p186 start 10 is beyond EOD, truncated [ 460.378899][ T3905] loop5: p187 start 10 is beyond EOD, truncated [ 460.386933][ T3905] loop5: p188 start 10 is beyond EOD, truncated [ 460.393295][ T3905] loop5: p189 start 10 is beyond EOD, truncated [ 460.399549][ T3905] loop5: p190 start 10 is beyond EOD, truncated [ 460.405934][ T3905] loop5: p191 start 10 is beyond EOD, truncated [ 460.412284][ T3905] loop5: p192 start 10 is beyond EOD, truncated [ 460.418513][ T3905] loop5: p193 start 10 is beyond EOD, truncated [ 460.424784][ T3905] loop5: p194 start 10 is beyond EOD, truncated [ 460.431114][ T3905] loop5: p195 start 10 is beyond EOD, truncated [ 460.437347][ T3905] loop5: p196 start 10 is beyond EOD, truncated [ 460.443636][ T3905] loop5: p197 start 10 is beyond EOD, truncated [ 460.449960][ T3905] loop5: p198 start 10 is beyond EOD, truncated [ 460.456188][ T3905] loop5: p199 start 10 is beyond EOD, truncated [ 460.462456][ T3905] loop5: p200 start 10 is beyond EOD, truncated [ 460.468688][ T3905] loop5: p201 start 10 is beyond EOD, truncated [ 460.475155][ T3905] loop5: p202 start 10 is beyond EOD, truncated [ 460.481542][ T3905] loop5: p203 start 10 is beyond EOD, truncated [ 460.487902][ T3905] loop5: p204 start 10 is beyond EOD, truncated [ 460.496369][ T3905] loop5: p205 start 10 is beyond EOD, truncated [ 460.502695][ T3905] loop5: p206 start 10 is beyond EOD, truncated [ 460.508927][ T3905] loop5: p207 start 10 is beyond EOD, truncated [ 460.515246][ T3905] loop5: p208 start 10 is beyond EOD, truncated [ 460.521582][ T3905] loop5: p209 start 10 is beyond EOD, truncated [ 460.527815][ T3905] loop5: p210 start 10 is beyond EOD, truncated [ 460.534127][ T3905] loop5: p211 start 10 is beyond EOD, truncated [ 460.540532][ T3905] loop5: p212 start 10 is beyond EOD, truncated [ 460.546767][ T3905] loop5: p213 start 10 is beyond EOD, truncated [ 460.553442][ T3905] loop5: p214 start 10 is beyond EOD, truncated [ 460.559689][ T3905] loop5: p215 start 10 is beyond EOD, truncated [ 460.566031][ T3905] loop5: p216 start 10 is beyond EOD, truncated [ 460.572399][ T3905] loop5: p217 start 10 is beyond EOD, truncated [ 460.578632][ T3905] loop5: p218 start 10 is beyond EOD, truncated [ 460.584920][ T3905] loop5: p219 start 10 is beyond EOD, truncated [ 460.591254][ T3905] loop5: p220 start 10 is beyond EOD, truncated [ 460.597485][ T3905] loop5: p221 start 10 is beyond EOD, truncated [ 460.605836][ T3905] loop5: p222 start 10 is beyond EOD, truncated [ 460.612278][ T3905] loop5: p223 start 10 is beyond EOD, truncated [ 460.618516][ T3905] loop5: p224 start 10 is beyond EOD, truncated [ 460.624803][ T3905] loop5: p225 start 10 is beyond EOD, truncated [ 460.631306][ T3905] loop5: p226 start 10 is beyond EOD, truncated [ 460.637606][ T3905] loop5: p227 start 10 is beyond EOD, truncated [ 460.643936][ T3905] loop5: p228 start 10 is beyond EOD, truncated [ 460.650286][ T3905] loop5: p229 start 10 is beyond EOD, truncated [ 460.656516][ T3905] loop5: p230 start 10 is beyond EOD, truncated [ 460.662816][ T3905] loop5: p231 start 10 is beyond EOD, truncated [ 460.669056][ T3905] loop5: p232 start 10 is beyond EOD, truncated [ 460.675374][ T3905] loop5: p233 start 10 is beyond EOD, truncated [ 460.681683][ T3905] loop5: p234 start 10 is beyond EOD, truncated [ 460.687915][ T3905] loop5: p235 start 10 is beyond EOD, truncated [ 460.694237][ T3905] loop5: p236 start 10 is beyond EOD, truncated [ 460.700543][ T3905] loop5: p237 start 10 is beyond EOD, truncated [ 460.706779][ T3905] loop5: p238 start 10 is beyond EOD, truncated [ 460.715249][ T3905] loop5: p239 start 10 is beyond EOD, truncated [ 460.721636][ T3905] loop5: p240 start 10 is beyond EOD, truncated [ 460.727871][ T3905] loop5: p241 start 10 is beyond EOD, truncated [ 460.734194][ T3905] loop5: p242 start 10 is beyond EOD, truncated [ 460.740593][ T3905] loop5: p243 start 10 is beyond EOD, truncated [ 460.746825][ T3905] loop5: p244 start 10 is beyond EOD, truncated [ 460.753149][ T3905] loop5: p245 start 10 is beyond EOD, truncated [ 460.759389][ T3905] loop5: p246 start 10 is beyond EOD, truncated [ 460.765851][ T3905] loop5: p247 start 10 is beyond EOD, truncated [ 460.772197][ T3905] loop5: p248 start 10 is beyond EOD, truncated [ 460.778431][ T3905] loop5: p249 start 10 is beyond EOD, truncated [ 460.784716][ T3905] loop5: p250 start 10 is beyond EOD, truncated [ 460.791160][ T3905] loop5: p251 start 10 is beyond EOD, truncated [ 460.797392][ T3905] loop5: p252 start 10 is beyond EOD, truncated [ 460.803740][ T3905] loop5: p253 start 10 is beyond EOD, truncated [ 460.810093][ T3905] loop5: p254 start 10 is beyond EOD, truncated 12:10:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b30, 0x0) 12:10:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001700)={[{@fat=@tz_utc='tz=UTC'}]}) 12:10:09 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x80ffff) 12:10:09 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:09 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:09 executing program 1: pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) [ 460.816391][ T3905] loop5: p255 start 10 is beyond EOD, truncated 12:10:09 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x80ffff) 12:10:09 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0x10c0fe}, 0x1c, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000001"], 0x14}}, 0x78) 12:10:09 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:09 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000005000000350000000000000085000000050000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xf0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000080), 0x4) 12:10:09 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:10:09 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x80ffff) 12:10:09 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:09 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0xd8) creat(&(0x7f0000000040)='./bus\x00', 0x0) 12:10:09 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) 12:10:09 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:10 executing program 1: pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) 12:10:10 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x80ffff) 12:10:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0x0, 0x0, 0xfffffffa, 0x512, 0x0, "554aa84d37c6b15b90092d7ef22a0eb50db9d2"}) 12:10:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x10000000005, 0x84) 12:10:10 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:10 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:10 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:10 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 12:10:10 executing program 5: r0 = socket(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) 12:10:10 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x80ffff) 12:10:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x600) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffff7f}, {0x8, 0x63}, {0x40, 0x7ff, 0x1}, {0x4, 0x4, 0x1}, 0x2, 0x100, 0x1000, 0x7f, 0x0, 0x800, 0x7, 0x4b, 0x20, 0x7, 0x0, 0x8, 0x12, 0x0, 0x3, 0x8}) 12:10:10 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:11 executing program 1: pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) 12:10:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x600) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffff7f}, {0x8, 0x63}, {0x40, 0x7ff, 0x1}, {0x4, 0x4, 0x1}, 0x2, 0x100, 0x1000, 0x7f, 0x0, 0x800, 0x7, 0x4b, 0x20, 0x7, 0x0, 0x8, 0x12, 0x0, 0x3, 0x8}) 12:10:11 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x10000000005, 0x84) 12:10:11 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x80ffff) 12:10:11 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) 12:10:11 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:11 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) 12:10:11 executing program 2: r0 = syz_io_uring_setup(0x15a3, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:11 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x80ffff) 12:10:11 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) 12:10:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 12:10:12 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x80ffff) 12:10:12 executing program 2: r0 = syz_io_uring_setup(0x15a3, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:12 executing program 5: io_uring_setup(0xeac, &(0x7f0000000000)={0x0, 0xfec3, 0x2f}) 12:10:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x10000000005, 0x84) 12:10:12 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002b80)=ANY=[@ANYBLOB="01000000000000000a4000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067020000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) 12:10:12 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:12 executing program 2: r0 = syz_io_uring_setup(0x15a3, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:12 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x80ffff) 12:10:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531109}) setregid(0xee00, 0xee00) setregid(0x0, 0x0) 12:10:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f00000001c0)=[@cr4={0x1, 0x22164}], 0x1) 12:10:12 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:12 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x80ffff) 12:10:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) memfd_create(0x0, 0x0) inotify_init1(0x0) 12:10:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:13 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 464.681639][T19903] APIC base relocation is unsupported by KVM [ 464.682582][T19903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x10000000005, 0x84) 12:10:14 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x80ffff) 12:10:14 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=@in6={0xa, 0x0, 0xa, @local, 0xa}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000ea000000a900000000000118"], 0x38}], 0x1, 0xc0fe) 12:10:14 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:14 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x80ffff) 12:10:14 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x80ffff) [ 465.903949][T19939] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:14 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:14 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 466.304462][T19971] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. [ 466.318532][T19975] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:15 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x80ffff) 12:10:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:15 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:15 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x80ffff) 12:10:15 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 467.412661][T20007] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. [ 467.439527][T20009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:16 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x80ffff) 12:10:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:16 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 467.905915][T20049] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. [ 467.942771][T20044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:16 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x80ffff) 12:10:17 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:17 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:17 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x80ffff) 12:10:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 469.068453][T20083] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:17 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x80ffff) 12:10:17 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:17 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x80ffff) [ 469.522577][T20121] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. [ 469.685953][T20133] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 12:10:18 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:18 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:18 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x80ffff) 12:10:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) [ 470.444012][T20155] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 12:10:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:19 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:19 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc008561c, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4058da08"}, 0x0, 0x0, @userptr}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x80ffff) 12:10:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) [ 470.830013][T20198] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 12:10:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:20 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:20 executing program 3: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0xa, &(0x7f0000000100)='^(#\\:[@\xcb)\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='{+}-\x00'}, 0x30) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 12:10:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:20 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:20 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:20 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 472.312806][T20257] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 472.371306][T20257] EXT4-fs (loop3): filesystem is read-only [ 472.408996][T20257] EXT4-fs (loop3): blocks per group (10) and clusters per group (10) inconsistent 12:10:21 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:10:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:21 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:21 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 473.331818][T20295] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. [ 473.377945][T20293] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended 12:10:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) [ 473.454668][T20293] EXT4-fs (loop3): filesystem is read-only 12:10:21 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 473.504987][T20293] EXT4-fs (loop3): blocks per group (10) and clusters per group (10) inconsistent 12:10:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:22 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:22 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 473.772881][T20327] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. [ 473.877221][T20333] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 473.909379][T20333] EXT4-fs (loop3): filesystem is read-only [ 473.933545][T20333] EXT4-fs (loop3): blocks per group (10) and clusters per group (10) inconsistent 12:10:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:10:23 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:23 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:23 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 474.748689][T20364] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 474.784773][T20364] EXT4-fs (loop3): filesystem is read-only 12:10:23 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:23 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) [ 474.786792][T20365] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. [ 474.811129][T20364] EXT4-fs (loop3): blocks per group (10) and clusters per group (10) inconsistent 12:10:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:23 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:23 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:23 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) [ 475.160214][T20387] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) 12:10:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 12:10:24 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:24 executing program 2: syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:24 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 476.001409][T20414] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) 12:10:24 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:24 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:24 executing program 2: syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:24 executing program 2: syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:10:24 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 476.466005][T20443] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) 12:10:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:25 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:25 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:10:25 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:25 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 477.252169][T20470] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) 12:10:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:25 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:25 executing program 2: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:10:25 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) [ 477.658452][T20510] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) 12:10:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:26 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:26 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:26 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) [ 478.381697][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.407605][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.417897][T20528] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) [ 478.474266][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 12:10:27 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 478.533013][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.605739][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 12:10:27 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) [ 478.657028][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.692755][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.707692][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.717770][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.735237][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.744849][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.761326][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.774672][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.785688][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.800778][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.825259][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.850783][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.875215][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.898669][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.916338][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 12:10:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 478.932037][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.949772][ T7805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.970614][ T7805] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on sz1 12:10:27 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 479.214736][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.240982][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.266682][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.285090][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.302065][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.317587][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.333143][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.349787][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.365193][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.380706][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.396182][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.420749][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.445352][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.468739][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.492867][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.505929][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.513808][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.521460][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.529099][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.536638][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.544266][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.551900][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 479.565458][ T12] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on sz1 12:10:28 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:28 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:28 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:28 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 480.133039][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.154534][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 12:10:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) [ 480.236069][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.254341][T20600] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) 12:10:28 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 480.292149][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.330702][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.387212][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.430936][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.472824][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.488187][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.495781][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.504635][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.520330][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.536888][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.544958][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.565584][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 12:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 480.607949][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.627655][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.637031][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.654516][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.687923][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.695341][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.717936][ T2585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 480.726716][ T2585] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on sz1 12:10:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:29 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 480.950802][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 480.962846][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 480.992467][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.031822][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.045098][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.127598][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.175006][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.223890][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.274434][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.324595][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.338044][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.345672][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.360328][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.393433][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.417204][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.452604][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.509898][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.535804][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.544322][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.552223][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.559915][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.567479][ T2585] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 481.576755][ T2585] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on sz1 12:10:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:30 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:30 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) 12:10:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 481.971086][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 481.989993][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 12:10:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 482.017366][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.037953][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.066319][T20669] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) [ 482.123072][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 12:10:30 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 482.194945][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.255621][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.310907][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.360560][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.382626][T20694] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) [ 482.414235][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.474165][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 12:10:31 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 482.533612][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.569747][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.595469][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.619704][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.627395][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.659210][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.695389][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.723704][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.751112][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.762140][T20703] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) [ 482.775642][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.796189][ T17] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.815483][ T17] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on sz1 12:10:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:31 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 483.127736][T20717] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) 12:10:31 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:31 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) 12:10:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:31 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 483.584427][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 483.602301][T20735] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096) [ 483.615507][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 12:10:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:32 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 483.727439][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 483.734877][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 483.858110][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 483.865556][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 12:10:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) [ 483.922070][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 483.947414][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 483.954848][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 12:10:32 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 483.977413][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 483.985414][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 483.992942][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.015906][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.023564][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.031586][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.039083][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.046476][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.054013][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.061485][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.077421][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.084844][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 484.096157][ T12] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 12:10:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 484.125012][ T12] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on sz1 12:10:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:33 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:33 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) 12:10:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 485.210437][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.277249][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.284684][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 12:10:33 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) [ 485.407411][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.414842][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.490898][T20829] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. [ 485.517848][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.525287][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.607184][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.647248][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 12:10:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) [ 485.654681][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 12:10:34 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 485.717389][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.724823][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.841078][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.897449][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 485.951163][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.017113][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.024573][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.077127][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.084557][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.107102][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.114536][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.137204][ T2585] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.157490][ T2585] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on sz1 12:10:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 486.420503][T20861] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) 12:10:35 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:35 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:35 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 486.978634][T20880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:35 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 487.271840][T20902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:35 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 487.551231][T20917] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:36 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) 12:10:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:36 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 487.990079][T20930] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:36 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001340)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) 12:10:36 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_getnexthop={0x18, 0x6a, 0x111}, 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:10:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 488.364693][T20951] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 488.393211][T20954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:36 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) 12:10:36 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 488.584218][T20967] tipc: Failed to obtain node identity [ 488.599214][T20967] tipc: Enabling of bearer rejected, failed to enable media [ 488.625054][T20968] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 488.641214][T20970] tipc: Failed to obtain node identity [ 488.654928][T20970] tipc: Enabling of bearer rejected, failed to enable media 12:10:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"45ad2d21a32a3994c91cb49c921bedd55233deb0a42727f7aaf41c6e6c9c1378e1fa70d7358675bafa3886593eb2b5c48e14cf268c4426e77b0bd8561cd341f87a4a0656312f9a085c900af72791735de31cce4aa393e9c3e2359cb8875f5dfae76e702eb5cfee4838348e4fa59d9d8444edccb9b9fb4a908092cac38ee70f42064205e50dd98736813c0a391b802fc3eff76657d326da1eef7bc16792260753610a216ee4a8cca0f4c5c7f23e1939d1f33daa4d42e6787ea26ee86a9fe0c323e9a387b7059e0c844d95ae7c818ba17f1818b8c7937868900b58a63147da6666bcb861cb9c3c951f62e7d76dff002bd2ce80e68bf3451b1783c733d0c630f39a7b651b557d8f636b34a16dd76aba44a0b1855fe6684bdd64085ad06296e700d303eda933065b6e575e68c157ab4c1bfe055a024c2907ebad0ec425de99006e08cd2a70381065422d9154017be7fc6759f9e94e2472ed091066cc433e8539229afc55f69dc4ad671f5a83b0d3c158298a674ed39e1667332a6e121815ab557004b1ed76e3b37d4a7d7832549ea3a1f74f87c8b4c748e7413141f265a924e7b65ea781f00ec2eb7455d1820fd4464a35aa2add4c862a3754deafd84b6b95c6bf2f07c57b7ae38dac6134fea4019bfbcf58d0b047492bc8d5d75a7be04273175aa2d5d6dee0ac55d90e6ba40c62e1823bdbc938f6170f8c648be28142ce56a2f2f6d43ca6f63652a2a04278d6894c0a283eec8b94418f25bf2ddb567ad1d91252a154d383ceaaeff0afa3fa0991f55b89d938c97488037141728447080612149470c5fc1034cf68a7fd79dffa7d4d0f17a37d383bc2dff757d95251ac99f18e55ac06270af14eac82d32c1a69d659720e74cedb069ac4eca5121476f11c70d4d10a85d82608258c212e63f56b56c76019ff1881130327da64c58851897171e49972998e1fe6f6e3ef9dc24be98c3a98449a7b75cb94a1acaf578b6e3a9633a3451c189a0c025519808d133e28f009334b031dd47e34752e1d2cf4fec132e9ab3ed59bd6955423b2ff571465b5fbc3a2db4a9a3c2eb2078673c9892c0b9e89e8d59de5eaa7dbc0db2d5950aa7481e89074e5347e8ae8ddaed0450f2ae376690f2d12e174429adf9ca90dc38ad2fb5d7b916bba0d9b1747127ffc084a2b516b5cc245919a9510c49890a3595cb508063ee763f0ac870379eb802bc5acafc0ae40aa9309988db95242638c7bbf281753362e0732660d723c2b108b2dfd7dffbe59451261770e0df53243037bd5ce9d688cd3d66587244f0f103930f289d304573668e72a89b924686a07f61a8acc706dd83e935be7b291d300f3566a068a6fc65d3341ef71138f4109cb09da3b41fbef5d2eac6aeb3922698943ee9f2b53d4467937fcf194b732b1bfab965e489d64d3e1fac59d509dde3b64e340497a0fd9e3790182"}) 12:10:37 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000540)="02", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464ce, &(0x7f0000000000)={r2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464ce, &(0x7f0000000000)={r2}) 12:10:37 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 488.929457][T20980] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 488.968398][T20979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:37 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x280c, &(0x7f0000002300), &(0x7f0000000000/0x3000)=nil, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0x4fcc, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 12:10:37 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 489.344881][T21005] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 489.379756][T21006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1327794021 (5311176084 ns) > initial count (876207492 ns). Using initial count to start timer. 12:10:37 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:38 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 489.610713][T21015] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:38 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:38 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)={"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"}) 12:10:38 executing program 4: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0xfffffffe) 12:10:38 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x235) [ 489.943747][T21033] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 489.961751][T21031] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)={"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"}) [ 489.987566][T21033] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 12:10:38 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x235) 12:10:38 executing program 4: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0xfffffffe) 12:10:38 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) [ 490.249885][T21056] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 490.290428][T21057] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:39 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:39 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x235) 12:10:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) [ 490.708326][T21072] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:40 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:40 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) 12:10:40 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:40 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:40 executing program 4: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)='z;', 0x2, 0xfffffffffffffffb) [ 491.640239][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 491.671997][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 12:10:40 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private2, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000580)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x18010}, 0x24040010) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0145608, &(0x7f00000000c0)={0x6000006, 0x1, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c87400"}, 0x0, 0x0, @fd}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0145608, &(0x7f00000000c0)={0xb00000, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c87400"}, 0x0, 0x0, @fd, 0x0, 0x7000000}) 12:10:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000102, 0x0, 0x3, 0x8, 0x1b, 0x0, 0x4800]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) [ 491.700817][T21093] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 491.726471][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 491.757386][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 491.806274][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 491.845132][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 12:10:40 executing program 5: ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xbacdcf60fb63fc74, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) [ 491.906756][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 491.914187][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 12:10:40 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) [ 491.986356][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 491.993789][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.036249][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.043689][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.061319][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.075366][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.088950][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.102451][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.116328][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.123742][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.143086][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.156436][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.163846][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.183340][ T7805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 492.197505][ T7805] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on sz1 12:10:40 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:40 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90200000003", 0x1d, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 492.399014][T21126] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 492.567502][T21139] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:41 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:41 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:41 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90200000003", 0x1d, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:41 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:41 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) [ 493.263369][T21170] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:41 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:41 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90200000003", 0x1d, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:42 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:42 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 493.662691][T21190] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:43 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:43 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:43 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:43 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a00000025000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:43 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 494.803035][T21219] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:43 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) 12:10:43 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:43 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a00000025000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:43 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:43 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) [ 495.051578][T21237] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:43 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a00000025000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 495.305198][T21247] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:44 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) 12:10:44 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:44 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:44 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:44 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) [ 495.711170][T21257] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:44 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x4}, 0x2d) 12:10:44 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:44 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) 12:10:44 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x4}, 0x2d) [ 495.928487][T21276] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:44 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) 12:10:45 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x4}, 0x2d) 12:10:45 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:45 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:45 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:45 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:45 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x2d) [ 496.705508][T21298] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:45 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:45 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:45 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x2d) 12:10:45 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 496.950805][T21318] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:45 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x2d) 12:10:45 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:45 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) [ 497.248192][T21331] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:45 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:46 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:46 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:46 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:46 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:46 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:46 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 497.781855][T21347] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:46 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:46 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:46 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:46 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:46 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 497.997237][T21365] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:46 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:47 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:47 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:47 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:47 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:47 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:47 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 498.809243][T21384] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:47 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:47 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:47 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:47 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 499.120685][T21402] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:47 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:47 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 499.443198][T21413] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:48 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:48 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:48 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:48 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:48 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:48 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:48 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 499.815739][T21429] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:48 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) 12:10:48 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:48 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 500.111170][T21443] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 12:10:48 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 12:10:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:49 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:49 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 12:10:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:49 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:49 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:49 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 12:10:49 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:49 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:49 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 12:10:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 501.259914][T21510] EXT4-fs (loop3): Can't read superblock on 2nd try 12:10:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:50 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:50 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x0, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:50 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 12:10:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x0, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 501.701135][T21529] EXT4-fs (loop3): Can't read superblock on 2nd try 12:10:50 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:50 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 12:10:50 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x0, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 502.092953][T21546] EXT4-fs (loop3): Can't read superblock on 2nd try 12:10:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:50 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:50 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x0, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:50 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x2, 0x86201) 12:10:51 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0xe0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='%!-$] *@(+--@{,#{%\xe8{.,`-&\':@[$,(&(\x00', &(0x7f0000000080)='./file0\x00', r2) 12:10:51 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x0, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) [ 502.904965][ T27] audit: type=1800 audit(1599739851.368:37): pid=21586 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="net_prio.ifpriomap" dev="mqueue" ino=72752 res=0 errno=0 12:10:51 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x0, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 503.050799][ T27] audit: type=1800 audit(1599739851.408:38): pid=21586 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="mqueue" ino=72446 res=0 errno=0 12:10:51 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:51 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0xe0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='%!-$] *@(+--@{,#{%\xe8{.,`-&\':@[$,(&(\x00', &(0x7f0000000080)='./file0\x00', r2) 12:10:51 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:51 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:52 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0xe0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='%!-$] *@(+--@{,#{%\xe8{.,`-&\':@[$,(&(\x00', &(0x7f0000000080)='./file0\x00', r2) 12:10:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:52 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:52 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:52 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0xe0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='%!-$] *@(+--@{,#{%\xe8{.,`-&\':@[$,(&(\x00', &(0x7f0000000080)='./file0\x00', r2) 12:10:52 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:52 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:53 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:53 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:53 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:53 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:53 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:54 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:54 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:54 executing program 3: ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:54 executing program 3: ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:55 executing program 3: ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:55 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:55 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:55 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:55 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:56 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:56 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:56 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:56 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:56 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:56 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) 12:10:56 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) 12:10:56 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:56 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:56 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) 12:10:57 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:57 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a31190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:57 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x0, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:57 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x0, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:57 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:58 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:58 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x0, 0x0, 0xb, 0xa, 0x66770579, 0x81}) 12:10:58 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:58 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a31190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:58 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:58 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0x0, 0xa, 0x66770579, 0x81}) 12:10:58 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:58 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:58 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0x0, 0xa, 0x66770579, 0x81}) 12:10:58 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:58 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:59 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:10:59 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0x0, 0xa, 0x66770579, 0x81}) 12:10:59 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:59 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:10:59 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a31190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:10:59 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:59 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0x0, 0x66770579, 0x81}) 12:10:59 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:10:59 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0x0, 0x66770579, 0x81}) 12:10:59 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:10:59 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:11:00 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe800000000000000000000000000000000204010000000000000000000000000000000000001100e72882e14572e2f5dac3b1392aa0df338f060331abc50bdaf657e3aabcf8036e29ad5803c37b01c7b13aaac57cb38bc41b09eb7effd06ed9d2e7"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:00 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0x0, 0x66770579, 0x81}) 12:11:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:00 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:11:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:00 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e700"/196], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:00 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:11:00 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa, 0x0, 0x81}) 12:11:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:00 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa}) 12:11:00 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) 12:11:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:01 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa}) 12:11:01 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 12:11:01 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:01 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, 0x0, 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:01 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e700"/196], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:01 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x4d, 0x0, 0xb, 0xa}) 12:11:01 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:01 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 12:11:01 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0x6e) 12:11:01 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 12:11:01 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:02 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) 12:11:02 executing program 3: set_mempolicy(0x4, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0xc1007c01, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') [ 513.663727][T22033] device lo entered promiscuous mode 12:11:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:03 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, 0x0, 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) 12:11:03 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e700"/196], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) socket$netlink(0x10, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f00000000c0)) 12:11:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) 12:11:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) [ 515.157334][T22060] IPVS: ftp: loaded support on port[0] = 21 12:11:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) [ 515.977879][T22070] IPVS: ftp: loaded support on port[0] = 21 12:11:04 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, 0x0, 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:04 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:04 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) 12:11:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) syz_read_part_table(0x0, 0x0, 0x0) 12:11:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) 12:11:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:32 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:32 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) 12:11:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) 12:11:32 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x8901, &(0x7f0000001540)={0x7000000, @in={0x2, 0x0, @empty}, @l2, @in={0x2, 0x0, @private}}) recvmsg(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002440)=[{&(0x7f00000022c0)=""/69, 0x45}, {&(0x7f0000000140)=""/32, 0x20}], 0x2}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) getpriority(0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x2, 0x0, 0xffffff7f}, 0x1c, &(0x7f0000001400)={&(0x7f0000000040)={0x4c}, 0x4c}, 0x8}, 0x80fe) 12:11:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0x14, 0x63}}}, 0x1c, 0x0}, 0x0) 12:11:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'tunl0\x00', @ifru_mtu=0x531101}) clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x20000698) 12:11:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:32 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000180)={'team_slave_0\x00', @ifru_ivalue=0x4}) 12:11:33 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x0) r2 = dup3(r0, r1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$inet(0xa, 0x5, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x48, 0x100000a}, 0x200000cc, &(0x7f0000000140)={0x0, 0x3}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="8a2dfda11d951c6e83601d433e391dd19c9ccc8e08e13335dc798d9a09af113aef54b4c9", 0x24}], 0x1}}], 0x1, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20014040}, 0x8001) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="8a2dfda11d951c6e83601d433e391dd19c9ccc8e08e13335dc798d9a09af113aef54b4c9c97adac6876873d333163f93", 0x30}], 0x1}}], 0x1, 0x0) 12:11:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) 12:11:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0) r1 = socket(0x2, 0xa, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede", 0x38f) sendfile(r0, r2, 0x0, 0x14000) 12:11:33 executing program 5: r0 = io_uring_setup(0x3e70, &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x11, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x4040, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x6628, 0x0) [ 545.220858][ T27] audit: type=1800 audit(1599739893.693:39): pid=22218 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=4 res=0 errno=0 12:11:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x2d) [ 545.320332][ T27] audit: type=1804 audit(1599739893.783:40): pid=22228 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir144901581/syzkaller.hYRPEs/801/file1/file0" dev="loop3" ino=4 res=1 errno=0 12:11:33 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/245], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 12:11:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000340)='R') 12:11:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 12:11:34 executing program 5: socket$can_raw(0x2, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 12:11:34 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:34 executing program 3: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) 12:11:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 12:11:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000000000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x1000)=nil, 0x5000) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') 12:11:34 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/245], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12:11:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12:11:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 12:11:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={0x0, @l2tp={0x2, 0x0, @local}, @ethernet={0x0, @link_local}, @xdp, 0xffff}) 12:11:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={0x0, 0x7b8}, 0x1, 0x0, 0x0, 0x80}, 0x880) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000a00)={&(0x7f00000009c0)=[0x0, 0x0], 0x2, 0x10000}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x30}}, 0x0) 12:11:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x4}, 0x2d) 12:11:35 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8d01, 0x0) write$6lowpan_enable(r0, &(0x7f00000000c0)='1', 0x1) 12:11:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x4}, 0x2d) 12:11:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) 12:11:36 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/245], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:36 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x2000025b) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x802880, 0x0) 12:11:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 12:11:36 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x181040, 0x0) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 12:11:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x4}, 0x2d) 12:11:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x4}, 0x2d) 12:11:36 executing program 3: r0 = socket(0x2, 0x80002, 0x0) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "20998019268f9f8883bd798916f0d3414950dff203412cb4929738239eecc945cb32c8021e74f0b05251a59db0d8f0a48b4be3261a1580cf76e526ceabef65"}, 0x60) 12:11:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x4}, 0x2d) 12:11:36 executing program 3: pipe(0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 12:11:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:37 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x4}, 0x2d) 12:11:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 12:11:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@dev, 0x0, 0x30}]}, 0x38}}, 0x0) 12:11:37 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/253], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:37 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r0 = socket(0x0, 0x80001, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x11) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>0&&!~\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x4, 0x5, 0x7, 0x9, 0x0, 0x97, 0x54, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x4}, 0x400, 0x8, 0x0, 0x7, 0x6, 0x1e, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 12:11:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind(r0, &(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 12:11:37 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0}, 0x2d) 12:11:37 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r0 = socket(0x0, 0x80001, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x11) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>0&&!~\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x4, 0x5, 0x7, 0x9, 0x0, 0x97, 0x54, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x4}, 0x400, 0x8, 0x0, 0x7, 0x6, 0x1e, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 12:11:37 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000131401db"], 0x30}}, 0x0) 12:11:37 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0}, 0x2d) 12:11:37 executing program 5: r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x8, &(0x7f0000000040)=ANY=[], 0x10) [ 549.327876][T22410] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 12:11:38 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x7ffffffff000) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x9000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}}, 0x15) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 12:11:38 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0}, 0x2d) 12:11:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 12:11:38 executing program 5: r0 = gettid() syz_open_procfs(r0, 0x0) 12:11:38 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/253], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x37) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000001c0), &(0x7f0000000100)=@tcp, 0x1}, 0x20) 12:11:38 executing program 5: r0 = getpgid(0x0) clone3(&(0x7f0000000200)={0x20100500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0], 0x1}, 0x58) 12:11:38 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', @ifru_mtu=0x531100}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x39, &(0x7f0000000280)={0x0, 0x9, [0x4], [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @jumbo]}, 0x50) 12:11:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 12:11:38 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 12:11:38 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x3, 0xf7, 0x47, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x1}, 0x10, 0x1000, 0x4, 0x3, 0x7, 0x1, 0x1}, 0xffffffffffffffff, 0x8, r0, 0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x30, 0x3, 0x8, 0x2, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffd5fd, 0x4, @perf_config_ext={0x7295, 0x7}, 0x44a80, 0x696, 0x84, 0x3, 0x7, 0x4e5, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5502, 0x0) [ 550.478130][T22460] block nbd5: NBD_DISCONNECT [ 550.508892][T22455] block nbd5: Disconnected due to user request. [ 550.530368][T22455] block nbd5: shutting down sockets [ 550.562247][T22460] block nbd5: NBD_DISCONNECT [ 550.573186][T22455] block nbd5: Disconnected due to user request. [ 550.593225][T22455] block nbd5: shutting down sockets [ 550.762122][T22465] input: syz0 as /devices/virtual/input/input10 [ 550.798554][T22465] input: syz0 as /devices/virtual/input/input11 12:11:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe80000000000000000000000000000000020401000000000000000000"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:39 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0xc, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 12:11:39 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x118) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) userfaultfd(0x7f3c33697904b8ae) semget(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7}, 0x5104, 0xff, 0x0, 0x5, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x1000000, 0x4}, 0x40) semop(0x0, 0x0, 0x0) clone3(&(0x7f00000002c0)={0x200000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x26}, &(0x7f0000000200)=""/103, 0x67, &(0x7f00000000c0), &(0x7f0000000280)=[r1, r1, r1, r1], 0x4}, 0x58) 12:11:39 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x40044103, 0x400000) 12:11:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x7a00}, 0x1f, &(0x7f0000000040)={0x0}}, 0x30) 12:11:39 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/253], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 551.442765][ T27] audit: type=1800 audit(1599739899.904:41): pid=22496 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15880 res=0 errno=0 12:11:39 executing program 3: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000012c0)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='%\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x1c}}, 0x0) 12:11:39 executing program 4: 12:11:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x1, 0x0) ioctl$EVIOCSREP(r0, 0x40284504, &(0x7f00000001c0)=[0x81]) [ 551.497615][ T27] audit: type=1804 audit(1599739899.904:42): pid=22496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir817304188/syzkaller.MPFoRO/872/file0" dev="sda1" ino=15880 res=1 errno=0 12:11:40 executing program 4: r0 = socket(0x0, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x9, 0x0, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x7) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7, 0x0, 0xffffffffffffffff}) r4 = socket(0x0, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x14}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000100)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000180)=0x6) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 12:11:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 12:11:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0105303, &(0x7f00000000c0)={{0x20}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) 12:11:41 executing program 5: r0 = socket(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20080800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) dup2(r1, r0) 12:11:41 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000000), 0x5f) 12:11:41 executing program 0: syz_mount_image$exfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='erofs\x00', 0x0, 0x0) 12:11:41 executing program 4: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @broadcast}, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r4, 0x1, 0x6, @broadcast}, 0x10) 12:11:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:41 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/257], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 552.623216][T22541] device ip6_vti0 entered promiscuous mode [ 552.631460][T22541] device ip6_vti0 left promiscuous mode [ 552.656488][T22546] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 552.657534][T22541] device ip6_vti0 entered promiscuous mode 12:11:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x75, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 12:11:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x727, &(0x7f0000000140)="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"}) 12:11:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8919, &(0x7f0000000080)={'tunl0\x00', 0x0}) [ 552.724615][T22552] device ip6_vti0 left promiscuous mode 12:11:41 executing program 0: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) 12:11:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 12:11:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="900000002000db8a79caee5957ca00d402"], 0x90}], 0x1}, 0x0) 12:11:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14e, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:11:41 executing program 0: r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsmount(r0, 0x0, 0x0) 12:11:41 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140), 0x0}) [ 552.967147][T22571] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 553.006541][T22578] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. 12:11:41 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0xa, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) 12:11:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:42 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x304}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x64, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 12:11:42 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/dlm-control\x00', 0x410082, 0x0) 12:11:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendto$l2tp(r0, &(0x7f00000000c0)="8e", 0x34000, 0xe0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10) 12:11:42 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/257], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 12:11:42 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x304}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x64, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 12:11:42 executing program 0: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x24008000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x3ff) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1, 0x6, 0x80, 0x6, 0x0, 0x2, 0x100a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x3000, 0x7, 0x0, 0x1, 0x80000000000000, 0x5, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400019) write$cgroup_subtree(r0, &(0x7f00000005c0)={[{0x0, 'memory', 0xff}]}, 0xfdef) r3 = perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x70, 0xff, 0x28, 0x4, 0x35, 0x0, 0x2, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0xb68}, 0x4, 0xfffffffffffffff8, 0x6, 0x1, 0x79e, 0x6, 0x6}, r0, 0x0, r0, 0xb) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x9, 0x9, 0x6, 0x5, 0x0, 0x7fffffff, 0x8, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x2044, 0x2, 0x30000000, 0x3, 0x2d, 0x7, 0xa6}, 0xffffffffffffffff, 0xe, r3, 0xa) 12:11:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="a80101009f0f00000000000000000000b94981362b352b00ec57c1ebc09105484a1f0000000000004973dbd89fd602486b0000dba833c3c79d721e268ba1f284ceb4bbc6d1b0f580cc0e24fbef753a5352262900e1be4483b8ffadd9540171802e95d1000015ea1b95c28d2b56bc9c755d53b10c4dd75c3d181ebd8624c5e8d020a8bfba811728baf290ad846cab93c1675184cd4448b1d49c9c780c8cce870a45570e31364d59563b38e63661447c7e8f075e1a21fddaf53e0ab63a4b35f40fa605470816f64e1af753c8eed8981c50f026bf7e7b1c577560dbafcf7a769b388a913f238a5a06fd0910eac691a79199d02953ca8675f313bfc514133006db42cf0600000000000000c44514616fc0b641bbd97518bc4d963f42a1dd11586524144bc3162e06ba55a7ac3631823b28610f5bac24f0328bb6ffb7dda9bda06ac7f6c585b2de6114c2e65d3c056a1cbb25193b5e6aa2d7a6a2143579849a0520e8a3783fae199cfbc64033504836d321f4d22bdec4b02b2db7e8fdda38c8ede48cd7d93d5f30a9317202fec6e49defbf6ee3ea744729d91e34442ac6618dd489a38da4b607d9fef3036511ae411f4e323a9b7c4e2cc1ec4efb37"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 12:11:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000008e80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0xd}, 0x1c, 0x0}}], 0x1, 0x0) 12:11:44 executing program 0: mmap$dsp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3000003, 0x1d224ea8c5207bf2, 0xffffffffffffffff, 0x0) 12:11:44 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/257], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="a80101009f0f00000000000000000000b94981362b352b00ec57c1ebc09105484a1f0000000000004973dbd89fd602486b0000dba833c3c79d721e268ba1f284ceb4bbc6d1b0f580cc0e24fbef753a5352262900e1be4483b8ffadd9540171802e95d1000015ea1b95c28d2b56bc9c755d53b10c4dd75c3d181ebd8624c5e8d020a8bfba811728baf290ad846cab93c1675184cd4448b1d49c9c780c8cce870a45570e31364d59563b38e63661447c7e8f075e1a21fddaf53e0ab63a4b35f40fa605470816f64e1af753c8eed8981c50f026bf7e7b1c577560dbafcf7a769b388a913f238a5a06fd0910eac691a79199d02953ca8675f313bfc514133006db42cf0600000000000000c44514616fc0b641bbd97518bc4d963f42a1dd11586524144bc3162e06ba55a7ac3631823b28610f5bac24f0328bb6ffb7dda9bda06ac7f6c585b2de6114c2e65d3c056a1cbb25193b5e6aa2d7a6a2143579849a0520e8a3783fae199cfbc64033504836d321f4d22bdec4b02b2db7e8fdda38c8ede48cd7d93d5f30a9317202fec6e49defbf6ee3ea744729d91e34442ac6618dd489a38da4b607d9fef3036511ae411f4e323a9b7c4e2cc1ec4efb37"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 12:11:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 12:11:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 12:11:45 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/259], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000000000009c08", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000040)={@multicast, @local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, {0x12, 0x0, 0x0, @local}}}}}, 0x0) 12:11:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bf"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 557.207321][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 557.226788][T22666] bridge1: port 1(syz_tun) entered blocking state [ 557.234782][T22666] bridge1: port 1(syz_tun) entered disabled state [ 557.243340][T22666] device syz_tun entered promiscuous mode [ 557.260228][T22666] bridge1: port 1(syz_tun) entered blocking state [ 557.266797][T22666] bridge1: port 1(syz_tun) entered forwarding state [ 557.306057][T22670] bridge1: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 12:11:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000000000009c08", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000040)={@multicast, @local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, {0x12, 0x0, 0x0, @local}}}}}, 0x0) [ 557.465622][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 557.497339][T22677] device syz_tun left promiscuous mode [ 557.510965][T22677] bridge1: port 1(syz_tun) entered disabled state [ 557.535602][T22677] bridge2: port 1(syz_tun) entered blocking state [ 557.553438][T22677] bridge2: port 1(syz_tun) entered disabled state [ 557.564951][T22677] device syz_tun entered promiscuous mode [ 557.585801][T22680] bridge2: port 1(syz_tun) entered blocking state [ 557.592340][T22680] bridge2: port 1(syz_tun) entered forwarding state [ 557.663005][T22677] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 12:11:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 12:11:47 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/259], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000000000009c08", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000040)={@multicast, @local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, {0x12, 0x0, 0x0, @local}}}}}, 0x0) 12:11:47 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bf"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="a80101009f0f00000000000000000000b94981362b352b00ec57c1ebc09105484a1f0000000000004973dbd89fd602486b0000dba833c3c79d721e268ba1f284ceb4bbc6d1b0f580cc0e24fbef753a5352262900e1be4483b8ffadd9540171802e95d1000015ea1b95c28d2b56bc9c755d53b10c4dd75c3d181ebd8624c5e8d020a8bfba811728baf290ad846cab93c1675184cd4448b1d49c9c780c8cce870a45570e31364d59563b38e63661447c7e8f075e1a21fddaf53e0ab63a4b35f40fa605470816f64e1af753c8eed8981c50f026bf7e7b1c577560dbafcf7a769b388a913f238a5a06fd0910eac691a79199d02953ca8675f313bfc514133006db42cf0600000000000000c44514616fc0b641bbd97518bc4d963f42a1dd11586524144bc3162e06ba55a7ac3631823b28610f5bac24f0328bb6ffb7dda9bda06ac7f6c585b2de6114c2e65d3c056a1cbb25193b5e6aa2d7a6a2143579849a0520e8a3783fae199cfbc64033504836d321f4d22bdec4b02b2db7e8fdda38c8ede48cd7d93d5f30a9317202fec6e49defbf6ee3ea744729d91e34442ac6618dd489a38da4b607d9fef3036511ae411f4e323a9b7c4e2cc1ec4efb37"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 12:11:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 559.127701][T22696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 559.288589][T22706] device syz_tun left promiscuous mode [ 559.294270][T22706] bridge2: port 1(syz_tun) entered disabled state [ 559.305884][T22706] bridge3: port 1(syz_tun) entered blocking state [ 559.313531][T22706] bridge3: port 1(syz_tun) entered disabled state [ 559.322376][T22706] device syz_tun entered promiscuous mode [ 559.330968][T22696] bridge3: port 1(syz_tun) entered blocking state [ 559.337457][T22696] bridge3: port 1(syz_tun) entered forwarding state 12:11:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001700)={&(0x7f00000015c0)={0xa, 0x4}, 0x200015cc, &(0x7f00000016c0)={0x0, 0x700}}, 0x0) 12:11:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xe00) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680), 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 12:11:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x8}]}, 0x30}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c00fe08dac1b40100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000a000200bbbbbbbbbbbb00000800050000000000"], 0x30}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x1f, 0x7, 0x8, 0x0, 0x0, 0xfffffffffffffff9, 0x44950, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0xe6}, 0x0, 0x401, 0xffff, 0x7, 0x5, 0x1, 0x7}, 0x0, 0xc, r6, 0x2) write$apparmor_exec(r5, &(0x7f0000000080)={'stack ', '#\x00'}, 0x20000088) r7 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2) write$apparmor_exec(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x1, 0x46358}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4008010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x12, 0x581}, 0x20}}, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) 12:11:48 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/259], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a3c32284beb55a0bda82294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed091cf579fa9d010000825d3317295f6580e8b2623506a8c8251a69158200000000f56bef6fcdd9"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000004bb1f4cdbad7560c4e191eb4fe21c811284ccb28246f2f705c767ae6317a282c14f19bf3ca622af81b3495da87a023fda3ae5f930faa28c1fd2974d4d27c97e43b1a2b3f838028e08442f4f18263504ba03bb52142dcfababc23c396ba29739174dcc6c8fbf0ebf28c6882346de6a1b466bf3d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {0xf000}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) 12:11:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bf"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe7ff, 0x1, &(0x7f0000000340)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x1000a, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x40) ftruncate(r1, 0x1000) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000380)='./bus\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000100)=0xb0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 12:11:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a3c32284beb55a0bda82294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed091cf579fa9d010000825d3317295f6580e8b2623506a8c8251a69158200000000f56bef6fcdd9"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000004bb1f4cdbad7560c4e191eb4fe21c811284ccb28246f2f705c767ae6317a282c14f19bf3ca622af81b3495da87a023fda3ae5f930faa28c1fd2974d4d27c97e43b1a2b3f838028e08442f4f18263504ba03bb52142dcfababc23c396ba29739174dcc6c8fbf0ebf28c6882346de6a1b466bf3d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {0xf000}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) 12:11:50 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/260], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 12:11:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 561.743014][ T27] audit: type=1804 audit(1599739910.205:43): pid=22758 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir144901581/syzkaller.hYRPEs/823/file0/bus" dev="sda1" ino=15934 res=1 errno=0 [ 561.893987][ T27] audit: type=1800 audit(1599739910.205:44): pid=22758 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15934 res=0 errno=0 12:11:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe8000"/52], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') 12:11:51 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/260], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 562.654480][ T27] audit: type=1804 audit(1599739911.115:45): pid=22781 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir144901581/syzkaller.hYRPEs/823/file0/bus" dev="sda1" ino=15934 res=1 errno=0 12:11:51 executing program 3: r0 = socket(0xa, 0x6, 0x0) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x20) [ 562.757419][ T27] audit: type=1804 audit(1599739911.145:46): pid=22787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir144901581/syzkaller.hYRPEs/823/file0/bus" dev="sda1" ino=15934 res=1 errno=0 [ 562.815719][ T27] audit: type=1800 audit(1599739911.145:47): pid=22787 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15934 res=0 errno=0 12:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000002780), &(0x7f00000027c0)=0x4) 12:11:51 executing program 5: clone3(&(0x7f0000004e00)={0x9002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:11:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="f031ab5377000066b807018ed066bad004ec66baf80cb849741387ef66bafc0cb000ee66baf80cb89fa67b86ef66bafc0cb05dee0f79bc247800000066b830018ee0f30f09c744240003000000c7442402dad94f85c7442406000000000f011424b80e5100000f23c80f21f8350800d0000f23f8", 0x74}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:11:51 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x80000002}, 0x40) 12:11:51 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x80000002}, 0x40) 12:11:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000002980)={0x11, 0x10, 0xfa00, {&(0x7f00000028c0)}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000740)={0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000500)={0x0, 0x0}) kcmp(r7, r8, 0x2, r4, r2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000002a00)={0x1, r7}) clone3(&(0x7f0000000300)={0x2000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x39}, &(0x7f00000001c0)=""/247, 0xf7, &(0x7f0000000100)=""/84, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8], 0x6}, 0x50) process_vm_readv(r10, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/39, 0x27}], 0x8, &(0x7f0000002880)=[{&(0x7f0000002840)=""/21, 0x15}], 0x1, 0x0) 12:11:52 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff070000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c00"/260], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 12:11:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) 12:11:52 executing program 3: getcwd(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}, {{&(0x7f0000000300)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="522e537fe83f81ebc56bfd1e61b019ff63755eb0e297aeba879f2c40f0b4aec3924b2ce41014f21188a3e6df15144dce28a177461734e2732bdf977ffbf4142d98e6ee2f5f3dbc6afc59db2de5281d06eb3a53c13becba01ad2bf1596c2bc27c30807ca5c9d80c6b056e1e655c3f3d1afbb6da415e0bc4c8f6e4ec19e558cfe8e290c1d9542144f07fcf242834b2dd174ddb05f25aca521a03e11947415c15fce49dadcb89b11032ea509add959cd01e1aa1bc75713caf6de207e46b2aa4579daa6b91c1dc1a33e32adbf5dc8a1214c93ad4d552e0e9f97210fc837d696da8c624ee2b", 0xe3}, {&(0x7f0000000480)="062eb95d73cbb2d67632cfff19befd18edb667877da5d1d0d88ef5573681bd2e5a6795f75217a8fec91f04c64e859fdea99df919dc613329a98ca073382f1f1693f332027cc4077cfeb0bc9ff33b6a3bea85bc69dd3eb51a9d60d8c9bf80a4ce59fb27093699cb067dcbbf7a16482dec556ce9e60a940c7338232a0609a86be8c24fcb2e9250ca8096fd7f6c628b17a7e12b3f5b7563590725b20a34d6e9fc70ac827a35d6e0cb8eaf1e5c78b8a72a6dd091c434c2ef9646887a274724ab0402cb12df5e44d16d1c2d5f85fb401a85303201", 0xd2}], 0x2}}], 0x2, 0x40) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/33, 0x21, 0x100, &(0x7f0000000240)=@ipx={0x4, 0x1, 0x6, "0c716798e87a", 0x7}, 0x80) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000080)=""/179, 0xb3) 12:11:52 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd60163da400180000fd6a964883a66804bfa395628ad9fe8000"/52], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 12:11:52 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}}, 0x0) [ 564.531075][T22840] mmap: syz-executor.5 (22840) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 564.551892][T22847] ================================================================== [ 564.560370][T22847] BUG: KASAN: global-out-of-bounds in precalculate_color+0x212e/0x23c0 [ 564.568615][T22847] Read of size 1 at addr ffffffff88dc83bf by task vivid-000-vid-c/22847 [ 564.576927][T22847] [ 564.579259][T22847] CPU: 1 PID: 22847 Comm: vivid-000-vid-c Not tainted 5.9.0-rc4-syzkaller #0 [ 564.588011][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.598059][T22847] Call Trace: [ 564.601354][T22847] dump_stack+0x198/0x1fd [ 564.605710][T22847] ? precalculate_color+0x212e/0x23c0 [ 564.611095][T22847] ? precalculate_color+0x212e/0x23c0 [ 564.616474][T22847] print_address_description.constprop.0.cold+0x5/0x497 [ 564.623432][T22847] ? precalculate_color+0x212e/0x23c0 [ 564.628862][T22847] ? lockdep_hardirqs_off+0x96/0xd0 [ 564.634068][T22847] ? vprintk_func+0x97/0x1a6 [ 564.638660][T22847] ? precalculate_color+0x212e/0x23c0 [ 564.644031][T22847] ? precalculate_color+0x212e/0x23c0 [ 564.649443][T22847] kasan_report.cold+0x1f/0x37 [ 564.654211][T22847] ? precalculate_color+0x212e/0x23c0 [ 564.659589][T22847] precalculate_color+0x212e/0x23c0 [ 564.664792][T22847] ? color_to_ycbcr.isra.0+0x680/0x680 [ 564.670273][T22847] tpg_recalc+0x5c8/0x2590 [ 564.674704][T22847] ? gen_twopix+0x46b0/0x46b0 [ 564.679377][T22847] ? mark_lock+0xbc/0x1710 [ 564.683796][T22847] ? mark_lock+0xbc/0x1710 [ 564.688229][T22847] tpg_calc_text_basep+0xb4/0x260 [ 564.693316][T22847] vivid_fillbuff+0x17dc/0x39d0 [ 564.698202][T22847] ? vivid_grab_controls+0x380/0x380 [ 564.703490][T22847] ? lock_is_held_type+0xbb/0xf0 [ 564.708431][T22847] ? find_held_lock+0x2d/0x110 [ 564.713195][T22847] ? vivid_thread_vid_cap_tick+0x10f4/0x2330 [ 564.719181][T22847] ? lock_downgrade+0x830/0x830 [ 564.724032][T22847] ? do_raw_spin_lock+0x120/0x2b0 [ 564.729105][T22847] ? v4l2_ctrl_request_setup+0x45f/0xb00 [ 564.734739][T22847] ? rwlock_bug.part.0+0x90/0x90 [ 564.739684][T22847] vivid_thread_vid_cap_tick+0x88b/0x2330 [ 564.745418][T22847] ? check_preemption_disabled+0x50/0x130 [ 564.751142][T22847] ? read_seqcount_t_begin.constprop.0+0x17d/0x1e0 [ 564.757648][T22847] ? lockdep_hardirqs_on+0x53/0x100 [ 564.762914][T22847] ? mutex_trylock+0x246/0x2c0 [ 564.767680][T22847] ? vivid_thread_vid_cap+0x2b9/0xa50 [ 564.773056][T22847] vivid_thread_vid_cap+0x5d1/0xa50 [ 564.778263][T22847] ? vivid_thread_vid_cap_tick+0x2330/0x2330 [ 564.784243][T22847] kthread+0x3b5/0x4a0 [ 564.788311][T22847] ? __kthread_bind_mask+0xc0/0xc0 [ 564.793424][T22847] ret_from_fork+0x1f/0x30 [ 564.797848][T22847] [ 564.800166][T22847] The buggy address belongs to the variable: [ 564.806199][T22847] tpg_colors+0x159f/0x3020 [ 564.810692][T22847] [ 564.813020][T22847] Memory state around the buggy address: [ 564.818649][T22847] ffffffff88dc8280: 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 12:11:53 executing program 0: clone3(&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgrp(0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/229, 0xe5}], 0x1, &(0x7f0000000200)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1, 0x0) [ 564.826720][T22847] ffffffff88dc8300: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 564.834781][T22847] >ffffffff88dc8380: 00 00 00 00 00 04 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 [ 564.842835][T22847] ^ [ 564.848720][T22847] ffffffff88dc8400: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 00 06 f9 f9 [ 564.856777][T22847] ffffffff88dc8480: f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 00 04 f9 f9 [ 564.864828][T22847] ================================================================== [ 564.872877][T22847] Disabling lock debugging due to kernel taint 12:11:53 executing program 0: r0 = socket(0x1e, 0x1, 0x0) bind$can_j1939(r0, &(0x7f0000000280), 0x18) 12:11:53 executing program 0: r0 = socket(0x1e, 0x1, 0x0) bind$can_j1939(r0, &(0x7f0000000280), 0x18) 12:11:53 executing program 0: r0 = socket(0x1e, 0x1, 0x0) bind$can_j1939(r0, &(0x7f0000000280), 0x18) [ 565.054420][T22847] Kernel panic - not syncing: panic_on_warn set ... [ 565.061051][T22847] CPU: 0 PID: 22847 Comm: vivid-000-vid-c Tainted: G B 5.9.0-rc4-syzkaller #0 [ 565.071181][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.081319][T22847] Call Trace: [ 565.084601][T22847] dump_stack+0x198/0x1fd [ 565.088925][T22847] ? precalculate_color+0x2100/0x23c0 [ 565.094279][T22847] panic+0x347/0x7c0 [ 565.098160][T22847] ? __warn_printk+0xf3/0xf3 [ 565.102747][T22847] ? preempt_schedule_common+0x59/0xc0 [ 565.108193][T22847] ? precalculate_color+0x212e/0x23c0 [ 565.113549][T22847] ? preempt_schedule_thunk+0x16/0x18 [ 565.118911][T22847] ? trace_hardirqs_on+0x55/0x220 [ 565.123930][T22847] ? precalculate_color+0x212e/0x23c0 [ 565.129290][T22847] ? precalculate_color+0x212e/0x23c0 [ 565.134651][T22847] end_report+0x4d/0x53 [ 565.138795][T22847] kasan_report.cold+0xd/0x37 [ 565.143463][T22847] ? precalculate_color+0x212e/0x23c0 [ 565.148826][T22847] precalculate_color+0x212e/0x23c0 [ 565.154016][T22847] ? color_to_ycbcr.isra.0+0x680/0x680 [ 565.159469][T22847] tpg_recalc+0x5c8/0x2590 [ 565.163879][T22847] ? gen_twopix+0x46b0/0x46b0 [ 565.168542][T22847] ? mark_lock+0xbc/0x1710 [ 565.172947][T22847] ? mark_lock+0xbc/0x1710 [ 565.177356][T22847] tpg_calc_text_basep+0xb4/0x260 [ 565.182371][T22847] vivid_fillbuff+0x17dc/0x39d0 [ 565.187221][T22847] ? vivid_grab_controls+0x380/0x380 [ 565.192495][T22847] ? lock_is_held_type+0xbb/0xf0 [ 565.197419][T22847] ? find_held_lock+0x2d/0x110 [ 565.202169][T22847] ? vivid_thread_vid_cap_tick+0x10f4/0x2330 [ 565.208140][T22847] ? lock_downgrade+0x830/0x830 [ 565.212975][T22847] ? do_raw_spin_lock+0x120/0x2b0 [ 565.217984][T22847] ? v4l2_ctrl_request_setup+0x45f/0xb00 [ 565.223598][T22847] ? rwlock_bug.part.0+0x90/0x90 [ 565.228524][T22847] vivid_thread_vid_cap_tick+0x88b/0x2330 [ 565.234250][T22847] ? check_preemption_disabled+0x50/0x130 [ 565.239956][T22847] ? read_seqcount_t_begin.constprop.0+0x17d/0x1e0 [ 565.246459][T22847] ? lockdep_hardirqs_on+0x53/0x100 [ 565.251644][T22847] ? mutex_trylock+0x246/0x2c0 [ 565.256391][T22847] ? vivid_thread_vid_cap+0x2b9/0xa50 [ 565.261749][T22847] vivid_thread_vid_cap+0x5d1/0xa50 [ 565.266935][T22847] ? vivid_thread_vid_cap_tick+0x2330/0x2330 [ 565.272915][T22847] kthread+0x3b5/0x4a0 [ 565.276968][T22847] ? __kthread_bind_mask+0xc0/0xc0 [ 565.282065][T22847] ret_from_fork+0x1f/0x30 [ 565.287648][T22847] Kernel Offset: disabled [ 565.291957][T22847] Rebooting in 86400 seconds..