[ 70.555991][ T26] audit: type=1800 audit(1565438547.251:26): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 70.595447][ T26] audit: type=1800 audit(1565438547.251:27): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 70.642480][ T26] audit: type=1800 audit(1565438547.251:28): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 71.354624][ T26] audit: type=1800 audit(1565438548.081:29): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. 2019/08/10 12:02:37 fuzzer started 2019/08/10 12:02:40 dialing manager at 10.128.0.26:39593 2019/08/10 12:02:41 syscalls: 2487 2019/08/10 12:02:41 code coverage: enabled 2019/08/10 12:02:41 comparison tracing: enabled 2019/08/10 12:02:41 extra coverage: extra coverage is not supported by the kernel 2019/08/10 12:02:41 setuid sandbox: enabled 2019/08/10 12:02:41 namespace sandbox: enabled 2019/08/10 12:02:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/10 12:02:41 fault injection: enabled 2019/08/10 12:02:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/10 12:02:41 net packet injection: enabled 2019/08/10 12:02:41 net device setup: enabled 12:04:04 executing program 0: 12:04:04 executing program 1: syzkaller login: [ 167.760687][T10306] IPVS: ftp: loaded support on port[0] = 21 [ 167.877878][T10306] chnl_net:caif_netlink_parms(): no params data found [ 167.933607][T10309] IPVS: ftp: loaded support on port[0] = 21 [ 167.940594][T10306] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.947759][T10306] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.966005][T10306] device bridge_slave_0 entered promiscuous mode [ 167.988142][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.997697][T10306] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.007165][T10306] device bridge_slave_1 entered promiscuous mode 12:04:04 executing program 2: [ 168.049570][T10306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.073794][T10306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.162678][T10306] team0: Port device team_slave_0 added [ 168.171645][T10306] team0: Port device team_slave_1 added [ 168.189154][T10309] chnl_net:caif_netlink_parms(): no params data found 12:04:05 executing program 3: [ 168.309548][T10306] device hsr_slave_0 entered promiscuous mode [ 168.347572][T10306] device hsr_slave_1 entered promiscuous mode [ 168.391764][T10312] IPVS: ftp: loaded support on port[0] = 21 [ 168.417147][T10314] IPVS: ftp: loaded support on port[0] = 21 [ 168.424108][T10309] bridge0: port 1(bridge_slave_0) entered blocking state 12:04:05 executing program 4: [ 168.436025][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.444078][T10309] device bridge_slave_0 entered promiscuous mode [ 168.463306][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.470422][T10306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.477803][T10306] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.484885][T10306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.538657][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.545832][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.566893][T10309] device bridge_slave_1 entered promiscuous mode [ 168.620125][T10317] IPVS: ftp: loaded support on port[0] = 21 [ 168.668691][T10309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.702221][T10309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:04:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x1, @remote}, 0x10) [ 168.726594][T10309] team0: Port device team_slave_0 added [ 168.734585][T10309] team0: Port device team_slave_1 added [ 168.750904][T10306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.839445][T10306] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.847998][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.856441][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.874216][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.882285][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 168.967977][T10309] device hsr_slave_0 entered promiscuous mode [ 169.026280][T10309] device hsr_slave_1 entered promiscuous mode [ 169.076125][T10309] debugfs: Directory 'hsr0' with parent '/' already present! [ 169.099232][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.108280][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.116997][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.124038][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.145012][T10323] IPVS: ftp: loaded support on port[0] = 21 [ 169.153155][T10314] chnl_net:caif_netlink_parms(): no params data found [ 169.163792][T10312] chnl_net:caif_netlink_parms(): no params data found [ 169.176996][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.185581][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.194030][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.201174][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.208780][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.217228][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.251957][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.261281][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.269928][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.328537][T10317] chnl_net:caif_netlink_parms(): no params data found [ 169.360636][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.368279][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.375885][T10312] device bridge_slave_0 entered promiscuous mode [ 169.383065][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.391525][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.418530][T10314] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.425630][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.434081][T10314] device bridge_slave_0 entered promiscuous mode [ 169.443518][T10314] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.450683][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.458526][T10314] device bridge_slave_1 entered promiscuous mode [ 169.465738][T10312] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.473286][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.481238][T10312] device bridge_slave_1 entered promiscuous mode [ 169.498162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.508338][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.516544][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.524712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.557975][T10312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.567762][T10306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.578877][T10312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.598796][T10317] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.605904][T10317] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.613583][T10317] device bridge_slave_0 entered promiscuous mode [ 169.623071][T10317] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.631192][T10317] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.639999][T10317] device bridge_slave_1 entered promiscuous mode [ 169.648036][T10314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.660930][T10314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.675268][T10309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.710133][T10314] team0: Port device team_slave_0 added [ 169.718594][T10314] team0: Port device team_slave_1 added [ 169.725312][T10312] team0: Port device team_slave_0 added [ 169.737052][T10312] team0: Port device team_slave_1 added [ 169.749114][T10309] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.759986][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.767621][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.777617][T10317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.810864][T10306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.820126][T10317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.867680][T10312] device hsr_slave_0 entered promiscuous mode [ 169.916305][T10312] device hsr_slave_1 entered promiscuous mode [ 169.956074][T10312] debugfs: Directory 'hsr0' with parent '/' already present! [ 169.969981][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.979018][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.987534][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.994597][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.002358][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.011105][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.019455][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.026519][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.034544][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.098701][T10314] device hsr_slave_0 entered promiscuous mode [ 170.126357][T10314] device hsr_slave_1 entered promiscuous mode [ 170.176088][T10314] debugfs: Directory 'hsr0' with parent '/' already present! [ 170.189901][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.205579][T10317] team0: Port device team_slave_0 added [ 170.213254][T10317] team0: Port device team_slave_1 added [ 170.320529][T10317] device hsr_slave_0 entered promiscuous mode [ 170.376366][T10317] device hsr_slave_1 entered promiscuous mode [ 170.416037][T10317] debugfs: Directory 'hsr0' with parent '/' already present! [ 170.428521][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.437555][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.445899][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.454438][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.462681][T10323] chnl_net:caif_netlink_parms(): no params data found 12:04:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f00000002c0)=0x2) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r2 = getpid() syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) capset(&(0x7f0000000100)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x4}) socket$inet6(0xa, 0x400000000001, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x9) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000240)=[0x4, 0x7fff]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000040)=0x6000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x404e23, 0x0, @loopback}, 0x1c) [ 170.535347][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.544683][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.556987][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.565146][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.584492][T10309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.599664][T10309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.624192][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.632725][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.647316][T10335] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 170.654709][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.664849][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.672812][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.681283][T10323] device bridge_slave_0 entered promiscuous mode [ 170.712001][T10312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.720816][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.731209][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.743471][T10323] device bridge_slave_1 entered promiscuous mode 12:04:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x220000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x0, 0x3, &(0x7f0000000040)=0x1}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000180)) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="2e26044bb531", 0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sync_file_range(r2, 0x8, 0x2, 0x4) fcntl$setstatus(r1, 0x4, 0xa1a3f945407a2941) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffe, 0x40000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r4, 0x0, 0x10000000000443) [ 170.786487][T10312] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.815817][T10323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 12:04:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) r3 = getpid() fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x4, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x7, 0x9, 0x8}) [ 170.839049][T10323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.853525][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.861706][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.913144][T10314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.929200][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.939579][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.948274][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.955361][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.963644][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.974207][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.982665][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.989936][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.998159][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.006919][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.015385][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.024017][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.032881][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.040969][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.055380][T10323] team0: Port device team_slave_0 added 12:04:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000003e80)=[{0x20, 0x0, 0x0, 0xffffffffffff7fff}, {0x80000006}]}, 0xfe90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0x96c, @empty, 0xfffffffffffffffb}}, 0x288, 0x8000, 0xff, 0x80, 0x10}, 0x98) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth0\x00', 0x4}, 0x28f) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={r1, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x9, 0x56d3}, &(0x7f0000000200)=0x98) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000000f, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x2, 0x0) [ 171.085662][T10323] team0: Port device team_slave_1 added 12:04:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") unshare(0x8000400) fcntl$getflags(r0, 0x40a) [ 171.128116][T10317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.136967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.145825][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.167589][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.183347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.201700][T10314] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.229220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.238498][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.253080][T10317] 8021q: adding VLAN 0 to HW filter on device team0 12:04:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$RTC_WIE_ON(r3, 0x700f) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)) [ 171.270451][T10312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.283081][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 12:04:08 executing program 0: move_pages(0x0, 0xdc, 0x0, 0x0, 0x0, 0xdb83c43958999f4d) [ 171.320314][T10366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 171.339357][T10323] device hsr_slave_0 entered promiscuous mode 12:04:08 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101200, 0x142) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={r2, 0x100000001, 0x1, [0x1]}, 0xa) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400100, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000000c0)=0x78) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc890) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) ioctl$int_out(r0, 0x2, &(0x7f0000000100)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1) [ 171.388040][T10323] device hsr_slave_1 entered promiscuous mode [ 171.419665][T10323] debugfs: Directory 'hsr0' with parent '/' already present! [ 171.440915][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.449974][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.461204][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.470074][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.478673][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.489660][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.498427][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.505501][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.513419][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.522469][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.531006][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.538098][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.546071][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.598191][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.608503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.618515][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.628049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.637015][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.644075][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.651878][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.660295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.668760][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.677356][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.685617][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.692718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.700365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.709005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.717445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.726003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.734281][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.742709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.751520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.759584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.770581][T10312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.784069][T10314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.796586][T10314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.810072][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.818568][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.826965][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.835271][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.845304][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.853587][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.861768][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.883604][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.894775][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.919511][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.928382][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.939507][T10314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.961285][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.983228][T10323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.000480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.009325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:04:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0x40000008001, 0x4) write$binfmt_aout(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000009300"/105], 0x69) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, "", [[], [], []]}, 0x2ae) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27) [ 172.041486][T10323] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.077918][T10317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.085688][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.096787][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.105201][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.112304][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.139638][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.148414][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.170467][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.185983][ C1] protocol 88fb is buggy, dev hsr_slave_0 12:04:08 executing program 2: r0 = socket$inet6(0xa, 0x8000808000080003, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000021300290a080000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000004000c00"], 0x24}}, 0x0) [ 172.191751][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 172.206397][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.213485][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.228495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.242315][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.250306][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 172.250346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 172.275758][T10323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.306021][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 172.311882][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 172.342967][T10323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.365998][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.374610][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.395873][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.409942][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.418316][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.426257][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 172.426298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 172.438348][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.446717][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.454827][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 12:04:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x8, [{{0xa, 0x4e24, 0x100000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8718}}, {{0xa, 0x4e21, 0x0, @mcast2, 0xffffffffffffffff}}, {{0xa, 0x4e23, 0xece6, @mcast2}}, {{0xa, 0x4e22, 0x2, @loopback, 0x7}}, {{0xa, 0x4e21, 0x200, @empty, 0x6}}, {{0xa, 0x4e21, 0x8000, @remote, 0x3}}, {{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xff}}, {{0xa, 0x4e1d, 0xfffffffffffffff9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffff000}}]}, 0x490) [ 172.463507][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.471363][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.502038][T10323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.555998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 172.561810][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 172.658871][T10413] device vet entered promiscuous mode [ 172.671643][T10411] device vet left promiscuous mode 12:04:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40200, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x81, {{0xa, 0x4e24, 0x3, @empty, 0x7}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x141044, 0x0) fstat(r2, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x2000)=nil, &(0x7f0000000000)) 12:04:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'nr0\x00', 0x0}) recvfrom(r0, &(0x7f0000000040)=""/83, 0x53, 0x10000, &(0x7f0000000280)=@ll={0x11, 0x5, r1, 0x1, 0x4}, 0x80) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4) 12:04:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r1, 0x0, 0x1, 0x4}}, 0x1b0) 12:04:09 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00\xe0\x88%\x87@\xb8\xe8\x82\xa7l\xe9?\r\xbd\xdf\r\t\xe3\x19\x0f/\xb8\xd2\xa89\xe6vi\xd4\xf7\xb5\xd0\xa8\x8eQ\x9d\xe1\xab\xa4c\xe1?W\x11=\xf2\xec\xe2e\xf1\a3h\x8e\xe5\xbe\x10\xee9\xe2\xc5\xf0\xe0)\xb8\xdb\x90X\tc\xfc\xcf\xc3\xff\xbf\xf5\xfa88\xb7\xfd\xedw\xe8v\xd2\xde\x1c\xdc;\x1d\xa1\v\xda3Qa\x9ee\x92^3t^\xac\xc1<\x06\xcb\xfa\xbc\xa8H\xce\f\x1c\x86)P\xee\xef\b(\xf1(\xd1\xb5\xde\x9b \xeb$j\f\xca\xc3\xb4x\x9a\xben}V2\xfb\x90%\xc4\x88\x98x1\xed\xafy\xca\xd2e.\"\xae\x1bD\x16\xa2\x9b\xe7+\xfe\xbb\xe2\"\xfa\x9c\xd5\x9e\x17\xe7\x03=\xca=\xd6\x06Ng\xdc\xf9k3', 0x48, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r0}) r2 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x20, &(0x7f0000000540)={[{@xino_off='xino=off'}, {@xino_on='xino=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@default_permissions='default_permissions'}, {@xino_off='xino=off'}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@dont_hash='dont_hash'}, {@euid_gt={'euid>', r2}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'cgroup.procs\x00\xe0\x88%\x87@\xb8\xe8\x82\xa7l\xe9?\r\xbd\xdf\r\t\xe3\x19\x0f/\xb8\xd2\xa89\xe6vi\xd4\xf7\xb5\xd0\xa8\x8eQ\x9d\xe1\xab\xa4c\xe1?W\x11=\xf2\xec\xe2e\xf1\a3h\x8e\xe5\xbe\x10\xee9\xe2\xc5\xf0\xe0)\xb8\xdb\x90X\tc\xfc\xcf\xc3\xff\xbf\xf5\xfa88\xb7\xfd\xedw\xe8v\xd2\xde\x1c\xdc;\x1d\xa1\v\xda3Qa\x9ee\x92^3t^\xac\xc1<\x06\xcb\xfa\xbc\xa8H\xce\f\x1c\x86)P\xee\xef\b(\xf1(\xd1\xb5\xde\x9b \xeb$j\f\xca\xc3\xb4x\x9a\xben}V2\xfb\x90%\xc4\x88\x98x1\xed\xafy\xca\xd2e.\"\xae\x1bD\x16\xa2\x9b\xe7+\xfe\xbb\xe2\"\xfa\x9c\xd5\x9e\x17\xe7\x03=\xca=\xd6\x06Ng\xdc\xf9k3'}}]}) 12:04:09 executing program 3: r0 = socket$kcm(0x2b, 0x27, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="fefff7ffea48416d7527a5bc979c3e0f1d415863a1934b6bbc3dbf081de69c3ee8df5cae6fa389ac58bfe83bfacb38236efcf8000000014ecbc38b9d6e2f7976fffc1273a70552f6504b9e6b98d232b02b5088bf3353eb5de83ad0145083c29c009c3eb1353b6ac42885d18ecf66ee1200cf4d80908eb9c2a2b385926ed8b99f0a539649609b12d7a50278d6"], 0xda00) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'nr0\x00', 0x40}) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 12:04:09 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840100008000000000bc7000ffffffff1000fffc2600000000000000000000015b659a62290ffc380c66bfdc5e9f13e1a04810d404fbc3f4c1b4e2bf501fb1bb949869c200f0ffdba5684e5e4fcd4dd3050bc1700612dbc3080c91745fe158cf0d70308fa010204c6edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5010d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffa47, 0x1) connect$ax25(r1, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 12:04:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x10a00) ioctl$SIOCRSACCEPT(r2, 0x89e3) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x68, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x2}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x3, 0x1, 0x38}, @flat=@binder={0x73622a85, 0x1100}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}, 0xa8a57ea609a9be93}, @register_looper, @increfs={0x40046304, 0x2}], 0xba, 0x0, &(0x7f00000001c0)="0e77eb545327463a698a6b2dd3847e18ce11d65286bc713ba66afde8c218ca094078587dcf5b3443b92b44aaa81d74348d27f2152898beb900e3a0c041286c83391eefd6c0fabc64483471faa36c3bb074f343b0e945345a8587549c069c5dd867393131ae3da8a041481fd9696bf6d8ad0516a71c498132609b64e90f063b0fb04cd024ce6a6610e82a004cdf3dd023ef7fd960980a33b1f062c262e2971d7077dc96c6b85e8c3eb127e1d81ff1b933ef73a145e4c342f5c8d7"}) 12:04:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1a3f}}}}}]}, 0x48}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20040, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000100)={0x8001, 0x1, 0x8}) 12:04:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)='**userem1/!\x00'}, 0x30) sched_setscheduler(r1, 0x0, &(0x7f00000000c0)=0x5e0a) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000140)={0x1, 0x3ff, 0xfffffffffffffffe}) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x1c1}}, {{0x0, 0x0, &(0x7f0000000040), 0x21e, &(0x7f0000000040)}}], 0x2, 0x9400) 12:04:09 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) clock_getres(0x2, 0x0) r1 = dup(0xffffffffffffffff) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x305, 0x8, 0x7, 0x10000, 0xffffffffffffffbf, @remote}, 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x7, 0x7, 0x1, 0x2, 0x3ff]}, &(0x7f0000000100)=0xe) [ 173.052490][T10443] debugfs: File '10442' in directory 'proc' already present! [ 173.091489][T10443] debugfs: File '10442' in directory 'proc' already present! 12:04:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x1) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$FICLONE(r0, 0x40049409, r0) sendmsg$kcm(r0, &(0x7f0000000100), 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2d4, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x92a4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d73}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9979}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x91ff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2c6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}]}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd55}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) socketpair(0x8, 0x800, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000080)={0xaf448104192873c2, 0xffffffffffff7fff, 0x2, 0x9}) 12:04:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0xb, @win={{0xffffffff80000000, 0x7, 0xbc22, 0x7fff}, 0x1, 0x7, &(0x7f0000000200)={{0x3, 0x8, 0xd1f2, 0x200}, &(0x7f0000000040)={{0x8000, 0xd9d, 0x5, 0xffffffffffffffe0}, &(0x7f0000000000)={{0x8000, 0x7ff, 0x8, 0xfffffffffffffffb}}}}, 0x5, &(0x7f0000000240)="882ef8b105b0ba89a808b238d5a926681317f8850c13c5d398c05a64b90eb40c90abe6142bbe0af10d7925df1764438d14172d28532545ba2bad1327340abde5caf804182c4eaf8aab1a065a659d301128", 0x4}}) 12:04:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x0, 0x7, [0x7, 0x401, 0x80000000, 0x2, 0x2, 0x9, 0x2]}, &(0x7f0000000180)=0x16) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x3d, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) 12:04:10 executing program 4: r0 = creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000000c0)) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', 0x0, 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1400) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x1fd) 12:04:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffff81, 0x400) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="601bda4ba017ada32513ec837c6a23259c988f82fd1bfbf187b8aa9dde2998ea2ae99c42640d9172693c8d2d3b109808a11812", 0x33, 0x4840, &(0x7f0000000180)={0x11, 0xf5, r4, 0x1, 0xfff, 0x6, @random="52b12a54c54a"}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:04:10 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x209, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x40, 0x7, 0xb4}, 0x8) dup(r0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000200)={0x80, 0x4, 0x1}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0xffffffffffffffed, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @remote, 0x0}, &(0x7f0000000080)=0xc) connect$packet(r0, &(0x7f0000000100)={0x11, 0xf5, r1}, 0x14) msgget$private(0x0, 0x200) 12:04:10 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f00004fd000), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x51, 0x401) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000080)={0xc73c, 0x9, @name="0ac0945c5fc8f1067a7886fc9811f08b53ec62843d89cfb9d5f36987a93055c8"}) flistxattr(r1, &(0x7f00000000c0)=""/14, 0xe) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 12:04:10 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) listen(r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x8001, 0x4) 12:04:10 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x5, 0x8000, 0x100000001, 0x1800000000, 0x2, 0x101, 0x36, 0x3, 0x4, 0x4}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'teql0\x00', &(0x7f0000000140)=ANY=[]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@null=' \x00', 0xd, 'bcsh0\x00'}) 12:04:10 executing program 3: prctl$PR_SVE_SET_VL(0x32, 0x3281e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,H^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 12:04:10 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="01000000000000007f000000084781fb0731877541b95549279d865d1f25bbb5412c759f127c7d31239137405dd2400f6acb0d0dd940dd49c547e2c81376d7d59f10391231a1b8131f3eb817517fa8057e4e670ce9050a0d11b60705d382159378f909aa7effe2d8769007c43b319f50caf2046aa018dde2bf2df59a077804") [ 173.856175][T10491] debugfs: Directory '10491-4' with parent 'kvm' already present! 12:04:10 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000800006bcf000000000000"], 0x15) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) pread64(r0, &(0x7f0000000040)=""/91, 0x5b, 0x0) 12:04:10 executing program 2: r0 = socket(0x11, 0x3, 0x0) io_setup(0xfff, &(0x7f00000000c0)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@nfc_llcp={0x27, 0x1, 0x1, 0x4, 0x0, 0x7ff, "602f28d8aef0b79d63eb6be7173068f43aa06497922603d74b447cf891d23ba3a8cd0e2886e5d722cf937b41c94ba5a9cd92840b28ddaf59aac7e80cc2d8b1", 0x3}, {&(0x7f0000000000)=""/153, 0x99}, &(0x7f0000000100), 0x1}, 0xa0) io_submit(r1, 0x2, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x30d1, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12:04:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x66eb56de, 0x60b, &(0x7f0000000140)="21fe9cd813f3ae3c2e2c098b19ff84e7c07754ec837f73f50d114e4aaf58353aac48545e43ce915f063f917b56044993a6e8aed7aa87bed2e899f0ac2ae39107f5a4d6f7b4bcd243e3d7b437fa98e3cd5e01c215734daa2298d087a6f03f567d0918f5130e8cda3842a44cdbd6daa5950007a8418198d58dd8e798de3959d7ebe5b780e8e90a305a7e405499451cc121c8216244b941179bc33edee646", 0x9d) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x20000000006) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 174.056562][T10519] autofs4:pid:10519:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) [ 174.081430][T10525] autofs4:pid:10525:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) 12:04:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x1276, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 174.099124][T10526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:04:10 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000080)) ptrace(0x10, r0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/239, 0x778}, {&(0x7f0000000200)=""/68, 0x44}], 0x275, &(0x7f00000002c0)=""/247, 0xffffffffffffffae}, 0x10143) sendmmsg$nfc_llcp(r1, &(0x7f0000000d00)=[{&(0x7f0000000400)={0x27, 0x0, 0x0, 0x5, 0x200, 0x81, "346673ce55f94e0312f8c26075063188cf4c8dbe6a2201001d3a4e5ea5e91f7b6be5875b4f3b312b764a9b4fbeda1592d0f8c6431a38dcdbb72fef527f14da", 0x35}, 0x60, &(0x7f0000000800)=[{&(0x7f0000000480)="993f409f44411c0668c4fc46d8b9e9eb352af8104f0568fe8066718c4195e6e43f8ba4cb9e203274b7db14f4c60d727d0bf77ecbe5d8ef79cd20fa02443e22f25a81e1e91e2e8cc59abf106b8f3d2e2f2f74ea6dd3c0967bf5778a445979d41a8643a67a52b7c53a3fd01eb31f3a6a7e516a20c612fbd6f73b747017454719f85de6639b15fc28f73ee0e2d68e19d2c053b5fe593cb66883c7e3cf60246154fc0787b5cf733fb0f425ae9e973864c426952c1368b8404b6a8fe2041a53b8625efd07243b90174e095ff8f10b332554bab1655a871b1b73357623cf0c113fc4eca706869a73b8bd6d530be594747b1d56307138", 0xf3}, {&(0x7f0000000580)="c6968d5e2d723eaf85401380bec385863fc92bf76f6fdf4ba16d6a23a21f3ce0ed73d3fd63fc531b73cdf6f03c2ff56d6e00ac22d8a53cc4dc0f4828cb354151fa3e7f7e3dcf04f82e6f820e6977dfe58b9185460c33d97609e97b60c281e049a06fb7340c9022f7fdde793af17d5deb9e8f", 0x72}, {&(0x7f0000000600)="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", 0xfe}, {&(0x7f0000000700)="490be33208724b4182c5ea1ff6c30d40cf1b5f4ee646ad396038e2276b79dd24d03a867f84717468869012f75fdee5212b1de0c801ab334923c76044492792aba90b86e7a9a768870e856f7271ffbc03fbb01f71738a630dc6055eccec96b7807fad126941689e084f282a0d1277d75baceb58df9c1a69835f9d5ae0d0b3cccf98bdae67c3884fe8d71c969aa8d3abfe6fe459e74bdc21b3e3c0d6f794e5f3bd462c652daa1ddbee3a0b6a32cc2b670808383bc0f5e74d5f4856c34caa898c25e3c6acf5c9276744ee1a42a49e014931a4c05cfdc9b1364c1368cea6014291d185ee0940", 0xe4}], 0x4, 0x0, 0x0, 0x4044040}, {&(0x7f0000000840)={0x27, 0x1, 0x1, 0x2, 0x0, 0x6, "ce00bdd8d92244a141aff0c69741cf694905ab2aa876b27cee8a5b7661a6a849e21cfea9098dede8544d1222973e6b12bf9734065c29c32c1393c337187955", 0x27}, 0x60, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="703af17f090bc2530dcb687b3694c4b549597f8af3390512c3163fa179660ef0ef63d3491a6b2129c80fa41e09267108ed1faa264ff36b6277d73edc54170b12525587035b143dcf06eb60d870db4efbf62a35515e03ad04a0722d200ca972f2e29039688aeef28d634ac2c2ea469442eb087614f7d536eb75481b57c0df46f0780fd98e8484844e0955462fe54e15028623f8101e6c14b31f91693ff679cf24d4ffe1d18c1ec04d6db1cc61b6d81fe1c4e6e13766199bb5ef9d8348152ba36026fcad3e56800475fba04ca303e722939ed93afc142389af79934501d41cf8fa5dc2f59f431c6c0bb031cf1283ecdc97a24226", 0xf3}, {&(0x7f00000009c0)="2f1828caef10e2cb6bccf43a01c087d9f2726edca68b5dcc0a8400b1090ddf58f20900462ba05d5eff3e936d29ba1173bd76872c9cd0b370c5edd5108ff129e36dcd5d11326c7e4e6f989a99c9b5ac379c12cafee6c34cc7880bcf56503723cc87c83213b165373cc7e5b276aae264c84515a3a9c1554a19bbe9ca3e3c25c0698b0df6e7a95f1dca17480fbaa034c35f98bf3b5e2038ee5a881a9c777fbde86bd0616fbd390606dce3fbf6436a25754b16328e0dcc75aa2946fb8cdd08190d4c14a79bcdf922240283a86de9caa7e35be2c21c348c9e8a", 0xd7}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="5800004f0700000000002900000088000000b4b571aae86424705f2806540c2058b8e6d4a9ab3ca806528c259c7ebbecd058fbf69ae4be0506e764dbedd69df9f465b29f8105d1027dc23abe9960fb3713af8c9752f50edaed4aeb45fa3a857f68ec1211dae06135c8b2feac8246dfbbdd8f"], 0x58, 0x40}, {&(0x7f0000000b80)={0x27, 0x0, 0x2, 0x4, 0x0, 0x4, "ff94a8c3f8860c31f971a4f5a396c7c5504f3c709fac5a3837907193d70cbaf945c1d55943e52094939b8ee7fafbf1113e32019e1c69da082be24a3bbc590a"}, 0x60, &(0x7f0000000cc0)=[{&(0x7f0000000c00)="858fd20468b9e1f0272ec21096793b754ffa6cda6f237bdad1263ad64cd095a9e255d7d9262b95c829234fb7a4bb2dd91e1d1c298bc6459207ffda77f25d90e468b9446eb0e4fec27c1a47580b388c4c7ed1aa43b483e624f220a2530cf377990487ad6f881d807d941a072bb1c2f8dd4e79d010a8e72418445ccc299d9cbab1ceb9c582ece71fcaf4888b8d9777aec7cb2465f7fe2b01913f9ed6f7d860528f7f7588acb32746cbd8c1374837cbf0a5a30eb8", 0xb3}], 0x1, 0x0, 0x0, 0x20008004}], 0x3, 0x800) ptrace$getsig(0x4202, r0, 0x0, 0x0) 12:04:10 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) gettid() r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000500)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in6=@mcast1, 0x4e22, 0x0, 0x4e21, 0x8001, 0x2, 0x20, 0x80, 0x33, r1, r2}, {0x1, 0x4, 0x7, 0x7, 0x5, 0x7, 0x95, 0x9}, {0x3, 0x8000, 0x5, 0x7f}, 0x5, 0x6e6bbb, 0x1, 0x1, 0x2, 0xf7a87d31fda071b4}, {{@in6=@ipv4={[], [], @local}, 0x4d6, 0x6c}, 0x2, @in6=@remote, 0x3500, 0x2, 0x3, 0x7fffffff, 0x8, 0x0, 0x5}}, 0xe8) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x9, 0x2]) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) getegid() r4 = getuid() ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000001c0)={0x6f6, 0xdc7}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x700, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000280)={0xa0, 0x0, 0x1, {{0x1, 0x3, 0x0, 0x3, 0x3, 0x7f, {0x3, 0xffffffff, 0x0, 0x5, 0x401, 0x1f, 0x6, 0x7fffffff, 0xfff, 0x3, 0xfc2, r4, 0x0, 0x0, 0xe14}}, {0x0, 0x4}}}, 0xa0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 12:04:11 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xaf446518458889b3, 0x0) fcntl$getownex(r0, 0x10, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/121, 0x200002f9) [ 174.431579][ C1] hrtimer: interrupt took 26515 ns 12:04:11 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x84) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@ipv4={[], [], @multicast1}, @dev={0xfe, 0x80, [], 0x19}, @ipv4={[], [], @loopback}, 0x0, 0x7, 0x8, 0x400, 0x10f5, 0x8, r1}) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$ax25(r2, &(0x7f0000000180)={{}, [@remote, @null, @rose, @remote, @remote, @rose, @rose]}, &(0x7f0000000040)=0x48) write$P9_RLCREATE(r0, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0xe0, 0x1, 0x8}, 0x1}}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x2500, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018025081700d1bd", 0x2e}], 0x1}, 0x0) write$P9_RREAD(r0, &(0x7f0000000340)={0x50, 0x75, 0x1, {0x45, "08a9d6e450c23489b9d51b542b2d7d8c6018c825dd3f159732f8a9693c66f939bc96230ba3e0910d20f7ca3984ae33f14c83753d9ceee7411ee9cb758e1a0a8fbd8c00d52f"}}, 0x50) [ 174.890527][T10537] bond0: (slave bond_slave_1): Releasing backup interface [ 174.896748][T10526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.970026][T10552] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 12:04:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x9, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001a40)='nv\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000001c0)={0x0, @loopback, 0x4e21, 0x3, 'lc\x00', 0x2, 0xc52c, 0x2f}, 0x2c) recvmsg(r0, &(0x7f0000000140)={0x0, 0x3a98, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 12:04:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0x8, 0x5}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) [ 175.105086][T10545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:04:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @initdev}, 0xd) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4e01000000460000003a006c000000000000000044230503e2ffffffff370b00e000000000090004000000000000000100000000000000"], 0x70) 12:04:11 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x84) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@ipv4={[], [], @multicast1}, @dev={0xfe, 0x80, [], 0x19}, @ipv4={[], [], @loopback}, 0x0, 0x7, 0x8, 0x400, 0x10f5, 0x8, r1}) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$ax25(r2, &(0x7f0000000180)={{}, [@remote, @null, @rose, @remote, @remote, @rose, @rose]}, &(0x7f0000000040)=0x48) write$P9_RLCREATE(r0, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0xe0, 0x1, 0x8}, 0x1}}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x2500, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018025081700d1bd", 0x2e}], 0x1}, 0x0) write$P9_RREAD(r0, &(0x7f0000000340)={0x50, 0x75, 0x1, {0x45, "08a9d6e450c23489b9d51b542b2d7d8c6018c825dd3f159732f8a9693c66f939bc96230ba3e0910d20f7ca3984ae33f14c83753d9ceee7411ee9cb758e1a0a8fbd8c00d52f"}}, 0x50) 12:04:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0xa}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r3 = socket$packet(0x11, 0x2000000000000000, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x5) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x8}, &(0x7f0000000600)=0x8) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x30) accept4$alg(r5, 0x0, 0x0, 0x80000) ioctl$FICLONE(r1, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f00000002c0)=0x5, 0x4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) bind$packet(r5, &(0x7f0000000280)={0x11, 0x8, r6, 0x1, 0x800000000}, 0x14) ioctl$sock_proto_private(r5, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232d") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 12:04:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0xc018aec0, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x105000, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x111001, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2, 0x2, 0x2}, 0x14) [ 175.187762][T10568] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 12:04:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 175.233988][T10571] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 12:04:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="28038e6600000000767469030c0002810000000000000002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 12:04:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d613eeb0ae1b334135e0bcfe47bf070b57b21bd5c0143f92b4a9043a6c34e9e3ab1e5b767fe5579ab6ce1318240203ff7f4247a554fdb710064ec1fb0aa79701afb08f7271c67651230eb2330a8490590761b31d92908dd56ba318c2bd1c80490e26e") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x18) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200180, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x8}) read$rfkill(r2, &(0x7f00000001c0), 0x8) fcntl$setflags(r0, 0x2, 0x1) 12:04:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt(r0, 0x0, 0x14, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x2040) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xb14) [ 175.470620][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:04:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0xa}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r3 = socket$packet(0x11, 0x2000000000000000, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x5) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x8}, &(0x7f0000000600)=0x8) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x30) accept4$alg(r5, 0x0, 0x0, 0x80000) ioctl$FICLONE(r1, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f00000002c0)=0x5, 0x4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) bind$packet(r5, &(0x7f0000000280)={0x11, 0x8, r6, 0x1, 0x800000000}, 0x14) ioctl$sock_proto_private(r5, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232d") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 12:04:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xfea8a) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="00080000000090001c0012000c00010069706970000000000c00020008000200050000009247fda56d2bb7b2e46bd6a3f52001746fbba4e63e66befc38b70a7158e948d9e5ad500000c9346213c21d668625333f818fccca4c4a07f2d619b0ea805133bb5fe211794d4daf8d85060cea8671431dd07af3004094d4e745"], 0x3c}}, 0x0) [ 175.630853][T10568] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 12:04:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c}, {0x82, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x1}}, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000780)) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="04000000000000000600000001000000000000000000000001000000000000800000000000000000000000000001000000000000000000000100010002000000c7ffffffffffffff1f000000040000000000000000000000000000000000000000000000000000000300000002000000000000000000000040000000ff0f0020ff03000000000000000000000000000000000000004eee10fb9c1ba59332920de20000000000000000000000000000000000000003000000010400"/200]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:04:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000300)=r2) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x80000) write$P9_RWSTAT(r3, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'bpq0\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 0x5}) 12:04:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x8, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f00000003c0)) 12:04:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0xfffffffffffffff7) 12:04:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0xa}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r3 = socket$packet(0x11, 0x2000000000000000, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x5) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x8}, &(0x7f0000000600)=0x8) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x30) accept4$alg(r5, 0x0, 0x0, 0x80000) ioctl$FICLONE(r1, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f00000002c0)=0x5, 0x4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) bind$packet(r5, &(0x7f0000000280)={0x11, 0x8, r6, 0x1, 0x800000000}, 0x14) ioctl$sock_proto_private(r5, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232d") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 12:04:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x407, r0) bind$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, {0xffffffffffffffff, 0x1ff, 0x4}}, 0xa) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0x0, 0x9}, 0xf) 12:04:12 executing program 2: r0 = socket(0x10, 0x802, 0x1000000000002) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'teql0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000024c0)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002540)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002740)={&(0x7f0000000000), 0xc, &(0x7f0000002700)={&(0x7f0000002580)={0x164, r1, 0x208, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x148, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x800000000}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x80000001, 0x3, 0x4, 0x7}, {0x1ff, 0xabae, 0x0, 0x6}, {0x4, 0x35, 0xf34, 0xffffffff00000000}, {0x1ff, 0x1, 0x1, 0x4}, {0x1, 0x7ff, 0xffffffff, 0x5}]}}}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 12:04:12 executing program 1: prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xf1b2e9027b3520d) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4cb], 0x0, 0x10}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) io_setup(0x7ff, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$xdp(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x20010, r4, 0x180000000) 12:04:12 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xf0dc7e6c1d650a3d, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x100000000) setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x4, 0x3}, 0x10) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="820000000100000004000000da4dcffe6097f236380000000010000000000000002000000000000000"], 0x24, 0x0) 12:04:12 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000001c0)={0xfffffffffffffffb, 0x4, [0x5]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x100000011, r2, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 12:04:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1}, 0x9}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/198, 0xc6}, 0xbc2500000}], 0x2, 0x10002, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002780)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001500)=0x1008) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20ncci\x00', 0x400101, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f00000005c0)={0x5, 0x8001, 0xf41, 0x0, 0x0, [], [], [], 0xc2f, 0x2bd}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001540)={r2, 0x7}, &(0x7f0000001580)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0xf3, 0x401, 0x1, 0xffffffff, 0x8000, 0x6, 0xfff, 0x8, r4}, &(0x7f00000015c0)=0x20) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x800, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x2c4080, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000500)={0x8001001, 0x9, 0x1}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5, 0x9c}}, 0x10) 12:04:12 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5e0bcfe47bf070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) bind$can_raw(r2, &(0x7f0000000040), 0x10) sendmsg$tipc(r0, &(0x7f0000000440)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{}, 0xfffffffa}}, 0x10, 0x0}, 0x0) 12:04:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) mount$9p_virtio(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80004, &(0x7f0000000280)={'trans=virtio,', {[{@version_9p2000='version=9p2000'}, {@nodevmap='nodevmap'}, {@mmap='mmap'}, {@nodevmap='nodevmap'}, {@debug={'debug', 0x3d, 0x5}}, {@msize={'msize', 0x3d, 0x5}}], [{@subj_type={'subj_type', 0x3d, 'wlan1\')cpuset*'}}, {@subj_role={'subj_role', 0x3d, ']'}}, {@fowner_gt={'fowner>', r2}}]}}) ioctl$KVM_IOEVENTFD(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x80, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000003c0)={0x7f, 0x7, 0x3, "74cb461cfcae694ca805a9a02b456ccd099c0ee71a6b8426e9fed3f2bae87199", 0x32735f5a}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000380)={0x0, 0xfdfdffff}) 12:04:12 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x2ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000001c0)=""/194) sched_setaffinity(0x0, 0x241, &(0x7f0000000100)=0x2d) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) 12:04:13 executing program 3: kexec_load(0x7, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="3ac0de90eac7575c03fd10510676b3b0c9daa62797c8cb194929df7c04ea5d1eda63e8d6b9", 0x25, 0x9, 0x5}, {&(0x7f00000000c0)="93db525c2527ef552eb9a59dcd26a5ddf9d1729fc35dd4ba9120c59487b6", 0x1e, 0x61fa, 0x8}, {&(0x7f0000000140)="e55c7a4ba6adda2a007bb10ae87d5ae58cd8eb0eeb4a0a802de711d13fbae1ee210135e5af37bcf86eb6c4f6ab100642e88f0d614bfbdc51b8caa2916281eafce5efc3a692f601a0cedddcfb10a13f76aa3fa46b6f9c6dd21c10fb9a3d7378f50572f46e338cac152ab3ae23166e063f8155cd476f40e5947c02471033c1e831fa1cc68532a39cbf5dd65ed09085d1c5ba9abc823f7df427b0fe74e653d8e92fac6f1fb160bbe1b93589c319d9fcb64862957d9faadbda99e2ef74c3690f41", 0xbf, 0x6, 0x80000000}, {&(0x7f0000000200)="27809aad90162ee7def4cb45803d421a0bdfe49711afe81c561282cb27898414cf", 0x21, 0x1, 0x7f}], 0x150000) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x9, 0x2002) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000300)={0x4bd66124ddc28155, 0x0, 0x100, 0x1, {0x2dc1, 0x8, 0x4fd, 0x4}}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x40000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 12:04:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000001c0)='./file1\x00', 0x0) 12:04:13 executing program 2: r0 = eventfd2(0x8, 0x1) ioctl(r0, 0x6, &(0x7f0000000080)="9427062e87a7d543ba0fb118f9cfecc5259947f12521721d1af7f9612966c3dcc572c32f81dfe8983ef9c669fdf8bf086b08ebe638a14047be0396969682ce3894dac20ccb5f274eb18bd1b5b623c5d0f3e6f9b4f8420d8c155e3c9b9f70998461eb0896416f25121f14284a5ca11e76d3fbb0390f3d89bec064f36b6e23086124a823a2a052781df86aa8fd08d121afa7a446828c552a78710e887d3261895d02a3a0d291019aa963f5b06569e339b65ccf1aeeea277a51eebfcc275cee072c7b9667") r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='fd\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x400001000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getdents64(r1, &(0x7f0000000000)=""/92, 0x5c) [ 176.456796][T10678] debugfs: File '10676' in directory 'proc' already present! 12:04:13 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = dup(r1) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0) io_setup(0x5f, &(0x7f0000000040)=0x0) io_destroy(r3) 12:04:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) [ 176.643616][T10643] Unknown ioctl 44672 [ 176.819219][T10687] Unknown ioctl 44672 12:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x2, 0x0, "b508a255c5a14ab64e9e9053a71b268675be5b18572b5abcfec57df2ea34d48352fd657037d64286decd02be5e1b9451cbdfdc2218b46cbcfa1f6e9f2c1afefb1e3ab932d4c486c68ad643efe6d6729f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x6, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6bc7af6c5bb203dab4011d7c609668388bc03832f302a5020f09000000d2fb5a00eb0900"}, 0x101f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80802, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x100000000) dup2(r1, r0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x3, 0x9d8}) 12:04:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000280)) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0xf000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="06ec0f0c0ce72adb92d10178b2bdb289bd2ec03e000200aaaabaaaaa01000059375b9e2b20f4279d7c874b85896d9ad95f12e4fee0f1a82fd7a7f1c765e6717c41d3a7e5bbb659b0d2828822a681877623cceaab34f43d9fcca69d436f1de53f1fa0c261ca3c1959cdd02ffa44bf3ad0fe7e476d47cbdf36c2c709a37227b9cbb268a06dc0b3b5a3bf9fe0f5ff80a967fa014f2e94d64c305a0cf3f937d9fddb31cbb216422189157efb74597c9d493112fafde457cb6443623a4041efdd4583f93d085f2e2c2420d4244e786bfb9512e5ebe9976703c8aff3ad8f9278440b06b8b4d79e3781ef8e42258dbc16cefc6147c1931e"], 0x28}}, 0x0) 12:04:13 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') sendfile(r2, r3, 0x0, 0x288) 12:04:13 executing program 3: pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)="5eef3fd6927735dd45ba84a557fbb70a09b83fb92ee6d7dac6a9e6b1fa71fe150b3579868e92c4e1b18650b6ffc6feca3f5d7559e5a0604a83e63db239d8f8ba10c96cb0c6b90f8569b1b4480f3eadd66f984ef74545ba4d8616f4d4f2b9b4ee54be06e20dee97d93bd4f2a0b3a94d887ec2c8b2d4f594d4432ced9716a3a056de1430c5466cdab65037c87a88152d0ecb0fdd1d021cd94262db66cbbedc4732e82a", 0xa2}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff67}, 0x70) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:04:13 executing program 5: r0 = socket(0x1e, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x5) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/19) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 12:04:13 executing program 2: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x8000, 0xff, 0x1, 0x5, 0x1, [{0x0, 0x3, 0x8, 0x0, 0x0, 0x2000}]}) exit(0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) [ 177.053802][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:04:13 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='bdeveth1posix_acl_accesswlan1%[P+\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000480)=0xc) lsetxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x1ffc, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000540)={0x4, 0x8, 0x20000000000, 0x0, 0x18}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000280)={0x7, 0x70, 0x7fff, 0x1, 0x6, 0xc3, 0x0, 0x0, 0x44400, 0x1, 0x401, 0x80000000, 0x5, 0x0, 0x8, 0x7ff, 0x8b, 0x0, 0xfffffffffffffffd, 0x5, 0x3, 0x7fff, 0x8e63, 0x7ff, 0x0, 0x8a, 0x2, 0x7, 0x1, 0x3, 0x9, 0xfff, 0x7fffffff, 0x3, 0xfffffffffffffff7, 0x6, 0x0, 0xffff, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x4}, r2, 0xffffffffffffffff, r0, 0x0) 12:04:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x400c0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000040)=""/19) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") 12:04:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000001c0)='./file1\x00', 0x0) 12:04:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0x1, 0x9, 0x8, 0x7, 0xffffffffffffffff, 0x80}, 0x9}) readahead(0xffffffffffffffff, 0x0, 0x0) 12:04:14 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000088995bc278078530907ba8daf19580c9613ff8c2531d48e56c969a3543034571923a2c0e75ecb55217584fce8cbddbd735b9d223dd4ca810697ce8f93d0755ee710b002c231a5731dc6a16792b1319e2acc0eb1ba8116a4ae39f9429436c5e0eadfe"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321212c0f0df81f47442a"], 0x10094) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) r1 = getpgrp(0xffffffffffffffff) ptrace$setsig(0x4203, r1, 0x8000, &(0x7f0000000100)={0x28, 0xc89, 0x21}) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a5fc89733f8d155f"], 0x1a000) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) r2 = socket$kcm(0x2b, 0x1, 0x0) dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 177.405717][T10743] overlayfs: filesystem on './file0' not supported as upperdir 12:04:14 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="71797a92d23131def01e329af9b8291bde039a7e1c3d3dba282ff6745076a80000000040000000000a000000000000000000000000000000007b91ea34"], 0x3d) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a3157b42cadf7b72f4336008039"], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4151}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @rand_addr=0x4}, {0x2, 0x0, @multicast1}, 0x100, 0x0, 0x0, 0x0, 0xffffffff, &(0x7f0000000340)='veth1_to_team\x00', 0x4, 0x0, 0x6}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(r3, 0x4b35, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0x10001, 0x14a, 0x5, 0x3}, 0x10) unshare(0x60000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x1, 0x4) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000001c0)=0x1ff, 0x2) r5 = dup(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000500)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000280)=[{}, {}, {}]}, 0x78) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) 12:04:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1004e20, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000c00)=0x2, 0x4) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x1}}, 0x0) recvfrom$inet(r1, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xb1, 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7fffffff) 12:04:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x8) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) preadv(r0, &(0x7f0000000200), 0x2a9, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x179) 12:04:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{r1, r2/1000+30000}}, 0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x94, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x7, @empty, 0x80000001}, @in={0x2, 0x4e20, @rand_addr=0x1bb}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e22, 0x0, @remote}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x1f, @mcast1, 0x7fffffff}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={r3, 0x8}, &(0x7f00000003c0)=0x8) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "86ccd176108e90811624f74314d24525"}, 0x11, 0xefc8d5213448c655) 12:04:14 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @pic={0x4, 0x9b, 0x9c, 0x4, 0x7, 0xfe7, 0x6, 0x5, 0x0, 0x40, 0x7f, 0xffffffff, 0x8001, 0x100000000, 0x3, 0x2}}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000), 0x1c) 12:04:14 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000200)=""/217, &(0x7f0000000100)=0xd9) perf_event_open(&(0x7f0000000180)={0x1, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000001600)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d1de9236a2c636f6465706167653d6370373337", @ANYBLOB="2aac12742cad276c290d3baed67c2c91e49106b97e85bbca71f725b17d9bcbbbccd472e8ca4044642a2b035c3be2a964810443ccac2d88a94d4f18dd403214a15a7c95804b7973e9513866ef229b"]) [ 177.702616][T10763] FAT-fs (loop3): invalid media value (0x00) [ 177.719742][T10763] FAT-fs (loop3): Can't find a valid FAT filesystem [ 177.870396][T10757] IPVS: ftp: loaded support on port[0] = 21 12:04:14 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) getpeername(r0, &(0x7f0000000080)=@caif, &(0x7f0000000100)=0x80) r1 = inotify_init() r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000140)={0x4, {0x0, 0x4, 0x9, 0x9}}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="674466980000000000000000000000006517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3202f99f16d06589e03469637a7267592938766010a35efd21affe2009efdc31a381587a5960ac2022d05136803a9e841e84f03d05ebc7e87c10dfc8b2c"], 0x65) sendfile(r2, r2, &(0x7f0000000200), 0xa198) recvmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/129, 0x81}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/213, 0xd5}, {&(0x7f0000001500)=""/183, 0xb7}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000015c0)=""/231, 0xe7}, {&(0x7f00000016c0)=""/221, 0xdd}], 0x7, &(0x7f0000001840)=""/71, 0x47}, 0x40000000) 12:04:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x144, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0xf4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @local, 0xf990}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff1dc}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x74}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x4810) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r3 = dup(r0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, r4, 0x420, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffc1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x691}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x116b84e3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80f8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9d}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'nlmon0\x00'}}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x51}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000240)=@gcm_128={{}, "566d9c8feae4d539", "f251468c0682828cc3032e23078adbbe", "f423e95b", "517793d8091f9f7f"}, 0x28) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000180)={@in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @remote}, 0x4}, {&(0x7f00000000c0)=""/103, 0x67}, &(0x7f0000000140), 0x1}, 0xa0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) 12:04:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) truncate(&(0x7f0000000000)='./file0\x00', 0xd4c6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 178.122157][T10774] hfs: unable to load codepage "cp737*¬t" [ 178.178604][T10774] hfs: unable to parse mount options 12:04:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000001c0)='./file1\x00', 0x0) 12:04:15 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xffffffffffffffdd, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') setresuid(0x0, 0xee01, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b4, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb1}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb085}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2f}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x306b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000300), 0x0, 0x0) fadvise64(r2, 0x0, 0x52d, 0x0) 12:04:15 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f80)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000fc0)={@empty, 0x0}, &(0x7f0000001000)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001080)={@dev, 0x0}, &(0x7f00000010c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001100)={@rand_addr, 0x0}, &(0x7f0000001140)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000001500)={&(0x7f0000001180)={0x368, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x16c, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r6}, {0x174, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xbef9}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) getsockopt$inet_dccp_int(r10, 0x21, 0xda30b13f49a58e40, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000004c0)={'security\x00'}, &(0x7f0000000440)=0x54) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f0000000a80)={"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"}) [ 178.457647][T10764] IPVS: ftp: loaded support on port[0] = 21 12:04:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x835a2a1bece70a03, 0xcb) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e3, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x8, '\x00', 0xb6f}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3e00000002000000040000021d000000cc37614899ccd797a589ee7b58d3f213e51f75462658a3ac06e9572a97"]}) set_thread_area(&(0x7f00000000c0)={0x9, 0x20000000, 0x4000, 0x80000000, 0xcf, 0x101, 0x81, 0x5, 0x7ff, 0x3000000}) 12:04:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0}, 0x78) r1 = epoll_create1(0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0x18) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {&(0x7f00000003c0)}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x4000201f, 0x3f000002}) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) close(r2) 12:04:16 executing program 5: timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, r0+10000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 12:04:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x821}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000480)='./file0\x00', 0x85) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000380)="eb05a5b753b6e16ff92fb147b51c8e16e88d1fce83697b95e2c473ad2c0359f5a6731b7f4768edd827123e2a7b53dcc9c2e6fa1ee90c7c92944d09ebc17a57d2117bad73f3a60fb069df5e24448aa41152b13db3100b45a76e7b3b3506b8f3b3f06b") ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000140)={0x1, 'syz1\x00'}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = dup2(r4, r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000240)={0xff, 0x2, 0x0, 0x0, 0x0, [], [], [], 0x100000000, 0x8}) write$P9_RREMOVE(r5, &(0x7f0000000400)={0x7, 0x7b, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x9}, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0010015, 0x4], [0xc1]}) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f00000000c0)="9c01d0898a550e945a90b4bd4912899d01858980de0fa80b743f148020f253a33c45a4da48775f5bc8cd77b587db2181f8e9f202d8b0") epoll_create1(0x80000) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x100000001, 0x101100) 12:04:16 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000180)=0x9) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000080)=""/181, 0x2}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0x400034b, 0x0) 12:04:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000001c0)='./file1\x00', 0x0) 12:04:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x100000000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20007ffc) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7, 0xc00) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000240)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x2, @ipv4={[], [], @empty}, 0x9}, @in6={0xa, 0x4e20, 0x8, @local, 0x6cad}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x7380000000000000, @rand_addr="bc683115a822b5edbaa5d497411e9ef3", 0x9}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x3, 0xffffffffffff0000, 0x7, 0x5, 0x80, 0xe5d, 0x1, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x5, 0x4, 0xffff, 0xb693, 0x3}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000003c0)={r5, 0xffffffff, 0x7f, 0x800, 0xfffffffffffffff7, 0x6, 0x0, 0x1, {r6, @in={{0x2, 0x4e24, @remote}}, 0x40000008000, 0x4, 0xd2a1, 0x100000001, 0x401}}, &(0x7f0000000480)=0xb0) write$FUSE_IOCTL(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000004c0)={0x4, 0x0, 0x4, {0x3ff, 0x5, 0x0, 0x9}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x8030, r0, 0x0) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="02000500000001000000ff07000000000be5a94100000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 12:04:16 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1400008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") mmap$binder(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1, 0x11, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000240)={0x0, 0x0, 0x2080, {0x4000, 0xd000, 0x2}, [], "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", "63ca42410e7294d506be882e21e0dc9e57bea600dade06cbfcd6cd68be0db5d0fa21f82aa4ce36ca290ca17c0f3ef593d7b782693a68c91ef3f963cce9d550f7d85fb4195b3ecfb54e2a59444844abb7fb0ca0cf974d6b244d778470798cfee22c3943d9b954162220e93fb305c50ed0bb088c86d599fbc3f10f78acd68dbe66d83eb13e423fa7d4b436985d71c08a9b6a7c495ac52a98f6c9286794b539989051cba43d818f0bac6753453314e0f4218e7e64e62f64346f56889d2b438fe2b795753fd306feba9e80ea90475fbbe16361e88e2e453e946632daea374107d72c0be49b13ab6342b848637a5ee45c6b2be69582feebedc1bcf2c35ef5860bed76ce31beb4acef351bc6c5c7ec7a55c74b202a5a929860dd129b7bdf7bc45abace41eec5b45ae3bc2c48d6dfde340b6e43ac6febdbd55f181b5dbeed3a436639e869e454fa1b030f63aa78c89661fcd7438b4d41ca2ba609b1f775971766b06a8284eedc84a4064b660c3fd2f3d41d7e75c7ea4f08587f1f7d09509dc9303b14945e789e46133659c2a9be4145dd3c5ea5fbe55c22506afa40cb6a6259a76afbd8e4afdcae4c39984f5a91f81d840c1ad19d3658c50bf65e0bb5e78a83e8e3f14d9438100f68d027335a8a4eb7a8edde52f7e21d1702f99806216421c46a4c25304660bb2863d2bb911df03a87f1a0ee43a451ea66b3f58a5bedfdaa0aebcab11a5dd55723ab90f5a1fb789ce5b48ba1932a0ded60bed6a594c152d69281725d4a6ddc28bd5dab7e57e30a03d1dfdc1050009b3ac8cbbbb23c1446d7df5e118139ea2de460b8ec33b9757b7a77d374e5f173910f93df940f061ef9cf7c50ca0c3a0dcd8f4f3dbf7b106f80a3b8f8434ec1402befb662aad2473cd9a890008aed7897bf14f3d68f4a498aaaccac0726ceeb4be0e2d8afdc554cbb0c8b2b1a2d343704b0feb7611f20496b25afaa9e5322f6e5847f74fbb85de6c7de0271a983ee460be00f121921187ff5f49b9048f7b4ad5521bee6a863931843d33725446754b791a9205f56aace4c3dbac29384f5e790ac90bb8053fcc884b98584f0c089303f0f498f6cf6bea1f1ae3331bfeadfeb4099c2bb8788e0004b2998a3e074974337086ae0f45e7874257f5299364e62d6bf32fc0a6efbf111b131ce4145d8b7081c349bafe52b0e73fa9f8fa5bc3cca3d68cf6c2cd04d7aa9267cd3700082c0eab3233146bc8315afd6cbe5e64ad118152d65685f27b01ad2178b4ffc6712b21190b006df4a9a1fd71a1e1bb7dc9c6ece99e7829ae952efaaa70877e51013410e38cf9fdbfedcbf40ffc583a3ed28f270bf85467b2a5d6ad018be023d165a08d5a6e5c108237a471e6a2699d2d78f27f8b6315ae96891399f22cf92becccb5c8b1226f468d21c01253dd785191461a30d509cedcc70ca51ea99b79f1469fd80cecc40883e07b9ec4c2316b2a208fcda5bce76670f9b6354ca56d939b71aa2dc2d8079a9d12357af135bd6784f4ccd53ea3b192581e3edf77f968aa016048273921c1fed256e40b6832fa16c5532e5c7faad6e1f0263dbb66a61f84a9a9187eee59b3e268fd761431ba49e18b9258c245315c11092049229a97129a27867bc2f6382098d25bdd32e72b6218f20db432302112ceaceab064c5bec61f6fb16ee1ea8b8c7cce353d685a8202382eeb885f83381cadf33ba92ecc55ef99500f4b7342d7e8c1495b9e9d97a3f9861bb3559a9ca16d2d5786bce4c8f5b44ce2ad2627ca09075454ebff7dc8229cc9c3ec6f29a47d7f308cd17af714ee04a63b0334196da11019ba42d90eb9a56bf6749b2bd1f77b350bffd3ac017d2130218244c8beb2166af867928bc7cd4bf4b74c9ff11568983a237907987ebc8562e0d9d94b3220a7be53a85d78dbb43bd504c339bf96a043eacdb6e786a083b3db4255c15bc16060af7fd8cf8217ca7189529098571732f7e5df9ad17b7618e453d42f92ebccf5b5c7fa104f07d064f28c3c2d8c6ca92ee957f14fb21afe4dfa38463d5f9924c3f37addccff9ba7a47fb7b06b238e12b867725f39d30cd7fac24f49483707870ab56b3109bb7cf42c29044dfdfd10dcc6192e6eb3c46d4bbf0068f94c9cee86a3a7b1db21f128aa567ad77fbabc64130168812102fa0aea2848aa0b1ad510701d21777ce06a9d6ef711464ed50d826b25560587cc5029760035859fc7da4bb93c65c7559e37881de81f8add4efb37484a152c198ee0b625b9ea3510940955c9d69b0780b0aac7bac299fdb4722ff37c172a769b1ab50287855fb5c64b6311bc73644c7ebe32864b62c51ef572e59f017e47d710698ef4debd381524c43ab619ef4a8282e1d05c7cabd65bd8d8fc781a70b75820185f2e7fd9cd9c9d9c65a3a5daf0e83a4823cd833148110d996bbc08df9ad57af3fabb025db3f4516973926c7c6c49db5cbfe74e8244a3dadb90f95cc866c6745152de179b3eb33bd479b01704f6b200ca90f7446721296af6f0df1eb7c6765eb5e255ee692c8a4731299e4e9e9dd55f663052657c3a70d8f6932493b839df7ab8998959b4e6aa964e2070d5330e174ee36aedc12a09bba1432d74d86aa9832edc5b1c5103ac5c7d7a7522f151417980f58e6e8e5856a4090cf332fa4745cb84522ba1eca8d73028c7b639512d273420ede3b3bc2ce1462a6177351927b8604c426a33f37ca2e6a13a3ba45127d9403eb2f556b21ab1ff61c4c5402eb2296e0b8a8a4f08f21ec725b2143e98b22f0af08d812ad2bbaed26fd74c0c53e9b5ce9f21ced451470c8a66def52d1c797f1abe3a76128573e71684e9b08ad554624be4bcd8260022e628d36db76dff029060e6c36933430a277ae0b83112eef05ce7f1c2e58f454eaf6756ba802593123294335e5189fa6e10dcf56abf4c56b600ed1f2263085d27bb73b9000e2a2f59137ae936359db582c924a8836efd46fe617cdb1340b6acc182f3083e31a428801c74a51ff4f572cbeb2c1739ee882469d2727c7af07896d70251bede2d73502bcec2abfeef9aa8fdef1615364a215ea722bf00710769c3f1b2811e04ad20718eff0e0e73ca782c13077025ac6183ee7653f2cf1f791b109c5fc2836b1a8f26b9b9aa1ea6524501a2ffd34945a58045b328ca15b58018b02271751dd2e9088fb836348cc1a81a47165601fd5c6e069b54409f744d3f44dfbd990bdacfafda7a1fd6e53db50944d1d67ecf01cfd5c1dea65ab07935e1e91d1096b517566be6edefe89720258068b08d5fad00b27689053df7ad882e0953e7be527246790d2bb8c30fec39cf09a19aa1db964f59f95ae2862f87dc3c144d28e4460509123375f23db062377c0a852dcdfafdfa091d505beef66b2a8775e36e9f56225d40c82d26b24f31d8bcdd65e4c147eb5851f2c12b89fb397b3588495f8fa8756435b72f646cce71926b6ec883ddad53d43b79858b1b121dda59902b8bc87f84ea9acf62d53fefd4e85d8e0773674058df86ae04d66c754e0c4a583efde8d3289b0f8ef6ad7ce759a809793c45a1789bd69518023038287286e6f5ab86ea0d074c38f0cf3e64a47f526993f15f81acfac0901fce8ca37de27fb8041246e0ada47115fe7e840da15b3e0a60b494cbe3069c5352cfd0a3ae77b8fef9d1afcd17c67c05ef82f28448a5e80e308ed7cec4e76bf6f3d2701b0ee4a911f519d480caaef406c7e86d72e7064b357f5747405f26cd4a3522764f25a2251cfb4fd3cd3551b88a3eb0728e7329b97c1170418f7c4b9d1c8d2ee337af5e544bc53a8d903500eb567c221a4f04d46fa0d33dcc28b440f8c322fe2dc5d9a984d3220b9a06d0b59205ef9205978fc73ddf5f12e776f496bec922e3ccb7b26c4fe8c614de85c90f26fcf9fe30953f214cfbd4f13cdcfee85ee520edadd02bf7cabf633d3df822869073b589812f3626f6516f21ce9e5a22a3bdccef358257639edb84a49dbf543065db2f3688464d9c98d20d15b536b3e6fa16a63421bcc7c710be1320d7163100d9756be27816e83b49510930f805cf1512ea1c7ae74323ccf32743004c60caafa70bc17de257003ca9b256c6e0534fcc6ed9d8a69ec833604c3d2e8c67ee05768d392123125ee645d7b585bbcd337a46142f0333ee6a3c0b47c2d0093ea3f1c2b49a3835e1e323e92d6dfd5fdc5926846ae4b16eb849d6d11073edfc22122dbd533c49153bde2801158f684fd994f4cabeaf564b70fc02aa5eb3c2bdb23d9951d776f659a60be98b192d4eaae62661115129ce25882bdeaa66c5353470d552531e0604854a6c41be532977e71aeb5bf6c219f94094934d1080867ceaea3e1334cd6310a21f25574fb11ce3080bde0823c703e005a30d9459e6e110fafe985f5ee6891d53a119067fc089fa58c25fa20795e1879c1a90896f124f0c902af50d1b5e03b94aef8bb286268718a281f96b9b4fc6da5e1160397ff4adc49db78e07b0e26d586cb44023616aace1c3485ae491c9dff901d6c0d69f34d1873578e509f64bf3a205c8371024098851a7c8039b5db9b87cb840e0d7ccfb1277d1e0a7082a8b22dd1ee1af5012168fdb354c8138eaf7986ecf6451805d2e10df3c0d1ee6ad44ed5fc8c9f425cc266034143d3e89366e6495d991556a4dd6de57dc3b1b375c77dd5be8648d004e5b39f3015d25164b264104225b1415d681752511fdeb90fe0cb1ac0ee8145a8affdf995461eed4c20df056ed59d181a7287731b18dd4dd3f20b0f2109ad22ed145bbd24dd7fd70be340766bb33cd00c12f33c72850f4e6428b5b7b08cb50c77fc07160cb2e7527b0c91af2eedd46ff4161ab3ba651e639c1767f0d52a46f0cd251f1c389d47b7501d798917a197c07342f7dddc8d9895bce1735c26118befc2ff03e128f4b47fa1ce0586e8948ebf4034b5c989e1892a332698b365f1f412d817f51e968352073770463d97bd7150f9c5f451c431351f7b61428cb711e4aa75802b3ccac7f8754facc58214e3305ff7d8f067972c83ef14dc0a69a87ccb53e97bbd43e343561af9241293c04223b6e20c2493625138ae279877f56400083252b65e9b50ea6f2b64fad52fd2cfafacea94ec29d5b920b30ac48f45a0cf9436caad4771217d7fee63e68eee67a4c698c85968af053132a509ec4489ca127858b63faa72ad203bcfba85c84ac0fac187158063d6c5b0931a9f523e9bd12143486a06e44b347746a19f0c55674a05048b8e3b362fcb22233ca5b8ae4fc42932febd7be29d690187b90f1bf9ec1dd01922e0e6efcde3d845853482099a35e150b722a8a53ff2a87742df30933e947cf58c1123f43ef90f63ce165d45cc08dbbfa866a493108649e07e3c1961d2a9231f4e9dc3999e93581797d90ee7e6de985432a08f5d0ae3176538cbb064d5eeb68948239aa23a61eeb3d9c3ac51e382db3725d84b09d7e72a65c75ea01e63eca9180d0433c3525c21d9d900b3d0d2bc71110b6f51982e6da8a2b319f10eeddfb52639133793c435d331f4b6e0bb4c75b075cb7d7cf998c5d88397576dfd87ae7c54d5c1ce92fb918cda4aaf859f8838423f6a36127af91ce39de03a7f58ac716e3a5dbbf27aff6311c51993ab1c7770f828f19feaf95b0c4af92e20e62e1a0201fa3f11b0b85423794fece1c4d2aa79d3dd911ee8fdfc7fca2ac091c5313887095045cd3d5c5fa5100c135946206969da6cc2b1313f2ddc41c6b4eb8fe65d6da09b32ea5e81709d1edf9d60af7687e33512e14da1a4c29348d7b966df95cf7b6c5894675558e7ec6c42995e6363cac6e3c9615f"}) socketpair(0x9, 0xa, 0x8000, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) 12:04:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="d20339cb6724a6855fda7640077e693fc66c0ae984ffe46a19", 0x19) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) get_thread_area(&(0x7f0000000140)={0x5, 0x0, 0x0, 0x81, 0x764, 0x3, 0x8, 0x9f5, 0x80, 0x2}) unshare(0x400) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x121103, 0x0) connect(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x5}}, 0x80) vmsplice(r2, 0x0, 0x0, 0x0) 12:04:16 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000240)=""/144) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) 12:04:16 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x6, 0x5, 0x2000cf25, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x70) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x181, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x8000, 0x6}) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000004c0)) 12:04:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80400, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) readlinkat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/250, 0xfa) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRES16=0x0, @ANYRES32=r3, @ANYRESDEC=r1], 0x5}}, 0x0) 12:04:16 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xffffffffffffffea) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000240)={0x800000000c, 0x9, 0x7fffffff, 'queue0\x00', 0x7fe}) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a92da3131def01e329af9b8291bde039a7e1c3d3dba282ff6745076a80000000040000000000a000000000000000000000000000000007b91ea34"], 0x3d) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)={'syz1', "57b42cadf7b72f4336c0b839"}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4151}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @rand_addr=0x4}, {0x2, 0x4e20, @multicast1}, 0x100, 0x0, 0x0, 0x0, 0xffffffff, &(0x7f0000000340)='veth1_to_team\x00', 0x4, 0x0, 0x6}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(r2, 0x4b35, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x10001, 0x14a, 0x5, 0x3}, 0x10) unshare(0x60000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x1, 0x4) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000001c0)=0x1ff, 0x2) sendto$inet6(r1, 0x0, 0x0, 0x20040002, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1b) r5 = dup(r0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) 12:04:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 12:04:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='rdma.current\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4606) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c0021f732292587e69622eb353c2a3a474082191934b3e9b0075fa3e3a5a584f25f5b98b7f8c7c9731951f8d93ec802ebca51e9b35f9b2d1c6e4f44065fc3dd395801936c8e5b88980def81"]) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="6061fb7bf38031547561dd1681c7a3a707f7f8ac45976787e14214189e5a35e039b915aab66026f79f41fcc442bc813c42695fd0e53fd6818b504650d9dbe5c399fa09d5d815ba7afadd8ccbd7731fe64e0ce56e264e3238b276dc84263292865019e25e5b42cfbabfc25299c3eba9d922843b19f202c997ae7434d451034471af15a12d3de797ad4b6d6d1874a90800497eabb65930239187fa9e536a220cbc1c9ad01683c8aa1cd94237f4885ebff3af007b222e11bee810dbcb6af51a7ccc9f3fdbbca08e930457c0198180502a67aeb21dcaa6d686ab8aff7a4e1c", 0xdd, 0xfffffffffffffffa) keyctl$set_timeout(0xf, r3, 0x20) [ 180.098642][T10837] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 180.116079][T10837] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 180.134736][T10837] loop5: p1 < > p2 [ 180.188462][T10837] loop5: p2 size 327680 extends beyond EOD, truncated [ 180.210621][T10871] FAT-fs (loop1): bogus number of reserved sectors [ 180.211007][T10861] IPVS: ftp: loaded support on port[0] = 21 12:04:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r1, 0x2) [ 180.285453][T10871] FAT-fs (loop1): Can't find a valid FAT filesystem 12:04:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x21ffc, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x5, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xffc, 0x0, &(0x7f0000000a80)="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", 0x0, 0x3}, 0x28) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xf1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;\xe4_<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m') ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r5, 0x801054db, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x8000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={0xffffffffffffffff, 0x7, 0x0, 0xffff, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x5, &(0x7f0000000140)=[{0x0, 0x6bc, 0x0, 0x1}, {0x9, 0xa6, 0x75, 0x1}, {0x4b5f, 0x2, 0x4, 0x1}, {0x3, 0x1f, 0x5, 0xe66}, {0xfff, 0x8, 0x874, 0x7ff}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'yam0\x00', 0x8000}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0xfffffffffffffffe) r6 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xff, 0x20040) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f00000002c0)) ioctl$TUNSETVNETBE(r5, 0x400454de, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) sendto$llc(r6, &(0x7f0000000700)="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", 0xfd, 0x44, &(0x7f0000000280)={0x1a, 0x0, 0x9, 0x40, 0x6, 0x354, @broadcast}, 0x10) 12:04:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4bb4, 0xe, 0x0, 0x27) 12:04:17 executing program 1: unshare(0x8020000) semget$private(0x0, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x110, r1, 0x8000000) ioctl(r0, 0x8000000000005, &(0x7f00000000c0)="115ca50d5e0bcfe47bf070") r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') semop(0x0, &(0x7f0000000100)=[{0x0, 0x9, 0x1800}, {0x0, 0xffff}], 0x2) setns(r2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x4000) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000080)={0x6, 0xa4}) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000140)={0x10000, 0x1, 0x9}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) 12:04:17 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x8000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12:04:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 180.829790][T10908] fuse: Bad value for 'fd' 12:04:17 executing program 1: poll(&(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x8010000000046) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00515) r1 = dup(r0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x2}, 0x10) recvfrom$inet(r0, 0x0, 0xfffffeb2, 0x2, 0x0, 0x800e00510) shutdown(r1, 0x0) 12:04:17 executing program 2: poll(&(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x5, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004ea) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 180.851935][T10867] IPVS: ftp: loaded support on port[0] = 21 12:04:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/228, 0xe4}, {0x0}, {0x0, 0xfffffd64}, {0x0, 0x385}, {0x0}, {0x0}, {0x0}], 0x7) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f00000001c0)={0x10000000083}, 0x10) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffc95, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) 12:04:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:17 executing program 4: poll(0x0, 0x0, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004ea) ppoll(0x0, 0x0, &(0x7f0000000080)={0x5}, &(0x7f00000000c0), 0x8) shutdown(r0, 0x0) 12:04:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000000)=""/72, 0x48, 0x2, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f00000001c0)={0x10000000083}, 0x10) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffc95, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) [ 181.092198][T10930] fuse: Bad value for 'fd' 12:04:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 181.191136][T10945] fuse: Bad value for 'fd' 12:04:17 executing program 1: poll(&(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x808000000000045) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x5f6, 0x0, 0x0, 0x800e004e5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x1}, 0x10) r2 = dup2(r0, r1) fchmod(0xffffffffffffffff, 0x0) recvfrom$inet(r1, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) shutdown(r2, 0x0) 12:04:18 executing program 3: poll(&(0x7f0000000180)=[{}], 0x1, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004ea) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x2}], 0x4, &(0x7f0000000200)={0x5, 0x10001}, &(0x7f0000000240)={0x1}, 0x8) shutdown(r0, 0x0) 12:04:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/228, 0xe4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffc95, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) 12:04:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:18 executing program 2: poll(&(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x5, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004ea) read(r0, &(0x7f0000000040)=""/15, 0xf) shutdown(r0, 0x0) 12:04:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xdc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff96187db0}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x11, 0x1a001000000}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 12:04:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/228, 0xe4}, {0x0}, {0x0, 0xfffffd64}, {0x0, 0x385}, {0x0}, {0x0}, {0x0}], 0x7) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffc95, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) 12:04:18 executing program 5: poll(&(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x8010000000046) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00515) r1 = dup(r0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x2}, 0x10) recvfrom$inet(r0, 0x0, 0xfffffeb2, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) 12:04:18 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/228, 0xe4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f00000001c0)={0x10000000083}, 0x10) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffc95, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) 12:04:18 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$vsock_dgram(0x28, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:18 executing program 3: 12:04:18 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:18 executing program 2: 12:04:19 executing program 0: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:19 executing program 3: 12:04:19 executing program 5: 12:04:19 executing program 4: 12:04:19 executing program 1: poll(&(0x7f0000000180)=[{}, {}], 0x2, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004ea) ppoll(&(0x7f0000000000)=[{}, {}, {}, {r0, 0x2}], 0x4, &(0x7f0000000200)={0x5}, &(0x7f0000000240), 0x8) shutdown(r0, 0x0) 12:04:19 executing program 4: 12:04:19 executing program 2: 12:04:19 executing program 3: 12:04:19 executing program 5: 12:04:19 executing program 2: 12:04:19 executing program 0: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:19 executing program 3: 12:04:19 executing program 4: 12:04:19 executing program 5: 12:04:19 executing program 2: 12:04:19 executing program 5: 12:04:20 executing program 1: 12:04:20 executing program 0: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:20 executing program 3: 12:04:20 executing program 4: 12:04:20 executing program 2: 12:04:20 executing program 5: 12:04:20 executing program 2: 12:04:20 executing program 4: 12:04:20 executing program 5: 12:04:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 12:04:20 executing program 0: syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xc000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1fec00}], 0x1, 0x0) 12:04:20 executing program 5: 12:04:20 executing program 4: 12:04:20 executing program 0: syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:20 executing program 5: 12:04:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xc000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1fec00}], 0x1, 0x0) 12:04:20 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:20 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT(r1, 0xae64, 0x0) 12:04:20 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, 0x0) 12:04:20 executing program 0: syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:20 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xc000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1fec00}], 0x1, 0x0) 12:04:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffb6}}, &(0x7f0000003ff6)='OPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 12:04:20 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:20 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:20 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 184.404448][T11155] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 12:04:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) ioctl$KVM_SET_PIT(r1, 0xae64, 0x0) 12:04:21 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:21 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 184.977057][T11170] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 12:04:21 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:21 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 185.159358][T11188] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 12:04:21 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:22 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x0, 0xffffffffd927d9bc, 0x0, 0x0, 0x1, 0x0, 0x62c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, {0x82, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000540)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x0, @sint={0x1f, 0x4}}, {0x0, 0x2, 0x0, 0x0, @msi={0x40}}, {0x0, 0x0, 0x0, 0x0, @sint={0x3}}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:04:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:22 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:22 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:22 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x2}) [ 185.421372][T11208] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.467075][T11206] fuse: Bad value for 'fd' 12:04:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xb3, 0x0) 12:04:22 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:22 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:22 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:22 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 185.704715][T11230] fuse: Bad value for 'fd' 12:04:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc0405519, &(0x7f0000000000)={0x46}) 12:04:22 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:22 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xb3, 0x0) 12:04:22 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:22 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8e, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x6) [ 185.973399][T11254] fuse: Bad value for 'fd' 12:04:22 executing program 2: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xb3, 0x0) 12:04:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:22 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:04:22 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:22 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:22 executing program 2: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) ioctl$KVM_SET_PIT(r1, 0xae44, &(0x7f0000000200)) 12:04:23 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:04:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:23 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:23 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:04:23 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:23 executing program 2: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:23 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) 12:04:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:23 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:23 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) ioctl$KVM_SET_PIT(r1, 0x4010ae42, 0x0) 12:04:23 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:23 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:23 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:23 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x2}) 12:04:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc1105511, &(0x7f0000000000)={0x46}) 12:04:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:23 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 12:04:23 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x0, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc4c85513, &(0x7f0000000000)={0x46}) 12:04:23 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x0, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:04:24 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 12:04:24 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x0, 0x1000000000004, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:24 executing program 2: socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:24 executing program 3: creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) 12:04:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:24 executing program 2: socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) ioctl$KVM_SET_PIT(r1, 0x4010ae68, 0x0) 12:04:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) [ 187.522208][T11406] autofs: Bad value for 'fd' 12:04:24 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:24 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 12:04:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) [ 187.693047][T11422] fuse: Missing mount parameter(s) 12:04:24 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:24 executing program 2: socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010907041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:04:24 executing program 3: creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) 12:04:24 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)) 12:04:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) 12:04:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) 12:04:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) [ 187.957972][T11445] kasan: CONFIG_KASAN_INLINE enabled 12:04:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) 12:04:24 executing program 4: clone(0x2020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000004, 0x4, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 12:04:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb3, 0x0) [ 188.015164][T11452] kasan: CONFIG_KASAN_INLINE enabled [ 188.024093][T11455] fuse: Missing mount parameter(s) [ 188.031751][T11445] kasan: GPF could be caused by NULL-ptr deref or user memory access 12:04:24 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)) 12:04:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse.', 0x0, 0x0) [ 188.086111][T11452] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 188.128874][T11445] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 188.135872][T11445] CPU: 0 PID: 11445 Comm: syz-executor.3 Not tainted 5.3.0-rc3-next-20190809 #63 [ 188.136891][ T3879] kobject: 'loop0' (000000000b556e0e): kobject_uevent_env [ 188.145007][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.162217][T11445] RIP: 0010:kstrtouint+0x85/0x1a0 [ 188.167250][T11445] Code: 04 00 f3 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 dc 17 35 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 08 84 c0 0f 85 db 00 00 00 [ 188.186837][ T3879] kobject: 'loop0' (000000000b556e0e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 188.186869][T11445] RSP: 0018:ffff88805a1579e0 EFLAGS: 00010246 [ 188.203070][T11445] RAX: dffffc0000000000 RBX: ffff88805a157b38 RCX: ffffc9000c590000 [ 188.211051][T11445] RDX: 0000000000000000 RSI: ffffffff833d0154 RDI: 0000000000000000 [ 188.219031][T11445] RBP: ffff88805a157a70 R08: ffff888098c445c0 R09: ffffed1013099cd2 12:04:24 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)) [ 188.227013][T11445] R10: ffffed1013099cd1 R11: ffff8880984ce68b R12: 0000000000000000 [ 188.234994][T11445] R13: 1ffff1100b42af3d R14: ffff88805a157a48 R15: 0000000000000000 [ 188.242977][T11445] FS: 00007f42a1a14700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 188.252001][T11445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.258593][T11445] CR2: 0000000020000000 CR3: 00000000a1a87000 CR4: 00000000001406f0 [ 188.260859][ T3879] kobject: 'loop5' (00000000332f670f): kobject_uevent_env [ 188.266582][T11445] Call Trace: [ 188.266606][T11445] ? _kstrtoul+0x170/0x170 [ 188.266618][T11445] ? save_stack+0x5c/0x90 [ 188.266628][T11445] ? save_stack+0x23/0x90 [ 188.266643][T11445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.266660][T11445] fs_parse+0xde1/0x1080 [ 188.266683][T11445] ? ksys_mount+0xdb/0x150 [ 188.304935][T11445] ? __x64_sys_mount+0xbe/0x150 [ 188.309780][T11445] ? do_syscall_64+0xfa/0x760 [ 188.314457][T11445] autofs_parse_param+0xe1/0x7c0 [ 188.319387][T11445] ? autofs_evict_inode+0x50/0x50 [ 188.324404][T11445] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 188.330118][T11445] ? __lookup_constant+0xd6/0x100 [ 188.335131][T11445] ? autofs_evict_inode+0x50/0x50 [ 188.340147][T11445] vfs_parse_fs_param+0x2ca/0x540 [ 188.345166][T11445] vfs_parse_fs_string+0x105/0x170 [ 188.350269][T11445] ? vfs_parse_fs_param+0x540/0x540 [ 188.355462][T11445] ? lockdep_init_map+0x1be/0x6d0 [ 188.360485][T11445] generic_parse_monolithic+0x181/0x200 [ 188.366031][T11445] ? vfs_parse_fs_string+0x170/0x170 [ 188.371305][T11445] ? autofs_init_fs_context+0x494/0x5d0 [ 188.376845][T11445] ? autofs_kill_sb+0xc0/0xc0 [ 188.381518][T11445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.387753][T11445] ? alloc_fs_context+0x434/0x6d0 [ 188.392770][T11445] ? vfs_parse_fs_string+0x170/0x170 [ 188.398050][T11445] parse_monolithic_mount_data+0x69/0x90 [ 188.403674][T11445] do_mount+0x1369/0x1c30 [ 188.408001][T11445] ? copy_mount_string+0x40/0x40 [ 188.412935][T11445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.419173][T11445] ? copy_mount_options+0x2e8/0x3f0 [ 188.424364][T11445] ksys_mount+0xdb/0x150 [ 188.428602][T11445] __x64_sys_mount+0xbe/0x150 [ 188.433271][T11445] do_syscall_64+0xfa/0x760 [ 188.437770][T11445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 188.443651][T11445] RIP: 0033:0x459829 [ 188.447541][T11445] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.467142][T11445] RSP: 002b:00007f42a1a13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.475629][T11445] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459829 [ 188.483591][T11445] RDX: 00000000200003c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 188.491562][T11445] RBP: 000000000075bf20 R08: 0000000020000400 R09: 0000000000000000 [ 188.499528][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f42a1a146d4 [ 188.507489][T11445] R13: 00000000004c5e57 R14: 00000000004da858 R15: 00000000ffffffff [ 188.515459][T11445] Modules linked in: [ 188.519367][T11452] general protection fault: 0000 [#2] PREEMPT SMP KASAN [ 188.526314][T11452] CPU: 1 PID: 11452 Comm: syz-executor.3 Tainted: G D 5.3.0-rc3-next-20190809 #63 [ 188.536819][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.546890][T11452] RIP: 0010:kstrtouint+0x85/0x1a0 [ 188.551914][T11452] Code: 04 00 f3 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 dc 17 35 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 08 84 c0 0f 85 db 00 00 00 [ 188.567290][T11445] ---[ end trace cb9f957e9d02a6e2 ]--- [ 188.571508][T11452] RSP: 0018:ffff88805aedf9e0 EFLAGS: 00010246 [ 188.571521][T11452] RAX: dffffc0000000000 RBX: ffff88805aedfb38 RCX: ffffffff81c4d3bc [ 188.571528][T11452] RDX: 0000000000000000 RSI: ffffffff833d0154 RDI: 0000000000000000 [ 188.571536][T11452] RBP: ffff88805aedfa70 R08: ffff88805aaba580 R09: ffffed101502f9c2 [ 188.571553][T11452] R10: ffffed101502f9c1 R11: ffff8880a817ce0b R12: 0000000000000000 [ 188.577702][T11445] RIP: 0010:kstrtouint+0x85/0x1a0 [ 188.583048][T11452] R13: 1ffff1100b5dbf3d R14: ffff88805aedfa48 R15: 0000000000000000 [ 188.583060][T11452] FS: 00007f42a1a14700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 188.583069][T11452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.583077][T11452] CR2: 000000000046ee40 CR3: 00000000a1a87000 CR4: 00000000001406e0 [ 188.583089][T11452] Call Trace: [ 188.591643][T11445] Code: 04 00 f3 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 dc 17 35 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 08 84 c0 0f 85 db 00 00 00 [ 188.599026][T11452] ? _kstrtoul+0x170/0x170 [ 188.599040][T11452] ? save_stack+0x5c/0x90 [ 188.599050][T11452] ? save_stack+0x23/0x90 [ 188.599074][T11452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.607445][T11445] RSP: 0018:ffff88805a1579e0 EFLAGS: 00010246 [ 188.615003][T11452] fs_parse+0xde1/0x1080 [ 188.615018][T11452] ? ksys_mount+0xdb/0x150 [ 188.615038][T11452] ? __x64_sys_mount+0xbe/0x150 [ 188.620440][T11445] RAX: dffffc0000000000 RBX: ffff88805a157b38 RCX: ffffc9000c590000 [ 188.628010][T11452] ? do_syscall_64+0xfa/0x760 [ 188.628030][T11452] autofs_parse_param+0xe1/0x7c0 [ 188.628043][T11452] ? autofs_evict_inode+0x50/0x50 [ 188.628065][T11452] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 188.637330][T11445] RDX: 0000000000000000 RSI: ffffffff833d0154 RDI: 0000000000000000 [ 188.643553][T11452] ? __lookup_constant+0xd6/0x100 [ 188.643567][T11452] ? autofs_evict_inode+0x50/0x50 [ 188.643589][T11452] vfs_parse_fs_param+0x2ca/0x540 [ 188.652044][T11445] RBP: ffff88805a157a70 R08: ffff888098c445c0 R09: ffffed1013099cd2 [ 188.654824][T11452] vfs_parse_fs_string+0x105/0x170 [ 188.654839][T11452] ? vfs_parse_fs_param+0x540/0x540 [ 188.654861][T11452] ? lockdep_init_map+0x1be/0x6d0 [ 188.674786][T11445] R10: ffffed1013099cd1 R11: ffff8880984ce68b R12: 0000000000000000 [ 188.678871][T11452] generic_parse_monolithic+0x181/0x200 [ 188.678888][T11452] ? vfs_parse_fs_string+0x170/0x170 [ 188.678900][T11452] ? autofs_init_fs_context+0x494/0x5d0 [ 188.678919][T11452] ? autofs_kill_sb+0xc0/0xc0 [ 188.683504][T11445] R13: 1ffff1100b42af3d R14: ffff88805a157a48 R15: 0000000000000000 [ 188.687548][T11452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.687562][T11452] ? alloc_fs_context+0x434/0x6d0 [ 188.687575][T11452] ? vfs_parse_fs_string+0x170/0x170 [ 188.687597][T11452] parse_monolithic_mount_data+0x69/0x90 [ 188.693954][T11445] FS: 00007f42a1a14700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 188.699860][T11452] do_mount+0x1369/0x1c30 [ 188.699878][T11452] ? copy_mount_string+0x40/0x40 [ 188.699899][T11452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.705401][T11445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.708541][T11452] ? copy_mount_options+0x2e8/0x3f0 [ 188.708558][T11452] ksys_mount+0xdb/0x150 [ 188.708575][T11452] __x64_sys_mount+0xbe/0x150 [ 188.708592][T11452] do_syscall_64+0xfa/0x760 [ 188.708615][T11452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 188.714323][T11445] CR2: 0000000000738000 CR3: 00000000a1a87000 CR4: 00000000001406f0 [ 188.721397][T11452] RIP: 0033:0x459829 [ 188.721412][T11452] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.721419][T11452] RSP: 002b:00007f42a1a13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.721432][T11452] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459829 [ 188.721438][T11452] RDX: 00000000200003c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 188.721446][T11452] RBP: 000000000075bf20 R08: 0000000020000400 R09: 0000000000000000 [ 188.721453][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f42a1a146d4 [ 188.721469][T11452] R13: 00000000004c5e57 R14: 00000000004da858 R15: 00000000ffffffff [ 188.726694][T11445] Kernel panic - not syncing: Fatal exception [ 188.731085][T11452] Modules linked in: [ 188.995177][T11445] Kernel Offset: disabled [ 188.999635][T11445] Rebooting in 86400 seconds..