, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x9c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:35:44 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$msdos(&(0x7f0000001a00)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x800452d2, &(0x7f0000000140)=ANY=[@ANYBLOB="b00000"]) syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x80) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x3d5) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f0000000240)='./bus\x00', 0x20, 0x1, &(0x7f00000005c0)=[{&(0x7f00000004c0), 0x0, 0x200}], 0x0, &(0x7f0000000640)) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 825.795617] netlink: 'syz-executor0': attribute type 3 has an invalid length. 03:35:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2b, 0x400000000000801, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 03:35:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x3, 0x2e0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x0, 'nr0\x00', 'ip6gretap0\x00', 'syzkaller1\x00', 'ip6gretap0\x00', @remote, [], @dev, [], 0xb0, 0xb0, 0xe0, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1177bc2cb1875933}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {{{0x11, 0x0, 0x0, 'irlan0\x00', 'lo\x00', 'teql0\x00', 'team_slave_1\x00', @dev, [], @dev, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'teql0\x00', 'irlan0\x00', 'bridge_slave_1\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x358) 03:35:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 03:35:44 executing program 4: r0 = fanotify_init(0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="e2", 0x1}], 0x1) 03:35:44 executing program 5: r0 = memfd_create(&(0x7f0000000040)='iocharset', 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), &(0x7f00000007c0)=0x4) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000003b40), 0x0, 0x20040000}, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000440), &(0x7f0000000480)=0x8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x100, 0x10, 0x0, 0x1}, &(0x7f0000000140)=0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fchdir(0xffffffffffffffff) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) [ 826.062487] xt_time: unknown flags 0x30 03:35:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2b, 0x400000000000801, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 03:35:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c, 0x0, 0x44f}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 03:35:44 executing program 0: clone(0x200, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000340), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x588, 0x0) lseek(r0, 0x0, 0x0) write$P9_RMKNOD(r0, &(0x7f00000000c0)={0x14}, 0x14) sendfile(r0, r0, &(0x7f0000000040), 0x6) open$dir(&(0x7f00000001c0)='./file0\x00', 0x101001, 0x0) 03:35:44 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="2f70726f632f7379732f6e65742f697076342f7673d9ada1e5278e342466726573685f706572696f6400", 0x2, 0x0) 03:35:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2b, 0x400000000000801, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 03:35:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5ce80700315f85714070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r1, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 03:35:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 03:35:45 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0), 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 03:35:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="92"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:45 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1, @mcast2={0xff, 0x34}, @ipv4={[], [], @remote}, 0xfffffffffffffffc}) 03:35:45 executing program 6: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$msdos(&(0x7f0000001a00)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x800452d2, &(0x7f0000000140)=ANY=[@ANYBLOB="b00000"]) syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x80) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x3d5) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f0000000240)='./bus\x00', 0x20, 0x1, &(0x7f00000005c0)=[{&(0x7f00000004c0), 0x0, 0x200}], 0x0, &(0x7f0000000640)) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:35:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2b, 0x400000000000801, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 03:35:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) io_setup(0xba, &(0x7f00000000c0)=0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000080), 0x1300}]) 03:35:45 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$msdos(&(0x7f0000001a00)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x800452d2, &(0x7f0000000140)=ANY=[@ANYBLOB="b00000"]) syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x80) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x3d5) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f0000000240)='./bus\x00', 0x20, 0x1, &(0x7f00000005c0)=[{&(0x7f00000004c0), 0x0, 0x200}], 0x0, &(0x7f0000000640)) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:35:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='q'], 0x1) recvmsg(r2, &(0x7f00000024c0)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) 03:35:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x10001, 0x4) close(r3) dup3(r1, r2, 0x0) 03:35:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = epoll_create1(0x80000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x2) r2 = socket$inet6(0xa, 0x1, 0x80000000) iopl(0xfffffffffffffffc) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc80700545f8f764070") r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x101) unshare(0x400) rmdir(&(0x7f00000006c0)='./file0\x00') lseek(r3, 0x3000000, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000002, 0x0, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 03:35:45 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 827.067228] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 827.074976] FAT-fs (loop2): Filesystem has been set read-only 03:35:45 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f0000000040)) [ 827.108102] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 827.142804] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 827.151065] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) 03:35:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = epoll_create1(0x80000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x2) r2 = socket$inet6(0xa, 0x1, 0x80000000) iopl(0xfffffffffffffffc) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc80700545f8f764070") r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x101) unshare(0x400) rmdir(&(0x7f00000006c0)='./file0\x00') lseek(r3, 0x3000000, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000002, 0x0, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 03:35:45 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:35:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x10001, 0x4) close(r3) dup3(r1, r2, 0x0) 03:35:45 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$msdos(&(0x7f0000001a00)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x800452d2, &(0x7f0000000140)=ANY=[@ANYBLOB="b00000"]) syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x80) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x3d5) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f0000000240)='./bus\x00', 0x20, 0x1, &(0x7f00000005c0)=[{&(0x7f00000004c0), 0x0, 0x200}], 0x0, &(0x7f0000000640)) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 827.410284] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 827.417591] FAT-fs (loop2): Filesystem has been set read-only [ 827.429057] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 827.464688] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 827.480025] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) 03:35:46 executing program 4: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000878000)}, 0x2) 03:35:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x58}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:35:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x10001, 0x4) close(r3) dup3(r1, r2, 0x0) 03:35:46 executing program 6: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$msdos(&(0x7f0000001a00)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x800452d2, &(0x7f0000000140)=ANY=[@ANYBLOB="b00000"]) syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x80) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x3d5) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f0000000240)='./bus\x00', 0x20, 0x1, &(0x7f00000005c0)=[{&(0x7f00000004c0), 0x0, 0x200}], 0x0, &(0x7f0000000640)) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:35:46 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:35:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7d, &(0x7f0000000100), 0x0) 03:35:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = epoll_create1(0x80000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x2) r2 = socket$inet6(0xa, 0x1, 0x80000000) iopl(0xfffffffffffffffc) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc80700545f8f764070") r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x101) unshare(0x400) rmdir(&(0x7f00000006c0)='./file0\x00') lseek(r3, 0x3000000, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000002, 0x0, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 03:35:46 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 03:35:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, &(0x7f0000000200)={@remote}, 0x20) 03:35:46 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001240)={[{@discard='discard'}]}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") 03:35:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x159030, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 03:35:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x12, 0x105}, 0x14}}, 0x0) 03:35:46 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:35:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = epoll_create1(0x80000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x2) r2 = socket$inet6(0xa, 0x1, 0x80000000) iopl(0xfffffffffffffffc) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc80700545f8f764070") r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x101) unshare(0x400) rmdir(&(0x7f00000006c0)='./file0\x00') lseek(r3, 0x3000000, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000002, 0x0, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 03:35:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x10001, 0x4) close(r3) dup3(r1, r2, 0x0) 03:35:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfe43) read(r1, &(0x7f0000000380)=""/42, 0x1aa) 03:35:46 executing program 2: futex(&(0x7f0000fdaffc), 0xb, 0x0, &(0x7f0000fdb000), &(0x7f0000fdaffc), 0x0) 03:35:46 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f0000000140)=0xffffffffffffffff, 0x21d) 03:35:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000380)}], 0x1000000, &(0x7f00000007c0)=ANY=[]) [ 828.346224] XFS (loop3): Invalid superblock magic number [ 828.391829] XFS (loop3): Invalid superblock magic number [ 828.495593] XFS (loop4): Invalid superblock magic number [ 828.545540] XFS (loop4): Invalid superblock magic number 03:35:47 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f0000000140)=0xffffffffffffffff, 0x21d) 03:35:47 executing program 2: mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x7ffffffff000, 0x3, &(0x7f0000000000/0x1000)=nil) 03:35:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 03:35:47 executing program 3: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r1, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)) 03:35:47 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe000200000000078a151f7508980a003900", 0x27) 03:35:47 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0x25, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x6) 03:35:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000083}]}) 03:35:47 executing program 6: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@logbufs={'logbufs', 0x3d, 0x5}}]}) 03:35:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000803, 0x23c0000000000001) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390000000007000100010039", 0x1f) 03:35:47 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f0000000140)=0xffffffffffffffff, 0x21d) 03:35:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2000000) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:35:47 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 03:35:47 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f0000000140)=0xffffffffffffffff, 0x21d) [ 829.138111] PF_BRIDGE: br_mdb_parse() with invalid ifindex 03:35:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 03:35:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 03:35:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"00ac720000000000ec973f820f7c4000", 0x101}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 03:35:47 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) lsetxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=@known='security.capability\x00', &(0x7f0000001400)='GPL\x00', 0x4, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x995ba2d8201dca0b}, 0xc) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_setup(0x7e, &(0x7f0000001240)=0x0) io_pgetevents(r4, 0x6, 0x0, &(0x7f0000001280), &(0x7f00000012c0), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x5, &(0x7f00000014c0)) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000140)) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90, 0x0, 0x373752d6}}, 0xe8) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x2, 0x8}, 0xc) getsockname$packet(r5, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0xfffffffffffffd49) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000001340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096, 0x0, 0x4, [], r7}, 0x48) r8 = gettid() ptrace$getenv(0x4201, r8, 0xfffc000000000000, &(0x7f0000001340)) sched_getattr(r8, &(0x7f0000001500), 0x30, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001300)) sysinfo(&(0x7f0000001280)=""/56) 03:35:47 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000000680), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write$P9_RLINK(r3, &(0x7f0000000180)={0x7}, 0x7) ioctl(r1, 0xffffffffffffffff, &(0x7f0000000b40)) [ 829.290909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 829.307005] XFS (loop6): Invalid superblock magic number 03:35:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 03:35:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) [ 829.359860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:35:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000380)=""/204, 0xcc, 0x0, &(0x7f00000001c0)=@ipx={0x4, 0x0, 0x0, "3647dce4652b"}, 0x70d000) 03:35:48 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x8004587d, 0x0) 03:35:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 03:35:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x3) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x20) exit(0x0) fchown(r1, 0x0, 0x0) 03:35:48 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) lsetxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=@known='security.capability\x00', &(0x7f0000001400)='GPL\x00', 0x4, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x995ba2d8201dca0b}, 0xc) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_setup(0x7e, &(0x7f0000001240)=0x0) io_pgetevents(r4, 0x6, 0x0, &(0x7f0000001280), &(0x7f00000012c0), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x5, &(0x7f00000014c0)) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000140)) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90, 0x0, 0x373752d6}}, 0xe8) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x2, 0x8}, 0xc) getsockname$packet(r5, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0xfffffffffffffd49) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000001340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096, 0x0, 0x4, [], r7}, 0x48) r8 = gettid() ptrace$getenv(0x4201, r8, 0xfffc000000000000, &(0x7f0000001340)) sched_getattr(r8, &(0x7f0000001500), 0x30, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001300)) sysinfo(&(0x7f0000001280)=""/56) 03:35:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 03:35:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x9000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400190000bb4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 03:35:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x2004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendto$inet(r1, &(0x7f00000001c0)="058c0c", 0x3, 0x0, 0x0, 0x0) close(r3) 03:35:48 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x2, 0x209e20, 0x8000000001, 0x1}, 0x3c7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r0, &(0x7f0000000340), &(0x7f0000000400)=""/4096}, 0x18) 03:35:48 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) lsetxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=@known='security.capability\x00', &(0x7f0000001400)='GPL\x00', 0x4, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x995ba2d8201dca0b}, 0xc) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_setup(0x7e, &(0x7f0000001240)=0x0) io_pgetevents(r4, 0x6, 0x0, &(0x7f0000001280), &(0x7f00000012c0), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x5, &(0x7f00000014c0)) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000140)) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90, 0x0, 0x373752d6}}, 0xe8) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x2, 0x8}, 0xc) getsockname$packet(r5, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0xfffffffffffffd49) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000001340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096, 0x0, 0x4, [], r7}, 0x48) r8 = gettid() ptrace$getenv(0x4201, r8, 0xfffc000000000000, &(0x7f0000001340)) sched_getattr(r8, &(0x7f0000001500), 0x30, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001300)) sysinfo(&(0x7f0000001280)=""/56) 03:35:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x10, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}, 0x18) close(r3) dup3(r1, r2, 0x0) 03:35:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="11736d66b8008800000f23c80f21f866350c0020000f23f866b9ce0b000066b8a5a47e7b66baa5bded2a0f30673ed2b30000000065f30f12ac0000ba4100ed0f9095a50036a636afba2000b09dee", 0x4e}], 0x1, 0x0, &(0x7f0000000080), 0x0) 03:35:48 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1'}, 0x4) dup2(r0, r1) 03:35:48 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000000680), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write$P9_RLINK(r3, &(0x7f0000000180)={0x7}, 0x7) ioctl(r1, 0xffffffffffffffff, &(0x7f0000000b40)) 03:35:48 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) lsetxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=@known='security.capability\x00', &(0x7f0000001400)='GPL\x00', 0x4, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x995ba2d8201dca0b}, 0xc) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_setup(0x7e, &(0x7f0000001240)=0x0) io_pgetevents(r4, 0x6, 0x0, &(0x7f0000001280), &(0x7f00000012c0), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x5, &(0x7f00000014c0)) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000140)) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90, 0x0, 0x373752d6}}, 0xe8) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x2, 0x8}, 0xc) getsockname$packet(r5, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0xfffffffffffffd49) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000001340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096, 0x0, 0x4, [], r7}, 0x48) r8 = gettid() ptrace$getenv(0x4201, r8, 0xfffc000000000000, &(0x7f0000001340)) sched_getattr(r8, &(0x7f0000001500), 0x30, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001300)) sysinfo(&(0x7f0000001280)=""/56) 03:35:48 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x201, &(0x7f0000000000)={&(0x7f0000000540)=""/4096, 0x103c}) 03:35:48 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8, 0x1}, 0x20) 03:35:48 executing program 6: r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x5, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 03:35:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x1, 0x0, 0x0, 'O'}) 03:35:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TIOCGLCKTRMIOS(r1, 0x406855c9, &(0x7f0000000080)) 03:35:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x2004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendto$inet(r1, &(0x7f00000001c0)="058c0c", 0x3, 0x0, 0x0, 0x0) close(r3) 03:35:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000a00), 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 03:35:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="d61686d5f7fdaa06c9652d294b2a74fd646538e030b347bb124250ea25a747587b078d", 0x23, 0x2000012c, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}, 0x2000000000000000}, 0x1c) 03:35:49 executing program 6: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x0) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000580)="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", 0xa81}], 0x1) 03:35:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="240000002d0007031dfffd946fa283df8fc4390009000000069effff000000000d00ff7e280000001100ffffba16a0aa1c0009b3eb098753b1cc7e63975c0ac47a6268e3406c0f15a30aa914", 0x4c}], 0x1}, 0x0) 03:35:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8, 0x1}, 0x20) 03:35:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000a00), 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 03:35:49 executing program 1: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000200)=""/221, &(0x7f0000000000)=0xdd) 03:35:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000240007031dfffd946fa2830020200a00090000000600000000ffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 830.573613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 830.597853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 830.719011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 830.743651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 03:35:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000000680), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write$P9_RLINK(r3, &(0x7f0000000180)={0x7}, 0x7) ioctl(r1, 0xffffffffffffffff, &(0x7f0000000b40)) 03:35:49 executing program 6: r0 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) process_vm_readv(0x0, &(0x7f0000001280), 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/41, 0x29}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x119, 0x22, 0x0) 03:35:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000a00), 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 03:35:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000900)=0x6) sendto$inet(r1, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0}) recvmmsg(r1, &(0x7f0000003480), 0x3ac, 0x8000a0, &(0x7f0000000140)={r2}) 03:35:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x4c, &(0x7f0000000000)=0x2000000, 0x4) 03:35:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8, 0x1}, 0x20) 03:35:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x2004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendto$inet(r1, &(0x7f00000001c0)="058c0c", 0x3, 0x0, 0x0, 0x0) close(r3) 03:35:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7}) 03:35:49 executing program 6: r0 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) process_vm_readv(0x0, &(0x7f0000001280), 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/41, 0x29}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x119, 0x22, 0x0) 03:35:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="66b9800000c00f326635000800000f300f2325363e0f01cb66b9800000c00f326635002000000f30018c448b2e0f0171860fc72cba4200ed67f26cd0bf9f30", 0x3f}], 0x1, 0x0, &(0x7f0000000300), 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0x6, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000140)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000840)) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5958}, &(0x7f0000000040)=0x20) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x41, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000a00), 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 03:35:49 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 03:35:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001400)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xca, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x3353cd1e187a4f97, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x6b7, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 03:35:49 executing program 6: r0 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) process_vm_readv(0x0, &(0x7f0000001280), 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/41, 0x29}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x119, 0x22, 0x0) 03:35:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x2004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendto$inet(r1, &(0x7f00000001c0)="058c0c", 0x3, 0x0, 0x0, 0x0) close(r3) 03:35:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8, 0x1}, 0x20) 03:35:50 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000000680), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write$P9_RLINK(r3, &(0x7f0000000180)={0x7}, 0x7) ioctl(r1, 0xffffffffffffffff, &(0x7f0000000b40)) 03:35:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0), 0xc) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x5d, &(0x7f0000000400), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000140)="66460f388111410f01ca660f01642400c40163d03166ba2100b03cee66baf80cb87873418bef66bafc0cb0b7ee2666460f381d8c210000000066b8df000f00d0dc38470f06", 0x45}], 0x0, 0x0, &(0x7f0000000040), 0x2) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000003c0)={0x0, 0xf000, 0x0, 0x0, 0xfffffffffffffffa}) 03:35:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:35:50 executing program 6: r0 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) process_vm_readv(0x0, &(0x7f0000001280), 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/41, 0x29}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x119, 0x22, 0x0) 03:35:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$packet(0x11, 0x80000000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e16ff0)={0x1, &(0x7f0000683ff0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 03:35:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001400)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xca, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x3353cd1e187a4f97, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x6b7, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 03:35:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@delsa={0x28, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0) 03:35:50 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) 03:35:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001400)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xca, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x3353cd1e187a4f97, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x6b7, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 03:35:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000280)=0x4) 03:35:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) write$sndseq(r0, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 03:35:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7fe74c4ee290000000007da2c88c1612786908655d4e1d310e524467c8a1648dd3868400080033000000"], 0x2a) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/1, 0x300}], 0x1) 03:35:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000080), 0x4) 03:35:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000080)) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) 03:35:50 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0x4e, 0x0, 0x0, 0x80000}}) 03:35:50 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 03:35:51 executing program 7: keyctl$read(0x10, 0xfffffffffffffffd, &(0x7f0000000040)=""/4, 0xffffffffffffffd0) 03:35:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001400)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xca, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x3353cd1e187a4f97, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x6b7, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 03:35:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x100000001, 0x12, 0x0, 0xffffffffffffff9c}, 0x39f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000340), &(0x7f0000000140), 0x3}, 0x20) 03:35:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@local, @in=@remote}, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x32}, 0x0, @in6}]}, @mark={0xc, 0x15, {0x0, 0xfffffffffffffffe}}]}, 0x178}}, 0x0) 03:35:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) write$sndseq(r0, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 03:35:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000080)) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) 03:35:51 executing program 5: socket(0x26, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x200) getrandom(&(0x7f0000000040)=""/8, 0xff28, 0x2) 03:35:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x100000001, 0x12, 0x0, 0xffffffffffffff9c}, 0x39f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000340), &(0x7f0000000140), 0x3}, 0x20) 03:35:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x420c, r1, 0x0, &(0x7f0000000100)={&(0x7f0000000040)}) 03:35:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x100000001, 0x12, 0x0, 0xffffffffffffff9c}, 0x39f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000340), &(0x7f0000000140), 0x3}, 0x20) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617dd", 0x21}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:35:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) lseek(r0, 0x0, 0x2) 03:35:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x100000001, 0x12, 0x0, 0xffffffffffffff9c}, 0x39f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000340), &(0x7f0000000140), 0x3}, 0x20) 03:35:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) write$sndseq(r0, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617dd", 0x21}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:35:51 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 03:35:51 executing program 7: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000300), &(0x7f00006fcff0)) r0 = gettid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) fcntl$setown(r2, 0x8, r0) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r0, 0x16) 03:35:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617dd", 0x21}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:35:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) 03:35:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)="73797a5f74756e0000000059b0b06500", 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x30, 0x0, 0x0, 0xfffffffffffffe7c) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617dd", 0x21}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:35:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000080)) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) 03:35:51 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2001001, &(0x7f0000000040)) 03:35:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617dd", 0x21}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617dd", 0x21}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:35:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd3, &(0x7f0000000000), 0x3c) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010107041dfffd946f42050000200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 03:35:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617dd", 0x21}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:35:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) write$sndseq(r0, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 03:35:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd3, &(0x7f0000000000), 0x3c) 03:35:52 executing program 1: syz_emit_ethernet(0xe, &(0x7f00000000c0)={@empty, @link_local, [], {@generic={0x88ca}}}, &(0x7f00000001c0)) [ 833.531370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 03:35:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 03:35:53 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 03:35:53 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x1) r1 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f0000001b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002d80), 0x0, &(0x7f0000002dc0)=ANY=[@ANYBLOB="10000000000000000d01000000008200"], 0x10}}], 0x1, 0x0) 03:35:53 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = open(&(0x7f0000000640)='./file0\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x10}}]}}) 03:35:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8010000000000087) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x1, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000640), 0xa) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000780)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d7dbd56b55c6433c876a4d13e52b310a750a683b1eaab96dc8428602a79e94e955725e5e99928349fb0c2e3b9dd2a095a0a1416fdd46f546409bf01bb5230d"}, 0x60) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f00000005c0)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x0, &(0x7f00000001c0)) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x16a) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x5, 0x400, 0x0, 0x80000000, 0x3f, 0x3, 0x80000001, 0x4, 0x0}, &(0x7f0000000580)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000600)={r3, 0x200}, &(0x7f0000000800)=0x8) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x5}) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) getitimer(0x2, &(0x7f0000000480)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='yeah\x00', 0x5) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000006c0)={'nr0\x00', &(0x7f0000000600)=ANY=[]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000440)={0xa, 0x4e1f, 0x2}, 0x1c) timerfd_gettime(r2, &(0x7f0000000700)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r1, r5, &(0x7f0000000080), 0x80000003) 03:35:53 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd3, &(0x7f0000000000), 0x3c) 03:35:53 executing program 3: r0 = socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x6, &(0x7f0000000000), 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000000)=r0, 0x36) 03:35:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000080)) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) 03:35:53 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd3, &(0x7f0000000000), 0x3c) 03:35:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)="c20e145e6969b1a6"}) 03:35:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x250, 0x0, 0x2}]}) 03:35:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000180), 0x3b2) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:53 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) 03:35:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) 03:35:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) 03:35:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) r1 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[]}}, 0x0) write(r0, &(0x7f0000000080)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) [ 834.828367] IPVS: ftp: loaded support on port[0] = 21 [ 834.879094] cgroup: fork rejected by pids controller in /syz5 03:35:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r1) [ 834.991739] IPVS: ftp: loaded support on port[0] = 21 03:35:54 executing program 7: ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000a00)="e75bc83d6d4aa565a5a025fc7ef2") perf_event_open(&(0x7f0000000a40)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x2, &(0x7f0000000140)=ANY=[@ANYRESOCT], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f0000000b80)=""/153}, 0x48) keyctl$negate(0xd, 0x0, 0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5d, 0x189000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) readv(r1, &(0x7f0000003900)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000b40)=@int=0x200, 0xfc08) socket$inet6(0xa, 0x202000000802, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x32b) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000c40)=""/39, &(0x7f0000000cc0)=0x27) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='tunl0\x00') ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000100)) 03:35:54 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") poll(&(0x7f0000000080)=[{r0}, {r1}, {r1}], 0x3, 0x0) 03:35:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x400000000000003, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000000c0)="1b0000001200030207fffd946fa283080700190000000000000085", 0x1b}], 0x1}, 0x0) 03:35:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @multicast1}}) 03:35:54 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') sendfile(r2, r3, &(0x7f0000000000), 0x88003) 03:35:54 executing program 4: r0 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) dup2(r0, r1) 03:35:54 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000180), 0x3b2) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:54 executing program 5: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x400071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x1b, 0x0) mbind(&(0x7f0000a73000/0x14000)=nil, 0x14000, 0x3, &(0x7f0000000000)=0xfc9f, 0x2, 0x0) 03:35:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x100004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="574556820400000000000000000000000000000000000000000000000000000000000000000000000002000020000000040000001000000080000000000800000000000000000000100e0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057455682f7ec5c", 0x8b, 0x40}]) [ 836.431847] netlink: 'syz-executor2': attribute type 25 has an invalid length. [ 836.439871] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 03:35:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x400000000000003, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000000c0)="1b0000001200030207fffd946fa283080700190000000000000085", 0x1b}], 0x1}, 0x0) 03:35:55 executing program 5: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000), 0x4) 03:35:55 executing program 0: r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x20000000004) ftruncate(r0, 0x4) [ 836.638830] netlink: 'syz-executor2': attribute type 25 has an invalid length. [ 836.646459] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 03:35:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480), &(0x7f00000004c0)="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", 0x4c9, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 03:35:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x8010aebb, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000011c0)}) 03:35:55 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') chdir(&(0x7f0000000000)='./.ile1\x00') 03:35:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000026c000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="450f01cf66ba4300b04dee660f38338f0f000000c744240000000100c744240200000000c7442406000000000f0114240fd18f10ba94c83e466d41f466b8bc008ee8f30f0159e60f01bb07000000", 0x4e}], 0xaaaaaaaaaaaaba6, 0x0, &(0x7f0000000180), 0x10000091) 03:35:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r0, r1, 0x0) 03:35:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x400000000000003, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000000c0)="1b0000001200030207fffd946fa283080700190000000000000085", 0x1b}], 0x1}, 0x0) 03:35:56 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) socketpair$inet6_icmp_raw(0xa, 0x3, 0x87, &(0x7f0000000000)) 03:35:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x75) 03:35:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480), &(0x7f00000004c0)="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", 0x4c9, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 03:35:56 executing program 7: ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000a00)="e75bc83d6d4aa565a5a025fc7ef2") perf_event_open(&(0x7f0000000a40)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x2, &(0x7f0000000140)=ANY=[@ANYRESOCT], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f0000000b80)=""/153}, 0x48) keyctl$negate(0xd, 0x0, 0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5d, 0x189000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) readv(r1, &(0x7f0000003900)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000b40)=@int=0x200, 0xfc08) socket$inet6(0xa, 0x202000000802, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x32b) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000c40)=""/39, &(0x7f0000000cc0)=0x27) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='tunl0\x00') ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000100)) 03:35:56 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000180), 0x3b2) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e756d615f6d61707300b5c62e9e8de9f243640adf803c64577aa9e4e33f9f72e5185191246f8fe224c3925050e2a9e57dbf6b530a5ebbec861baf4dc4f84bb1df13f0b152aa3b6e780781b6a8d091f88658ef4f16a21417d83d000000000000000000000000000000") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000df6000), 0x0, 0x800000000000) [ 837.528335] rtc_cmos 00:00: Alarms can be up to one day in the future 03:35:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480), &(0x7f00000004c0)="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", 0x4c9, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) [ 837.569784] netlink: 'syz-executor2': attribute type 25 has an invalid length. [ 837.577264] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 03:35:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000c000)='./file0\x00', 0x4142, 0x0) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0xa2812, r0, 0x0) mlock(&(0x7f000000b000/0x2000)=nil, 0x2000) 03:35:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x400000000000003, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000000c0)="1b0000001200030207fffd946fa283080700190000000000000085", 0x1b}], 0x1}, 0x0) 03:35:56 executing program 0: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, &(0x7f0000000280)={0x10000}, &(0x7f0000000000), &(0x7f0000000380)={&(0x7f0000000340), 0x8}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0x0, 0x100000002}, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140), &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c2604110, &(0x7f0000000080)) 03:35:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480), &(0x7f00000004c0)="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", 0x4c9, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 03:35:56 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x800) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) creat(&(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f0000004b40)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/177, 0xb1) 03:35:56 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x1c0, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0xd0, 0xd0, 0x100, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1, 0x0, @loopback, 0x0, @empty, [], @dev}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x238) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 03:35:56 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 837.740394] netlink: 'syz-executor2': attribute type 25 has an invalid length. [ 837.748004] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 03:35:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="ad56b6c5824c8eb995298992ea54c7beef9f5d56530f90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000013c0)="df6ee06b", 0x4}], 0x1, &(0x7f0000007000)}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000c2bfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 03:35:56 executing program 2: prctl$intptr(0x1d, 0xfffffffffffff2f9) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f00000001c0), 0x1) [ 837.817050] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, {0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xcf1, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x63, 0x4}}}, 0x78) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7ffff000}], 0x1, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 03:35:56 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ppoll(&(0x7f00000002c0)=[{r1}, {r2}, {r1}], 0x3, &(0x7f0000000340), &(0x7f00000003c0), 0x8) 03:35:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8400000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000540)=@broute={'brolte\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00\x00\x00\x00\b\x00', "73697430000002000000ffff00", 'bond0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0xb0, 0xb0, 0xe0, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0xfeffff07}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1e8) [ 838.071822] xt_time: invalid argument - start or stop time greater than 23:59:59 03:35:57 executing program 7: ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000a00)="e75bc83d6d4aa565a5a025fc7ef2") perf_event_open(&(0x7f0000000a40)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x2, &(0x7f0000000140)=ANY=[@ANYRESOCT], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f0000000b80)=""/153}, 0x48) keyctl$negate(0xd, 0x0, 0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5d, 0x189000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) readv(r1, &(0x7f0000003900)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000b40)=@int=0x200, 0xfc08) socket$inet6(0xa, 0x202000000802, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x32b) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000c40)=""/39, &(0x7f0000000cc0)=0x27) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='tunl0\x00') ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000100)) 03:35:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="ad56b6c5824c8eb995298992ea54c7beef9f5d56530f90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000013c0)="df6ee06b", 0x4}], 0x1, &(0x7f0000007000)}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000c2bfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200), 0x4) 03:35:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") clock_getres(0x100000000000000c, &(0x7f0000000000)) 03:35:57 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x800) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) creat(&(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f0000004b40)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/177, 0xb1) 03:35:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000040)=0x8) 03:35:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) close(r2) close(r1) 03:35:57 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000180), 0x3b2) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 838.529466] rtc_cmos 00:00: Alarms can be up to one day in the future 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200), 0x4) 03:35:57 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:35:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="ad56b6c5824c8eb995298992ea54c7beef9f5d56530f90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000013c0)="df6ee06b", 0x4}], 0x1, &(0x7f0000007000)}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000c2bfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 03:35:57 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="2a745c6e5d221615e3fe74d5be3b8c5ae8f6b6711adff83983f9b6a914556c7e3c300b780d1eceac", 0x28}]) 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200), 0x4) 03:35:57 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x800) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) creat(&(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f0000004b40)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/177, 0xb1) 03:35:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="ad56b6c5824c8eb995298992ea54c7beef9f5d56530f90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000013c0)="df6ee06b", 0x4}], 0x1, &(0x7f0000007000)}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000c2bfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200), 0x4) 03:35:58 executing program 7: ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000a00)="e75bc83d6d4aa565a5a025fc7ef2") perf_event_open(&(0x7f0000000a40)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x2, &(0x7f0000000140)=ANY=[@ANYRESOCT], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f0000000b80)=""/153}, 0x48) keyctl$negate(0xd, 0x0, 0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5d, 0x189000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) readv(r1, &(0x7f0000003900)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000b40)=@int=0x200, 0xfc08) socket$inet6(0xa, 0x202000000802, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x32b) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000c40)=""/39, &(0x7f0000000cc0)=0x27) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='tunl0\x00') ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000100)) 03:35:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@noalign='noalign'}, {@dax='dax'}, {@swidth={'swidth', 0x3d, 0x5}}]}) 03:35:58 executing program 5: bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000000)) 03:35:58 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x800) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) creat(&(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f0000004b40)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/177, 0xb1) 03:35:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 03:35:58 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 03:35:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', @ifru_settings={0x704000, 0x0, @te1=&(0x7f0000000180)}}) 03:35:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000000000)={0x10, 0x6c}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 839.524787] rtc_cmos 00:00: Alarms can be up to one day in the future 03:35:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x7391}, 0x148) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2a) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1, &(0x7f0000000440)}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x257}], 0x1, &(0x7f0000000200)}, 0x8000) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1, &(0x7f0000001780)}, 0x0) [ 839.569377] netlink: 'syz-executor2': attribute type 16 has an invalid length. [ 839.630649] XFS (loop1): sunit and swidth options incompatible with the noalign option [ 839.637795] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.670407] bridge0: port 2(bridge_slave_1) entered disabled state 03:35:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x7391}, 0x148) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2a) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:35:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) 03:35:58 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1, &(0x7f0000000440)}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b0145f8af9aa0ed0e18bc50509eaef21c8e03842a97df3a462ea3f9d5f83bf1d4d2875f0d5b24e941483f863cd2ea7c769bd3e594fb173dd873c7d9a3fd20939ad1d5867881ed77a078007b4972aba36cae02004373a6a74d74cb15a52c5f8426cb6f235d38048fd91f5d6100fd58a335df10add227d804167ba191c7a035c5a2a916e7fef18a6003578820b3e0be26a22f2c149f40a0335cadcca64a5e44179e6ce4d7f7c16e8a96c5be7cdf66eef901cb8eeabc94bae30acca8c6fa02889c32311044dcbc9a2e02e0632f7f9aa96849abede543773745e4652fccc503003f10cd68ddab594969ad36cb622ed7ba22dc46a80fb63ac2c561a80ae5c10b295b9f75d9536ba1ac24b8e9ae217611ffe79cb9422158475c1a89a51547d13c03b68d75ffb5717a35f381774567871e9e4190272c97eafcfa0a07a751d0bc8eeb0c206e12b2cff1065a3d5622635fa44c0dcb0722ad4c97e6b7d5844b2e9bab9ba1d083fa2930a3ea267d7f15d817e2b2e055ccfbaf019292f6156efd3a9a13ea90ecf59fc1bf35c6626db1c6759a50ed84acefd3cdb", 0x257}], 0x1, &(0x7f0000000200)}, 0x8000) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1, &(0x7f0000001780)}, 0x0) [ 839.722090] XFS (loop1): sunit and swidth options incompatible with the noalign option 03:35:58 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0x0) 03:35:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000000)="6bb84fe84499b639c60bf95136a4b97b22deabf48d0f41680ef41b7e2349f0f60fbffeacd0629ba305c8762f", 0x2c, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, 0x10) 03:35:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x7391}, 0x148) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2a) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:35:59 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00\x00d\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bond0\x00', 'bond_slave_0\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0xb8, 0xb8, 0xe8, [@limit={'limit\x00', 0x20, {{0xfffffffffffffc00, 0x81}}}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f0) 03:35:59 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 03:35:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) 03:35:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 03:35:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="0f320f06670f01df0fc75e01baf80c66b86bc8a78666efbafc0cb004eed9fbf4660f22e626f20f01df0f01df"}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)={0x0, 0x39a3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:59 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x39e) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0xd1) 03:35:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1, &(0x7f0000000440)}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x257}], 0x1, &(0x7f0000000200)}, 0x8000) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1, &(0x7f0000001780)}, 0x0) [ 840.525152] rtc_cmos 00:00: Alarms can be up to one day in the future [ 840.564694] ebt_limit: overflow, try lower: 4294966272/129 03:35:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1, &(0x7f0000000440)}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x257}], 0x1, &(0x7f0000000200)}, 0x8000) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1, &(0x7f0000001780)}, 0x0) 03:35:59 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 03:35:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") migrate_pages(0x0, 0x8, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0x1) 03:35:59 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 03:35:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) 03:35:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x7391}, 0x148) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2a) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:35:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001240)={0x0, 0x2000000001}, 0x10001) r1 = dup2(r0, r0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000001200)={0x30}, 0x30) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) shutdown(r0, 0x1) 03:35:59 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001480), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 03:35:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) dup3(r1, r0, 0x0) 03:35:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025c3f0a00145f8f764070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100001000000000000000000000000800100000000300000000000000000006000000000000000000800000000000e000000100000000000000000000000000000000000000000000000000001700030006000000000002000004000000bb000000000000000003000500000000000200423b1d632b010020000000000000"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) 03:35:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) 03:35:59 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0/file0'}, 0x11) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 03:35:59 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) lseek(r0, 0xfffffffffffffffe, 0x1) 03:35:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8001) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r3 = epoll_create(0x9) r4 = timerfd_create(0x0, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000000c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') r6 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0x9) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40080) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$P9_RRENAME(r1, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000400)={0x2000}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000100)="025cc80700145f8f764070") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 03:35:59 executing program 7: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x114, 0x8, &(0x7f00003dd000)=""/13, &(0x7f000033bffc)=0xd) 03:35:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="0b964c0f080319", 0x7}], 0x1) 03:35:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) io_setup(0xbb, &(0x7f00000000c0)=0x0) r2 = socket(0x2, 0x803, 0x1) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000080), 0x1300}]) 03:35:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000200)="11534d14", 0x4, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}, 0x40000000}, 0x1c) 03:35:59 executing program 0: r0 = socket(0x800000002b, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[]}}, 0x20008850) ioctl$sock_inet6_SIOCDELRT(r1, 0x8936, &(0x7f00000001c0)={@ipv4={[], [], @rand_addr}, @mcast2, @remote}) 03:35:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) dup3(r1, r0, 0x0) 03:35:59 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) lseek(r0, 0xfffffffffffffffe, 0x1) 03:35:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 03:35:59 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 03:35:59 executing program 0: r0 = socket(0x800000002b, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[]}}, 0x20008850) ioctl$sock_inet6_SIOCDELRT(r1, 0x8936, &(0x7f00000001c0)={@ipv4={[], [], @rand_addr}, @mcast2, @remote}) 03:35:59 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) 03:35:59 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000001380), &(0x7f0000000380), 0x0, 0xfffffffffffffffb) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000d55000), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x800000003}, 0x14}}, 0x0) 03:35:59 executing program 0: r0 = socket(0x800000002b, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[]}}, 0x20008850) ioctl$sock_inet6_SIOCDELRT(r1, 0x8936, &(0x7f00000001c0)={@ipv4={[], [], @rand_addr}, @mcast2, @remote}) 03:35:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000002c0)={0x94, 0x0, [0xffff8000]}) 03:35:59 executing program 0: r0 = socket(0x800000002b, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[]}}, 0x20008850) ioctl$sock_inet6_SIOCDELRT(r1, 0x8936, &(0x7f00000001c0)={@ipv4={[], [], @rand_addr}, @mcast2, @remote}) [ 841.520776] rtc_cmos 00:00: Alarms can be up to one day in the future [ 841.527618] rtc_cmos 00:00: Alarms can be up to one day in the future [ 841.534477] rtc_cmos 00:00: Alarms can be up to one day in the future [ 841.541292] rtc_cmos 00:00: Alarms can be up to one day in the future [ 841.547980] rtc rtc0: __rtc_set_alarm: err=-22 [ 841.703822] print_req_error: I/O error, dev loop0, sector 0 [ 841.709665] buffer_io_error: 6 callbacks suppressed [ 841.709675] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 841.722736] print_req_error: I/O error, dev loop0, sector 8 [ 841.728521] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 841.736250] print_req_error: I/O error, dev loop0, sector 16 [ 841.742133] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 841.749866] print_req_error: I/O error, dev loop0, sector 24 [ 841.755721] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 841.763497] print_req_error: I/O error, dev loop0, sector 32 [ 841.769352] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 841.777041] print_req_error: I/O error, dev loop0, sector 40 [ 841.782900] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 841.790613] print_req_error: I/O error, dev loop0, sector 48 [ 841.796475] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 841.804206] print_req_error: I/O error, dev loop0, sector 56 [ 841.810088] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 841.817809] print_req_error: I/O error, dev loop0, sector 64 [ 841.823677] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 841.831405] print_req_error: I/O error, dev loop0, sector 72 [ 841.837246] Buffer I/O error on dev loop0, logical block 9, lost async page write 03:36:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) dup3(r1, r0, 0x0) 03:36:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) lseek(r0, 0xfffffffffffffffe, 0x1) 03:36:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @local}]}, 0x28}}, 0x0) 03:36:00 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000001380), &(0x7f0000000380), 0x0, 0xfffffffffffffffb) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000d55000), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x800000003}, 0x14}}, 0x0) 03:36:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup(r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 03:36:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000002bc0)={'bridge0\x00', &(0x7f0000002c00)=@ethtool_cmd={0x8}}) 03:36:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 03:36:00 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="7f454c460000000000000098ebd014ab4236e20000000000000000006450ff57be750000000000000000"], 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) 03:36:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000180), &(0x7f0000000300)='u', 0x1, r0) r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800), &(0x7f0000000840)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e2ecd3fff32853747eda22d29be9b36119ec53dc60e2c80b3e9ffa1b81a808ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b0687d6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb46c1523b8a25e71690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3a", 0xc0, r1) r4 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000000340), &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r4}, &(0x7f00005cd000), 0x2, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 03:36:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x900}, 0xc, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x1c, 0x18, 0x311}, 0x1c}}, 0x0) 03:36:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000002bc0)={'bridge0\x00', &(0x7f0000002c00)=@ethtool_cmd={0x8}}) 03:36:00 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000001380), &(0x7f0000000380), 0x0, 0xfffffffffffffffb) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000d55000), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x800000003}, 0x14}}, 0x0) 03:36:00 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 03:36:00 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000001380), &(0x7f0000000380), 0x0, 0xfffffffffffffffb) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000d55000), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x800000003}, 0x14}}, 0x0) 03:36:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x10000) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x84e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000300)={@local, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000880)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @rand_addr, @broadcast}, &(0x7f0000000a80)=0xc) accept$packet(0xffffffffffffff9c, &(0x7f0000000ac0)={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f0000000d00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000010c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x90300}, 0xc, &(0x7f0000001080)={&(0x7f0000000d40)={0x2f0, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xc0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x20c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x1, 0x8, 0xfff, 0x2}, {0x400, 0x80, 0x5, 0x3}, {0x401, 0x10, 0x1f, 0xf9}, {0x6, 0xbea3, 0x4, 0xc}, {0x7, 0x7, 0x3, 0x7fff}, {0xd63, 0x7f, 0x377, 0x3f}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xa2a, 0x9, 0xfffffffffffffff8}, {0x8, 0x0, 0x3efe, 0x3ff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000100)=0x7, 0x4) sendto$inet(r1, &(0x7f0000000000), 0xec, 0xc0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff}, 0xffffffffffffff0d) close(r1) 03:36:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000002bc0)={'bridge0\x00', &(0x7f0000002c00)=@ethtool_cmd={0x8}}) 03:36:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) dup3(r1, r0, 0x0) 03:36:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) lseek(r0, 0xfffffffffffffffe, 0x1) 03:36:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000198, 0x0) 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, &(0x7f00000007c0)}) 03:36:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000002bc0)={'bridge0\x00', &(0x7f0000002c00)=@ethtool_cmd={0x8}}) 03:36:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x11) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) [ 842.304850] binder: 25632:25633 sending u0000000000000000 node 193, cookie mismatch 0000000000000004 != 0000000000000000 [ 842.321216] binder: 25632:25633 transaction failed 29201/-22, size 24-8 line 3049 [ 842.402196] binder: send failed reply for transaction 192 to 25632:25633 [ 842.414258] binder: undelivered TRANSACTION_ERROR: 29201 [ 842.419964] binder: undelivered TRANSACTION_ERROR: 29189 03:36:01 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) lseek(r0, 0x200000000000, 0x0) close(0xffffffffffffffff) 03:36:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000180)) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) r1 = socket$inet6(0xa, 0x1000000000002, 0xc5) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x80000001, 0x4924924}) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 03:36:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000280)=@can, 0x80, &(0x7f0000002040)=[{&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000004c0)=""/71, 0x47}], 0x2, &(0x7f0000001580)=""/238, 0xee}}], 0x1, 0x0, &(0x7f0000001f00)={0x77359400}) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:36:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"6c6f0000000004000000000600", 0xfd}) 03:36:01 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) 03:36:01 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000008300004000000095db"]) 03:36:01 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f0000000200)="91", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 03:36:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000280)=@can, 0x80, &(0x7f0000002040)=[{&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000004c0)=""/71, 0x47}], 0x2, &(0x7f0000001580)=""/238, 0xee}}], 0x1, 0x0, &(0x7f0000001f00)={0x77359400}) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:36:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 03:36:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000280)=@can, 0x80, &(0x7f0000002040)=[{&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000004c0)=""/71, 0x47}], 0x2, &(0x7f0000001580)=""/238, 0xee}}], 0x1, 0x0, &(0x7f0000001f00)={0x77359400}) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:36:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000534000), &(0x7f0000000040)=0xfffffffffffffede) 03:36:01 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:36:01 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") keyctl$unlink(0x10, r0, 0x0) 03:36:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000280)=@can, 0x80, &(0x7f0000002040)=[{&(0x7f0000000300)=""/21, 0x15}, {&(0x7f00000004c0)=""/71, 0x47}], 0x2, &(0x7f0000001580)=""/238, 0xee}}], 0x1, 0x0, &(0x7f0000001f00)={0x77359400}) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:36:01 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$evdev(r1, &(0x7f0000000100)=[{{0x77359400}}], 0x18) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:36:01 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000ff8)={&(0x7f0000000ff8)={0x1000}, 0x8}) 03:36:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x4) lseek(r0, 0x4a, 0x1) 03:36:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14}, 0x14}}, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp\x00') sendfile(r1, r2, &(0x7f0000000100), 0x6) 03:36:01 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, &(0x7f0000003680)) 03:36:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"6c6f0000000004000000000600", 0xfd}) 03:36:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x7fff}) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@local, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14) 03:36:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:36:01 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f0000000200)="91", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 03:36:01 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000020c0)="51a4a1345f4f32371887fa65c0ae", 0xe}], 0x1, &(0x7f0000000dc0)}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 03:36:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d7cba15e90e780a", @ANYRESHEX]) 03:36:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fallocate(r1, 0x0, 0x0, 0x8000) lseek(r1, 0x0, 0x3) 03:36:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x7fff}) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@local, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14) [ 843.594110] 9pnet: Could not find request transport: |ºéx [ 843.594110] 0xffffffffffffffff 03:36:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x7fff}) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@local, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14) 03:36:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000120007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:02 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f0000000200)="91", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 03:36:02 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)={0x8}, 0x0) 03:36:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdd9, &(0x7f00000000c0)}, 0xffffffffffffffe7) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x12) 03:36:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x7fff}) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@local, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14) 03:36:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"6c6f0000000004000000000600", 0xfd}) 03:36:02 executing program 1: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb), &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) 03:36:02 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f0000000200)="91", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 03:36:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x7fff}) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@local, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14) [ 844.326176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:36:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:36:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:36:02 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x5}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0) 03:36:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x7fff}) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@local, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14) 03:36:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x7fff}) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@local, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14) 03:36:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"6c6f0000000004000000000600", 0xfd}) 03:36:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505331, &(0x7f000023efa8)={0x80}) 03:36:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000120007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="960f31"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:36:03 executing program 0: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="83", 0x1, 0xffffffffffffffff) keyctl$clear(0xb, r0) 03:36:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:36:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x1}) read(r3, &(0x7f0000481000)=""/128, 0x80) 03:36:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:36:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x1}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}) 03:36:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40087602, 0x0) [ 844.979430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:36:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:36:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000a40)="bd", 0x1) tee(r3, r2, 0x3, 0x0) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r5, 0x1000000000013) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 03:36:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$PIO_FONTX(r1, 0x5412, &(0x7f0000000540)) gettid() timer_create(0x0, &(0x7f00000000c0), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) 03:36:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./control\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@grpquota='grpquota'}, {@discard='discard'}]}) 03:36:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x40000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000f) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000040, 0x0, 0x0, 0x20000070, 0x200000a0], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x1, 0x180, [0x20000540, 0x0, 0x0, 0x20000660, 0x20000690], 0x0, &(0x7f0000000180), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'nr0\x00', 'sit0\x00', "6272df0a00000000000076655f3000", 'rose0\x00', @link_local, [], @link_local, [], 0xa0, 0xa0, 0xf0, [@pkttype={'pkttype\x00', 0x8}]}}, @common=@log={'log\x00', 0x28, {{0x0, "085c8830d25f52f01d341ff23dbdfe7eb254a6539781e07e20d624437901"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1f8) 03:36:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000060107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:36:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000120007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:03 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r2, 0x0) listen(r1, 0x0) [ 845.374696] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 03:36:03 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f00000006c0)={0xa0, 0x19, 0x1, {0xfffffffffffffffc, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8e9b}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) setxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f00000004c0)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0) 03:36:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="220000002000070700be0000090007010a00001e00003c0195ff040405000c008000", 0x22) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 03:36:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000200)=0x3, 0x5e, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) 03:36:03 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:36:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_gettime(0x0, &(0x7f0000000040)) 03:36:04 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f00000006c0)={0xa0, 0x19, 0x1, {0xfffffffffffffffc, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8e9b}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) setxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f00000004c0)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0) 03:36:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001280)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/216, 0xd8}, 0x0) [ 845.772581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:36:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:36:04 executing program 6: clone(0x8000000800200, &(0x7f0000000480), &(0x7f0000744000), &(0x7f0000000540), &(0x7f0000000040)) mknod(&(0x7f00000002c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380), &(0x7f0000000580)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 03:36:04 executing program 5: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r2) r3 = memfd_create(&(0x7f0000000100)='bdev$-\x00', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r3, 0x0, 0x3) fremovexattr(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='u']) close(r1) 03:36:04 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xffffffff7fffffff, 0x4) 03:36:04 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f00000006c0)={0xa0, 0x19, 0x1, {0xfffffffffffffffc, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8e9b}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) setxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f00000004c0)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0) 03:36:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001280)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/216, 0xd8}, 0x0) 03:36:04 executing program 7: openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) 03:36:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000120007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:36:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001280)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/216, 0xd8}, 0x0) 03:36:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x0, 0x9, 0xa0}, 0x98) 03:36:04 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f00000006c0)={0xa0, 0x19, 0x1, {0xfffffffffffffffc, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8e9b}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x60, 0x7b, 0x1}, 0x7) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) setxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f00000004c0)='keyringself-ppp0+vmnet0vboxnet1\x00', 0x20, 0x0) 03:36:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) 03:36:04 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000007000)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x15f60b4, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:36:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001280)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/216, 0xd8}, 0x0) 03:36:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x200000000000048c, 0x1000000000]}) 03:36:04 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000f00)=[@mask_cswp={0x58, 0x114, 0xc, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x4000000) [ 846.448841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 846.559785] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 846.582097] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? 03:36:05 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) signalfd4(r0, &(0x7f0000000240)={0x7}, 0x4f, 0x800) r2 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x2) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000140)=""/247) recvfrom$inet6(r2, &(0x7f0000000280)=""/4096, 0x1000, 0x2000, 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB="7f0000007d0100000078000700080000000803000000021400000000000000000058db12ac540800000002000000000000000c002f6465762f75696e7075680007006d7175657565003100706f73696e5f61636c5f616363657373232d637075736574730000000000000020256d696d655f74797065776c616e30fdffffff"], 0x7f) mkdir(&(0x7f0000218ff8)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)={&(0x7f0000001280)='./file0\x00', 0x0, 0x8}, 0x10) setrlimit(0xc, &(0x7f00002ffff0)) mount(&(0x7f0000cec000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00003f1ff9)='mqueue\x00', 0x0, &(0x7f0000b65000)) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) 03:36:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x4000000007, 0x0) perf_event_open(&(0x7f0000001000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 03:36:05 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x1, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0xffffff7f, 0x0, 0x0, 0x0, "7f65db78b282958e"}}, 0x48}}, 0x0) 03:36:05 executing program 6: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000580)={0x8}, 0x0) 03:36:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x986f) shutdown(r0, 0x1) 03:36:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) 03:36:05 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x40, &(0x7f0000000300), 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={r0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) 03:36:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000), 0x0, 0x0, 0x0, 0xfe}]) 03:36:05 executing program 1: syz_emit_ethernet(0x31f, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f0000000000)) 03:36:05 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x124880, &(0x7f00000001c0)) 03:36:05 executing program 6: open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x1000, &(0x7f0000000440)) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x79fd, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:36:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100), 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0x5c) 03:36:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000500)="06b45bd91eeb4d0007fdd5f124d32cbc7e6388ee67c038fb9db7da", 0x1b) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x10000000000002fc) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 03:36:07 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000007000)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x15f60b4, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:36:07 executing program 1: syz_emit_ethernet(0x31f, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f0000000000)) 03:36:07 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) 03:36:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xfffffc29, &(0x7f0000000600)=""/50, 0x0, 0x2402}}, 0x305) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000080)=""/24, 0x18, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 03:36:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) 03:36:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) 03:36:07 executing program 7: r0 = gettid() select(0xb, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000180)={0x77359400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 03:36:07 executing program 1: syz_emit_ethernet(0x31f, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f0000000000)) 03:36:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000000480)=0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f000004d000), 0x0) 03:36:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/30, 0xfffffe80) 03:36:08 executing program 1: syz_emit_ethernet(0x31f, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f0000000000)) 03:36:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000500)="06b45bd91eeb4d0007fdd5f124d32cbc7e6388ee67c038fb9db7da", 0x1b) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x10000000000002fc) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 03:36:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000000480)=0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f000004d000), 0x0) 03:36:08 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000007000)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x15f60b4, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:36:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000500)="06b45bd91eeb4d0007fdd5f124d32cbc7e6388ee67c038fb9db7da", 0x1b) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x10000000000002fc) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x9, 0x4000000000000800, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000001180)=""/4096}, 0x18) 03:36:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000000480)=0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f000004d000), 0x0) 03:36:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000500)="06b45bd91eeb4d0007fdd5f124d32cbc7e6388ee67c038fb9db7da", 0x1b) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x10000000000002fc) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x9, 0x4000000000000800, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000001180)=""/4096}, 0x18) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x9, 0x4000000000000800, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000001180)=""/4096}, 0x18) 03:36:08 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000007000)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x15f60b4, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:36:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) 03:36:08 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1b) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@srh, 0x8) 03:36:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000000480)=0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f000004d000), 0x0) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x9, 0x4000000000000800, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000001180)=""/4096}, 0x18) 03:36:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000500)="06b45bd91eeb4d0007fdd5f124d32cbc7e6388ee67c038fb9db7da", 0x1b) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x10000000000002fc) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 03:36:08 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200), 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)="6173796d6d65747269630000f623c165dbdd5da4e516feae1218931b7f62f1989e779cb3e199015e6f224dc786b78b696462c7dec58cd05fa42773a0af0a703d63e19620fd165b5d862cf735059c401152746037a51f9d035dcf4197d265f6f5d246b14212db69e767574420fb11a7308eb293967dbd5a729bb8c6833a854e2036d4e9270fef4cef270638e56c144263ecf6903800009d38f68668c21513e19c1311eea8ee94c59609987d033ca3c8ad624dbc5c8958aaa4e9158c5850c6228a22d0adaabe8bb566c069d5baa64e30af6d878c", &(0x7f0000000040), &(0x7f0000000280)="30818dd9c14c75bc8e4d592cffd4607c4b3b154d7fc4035cd9e32bc89c52351945927bc911ad1787c590714269ee80ae70cbf1f3c7dd26c2b99cb25df53fd91fcfd121392a1d5bdc4fbf1e9ffea1b710f7419e69fade3839634c8e06a9a6afa60fd985e068e135343fe4f4729d4717b87cce448951857dec90d730f5fe41ab38e32af6b9f76c548881ab710ff9be8910", 0x90, r0) 03:36:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000500)="06b45bd91eeb4d0007fdd5f124d32cbc7e6388ee67c038fb9db7da", 0x1b) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x10000000000002fc) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 03:36:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x181, 0x400000000000) 03:36:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='mEmory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000680)={0x0, 0x0, 0x6cea, 0x1}) writev(r1, &(0x7f0000000740)=[{&(0x7f00000004c0), 0xc0040020}], 0x1) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x100000000, 0x0, 0x0, 0x5}) 03:36:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuseblk\x00', 0x21, &(0x7f0000001600)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) dup3(r1, r0, 0x0) 03:36:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) read$FUSE(r0, &(0x7f0000000580), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) 03:36:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x8c1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105511, &(0x7f0000000300)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}}) 03:36:08 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000001c0)={[{@gid={'gid'}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='autofs\x00', 0x0, &(0x7f00000001c0)) 03:36:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x4064d3, {0xffffffbfffbff271}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="6f6f6d5f73626f72655fa50f2247c4269643c352409a29b2d94af041d0bc54c3901b356f33462dcf38dc") 03:36:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delroute={0x1c}, 0xfffffffffffffda0}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 850.438770] ISOFS: Unable to identify CD-ROM format. 03:36:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) bind$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x0, 0x0, 0x0, 0x2}}, 0xa) 03:36:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) 03:36:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)) 03:36:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 03:36:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00'}) 03:36:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) bind$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x0, 0x0, 0x0, 0x2}}, 0xa) 03:36:09 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000500)="06b45bd91eeb4d0007fdd5f124d32cbc7e6388ee67c038fb9db7da", 0x1b) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f380407baf80c66b8ac05288866efbafc0ced0f01c9f20f060f01b60600660f38093967d9fc0fc72f65660fd80fa92400", 0x31}], 0x1, 0x0, &(0x7f0000000000), 0x10000000000002fc) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)) 03:36:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) bind$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x0, 0x0, 0x0, 0x2}}, 0xa) 03:36:09 executing program 0: r0 = socket(0x10, 0x83000000003, 0x0) write(r0, &(0x7f00000004c0)="220000001e0063fffc01fd13f06ece030000000000000072d9070028510007140028", 0x22) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1) [ 850.871959] netlink: 6 bytes leftover after parsing attributes in process `syz-executor0'. [ 850.880804] netlink: 6 bytes leftover after parsing attributes in process `syz-executor0'. [ 850.903085] netlink: 6 bytes leftover after parsing attributes in process `syz-executor0'. [ 850.911781] netlink: 6 bytes leftover after parsing attributes in process `syz-executor0'. 03:36:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x9, 0x6}]}}}]}, 0x3c}}, 0x0) 03:36:09 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x1c4, 0x0, 0xa4a3ad41a879dddd) 03:36:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) bind$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x0, 0x0, 0x0, 0x2}}, 0xa) 03:36:09 executing program 0: ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="8011"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d4"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:09 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 03:36:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)) 03:36:09 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 03:36:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 03:36:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000200)="6736430f23d266bad104ec0f013f260f01c8c7442400f5a49228c7442402dac78485c7442406000000000f011c24470f01f8b9f00a0000b808000000ba000000000f30c4827d19d92626460f22c666b89c008ed0"}], 0xaaaaad7, 0x0, &(0x7f0000000180), 0x0) 03:36:09 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x10000000114, 0x3}], 0x10}, 0x0) 03:36:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080), 0x10) 03:36:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x80, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 03:36:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x49) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x500, 0x0) 03:36:09 executing program 2: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1000007f0ad21853315b6402b153"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)=0x1) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 03:36:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000001400c6da0000000b000000000066ce656d316e6f246576656d31000000000000000000f386616a1a0a3c0000000000002c0e0000000000619fcd3823b7c94f5a3276ce8c9461000000000000051c0005000000000079737465746a48be1b31486dcc6370757365746367726f757024a3d030914ce145fe700471595c"], 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 03:36:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4}}]}, 0x2c}}, 0x0) 03:36:10 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x0, &(0x7f0000000000)) 03:36:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 03:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.ima\x00', &(0x7f0000000080)='trusted.syz\x00', 0xc, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000240)='security.ima\x00', 0xd, 0x0) setxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'trusted.', '127.0.0.1\x00'}, &(0x7f0000000440)='9p\x00', 0x3, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000180)='9p\x00', 0xffa3, 0x0) 03:36:10 executing program 2: syz_read_part_table(0xfc01, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c, 0x1c0}]) [ 851.732931] netlink: 'syz-executor3': attribute type 21 has an invalid length. [ 851.772943] netlink: 'syz-executor3': attribute type 4 has an invalid length. 03:36:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)) 03:36:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x21) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x8000, &(0x7f00005b5ff0), 0x10) sendto$inet(r1, &(0x7f00000004c0)="ca25854614833e380165aeb3b5993f5d9bbdec256fb547c51a0e01a80f42e505a439cbbe110576e815348642abae4e7cd3d80ac17e7a01bd2a3e0dc4fd01f07b619cf8278383e1e87218ae371ad19f9f", 0x50, 0x0, &(0x7f0000000080), 0x10) 03:36:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f00000008c0)={0x10, 0x0, 0x5342000000000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000000)={0x14, r2, 0x301}, 0x14}}, 0x0) 03:36:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000300)={0x2, 0x0, [0xc0010000, 0xfffffbfffffffff9, 0x40000103]}) 03:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x6, 0x1e, &(0x7f0000013ff4)={@local, @rand_addr, @remote}, 0xc) close(r3) dup3(r1, r2, 0x0) 03:36:10 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x4, 0x0, @empty, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000000)) 03:36:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x13}, 0x14}}, 0x0) 03:36:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) 03:36:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8921, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures}) close(r2) close(r1) 03:36:10 executing program 5: r0 = memfd_create(&(0x7f0000000080)='%securityppp0lo-.eth0@%systemvboxnet1)cgroup\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8) 03:36:10 executing program 1: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) close(r1) [ 851.878158] dccp_invalid_packet: P.CsCov 3 exceeds packet length 80 [ 851.909390] kvm [26266]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0xfffffbfffffffff9 03:36:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) select(0x40, &(0x7f0000000680), &(0x7f00000006c0)={0x9}, &(0x7f0000000700)={0x20}, &(0x7f0000000740)={0x77359400}) 03:36:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000002c0)="b7", 0x1, 0x8000, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = dup(r0) write$P9_RSTAT(r1, &(0x7f0000001cc0)={0x58, 0x7d, 0x0, {0x0, 0x51, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x11, '/dev/vga_arbiter\x00', 0x5, 'eth1^', 0x1, '*', 0x7, 'queue0\x00'}}, 0x58) 03:36:10 executing program 6: sysinfo(&(0x7f0000000240)=""/106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000240)}, &(0x7f0000000100)=0xffffffffffffff9e) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 03:36:10 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000010007fbdb72d1cb2a4a280930a06000000a84308910000000e00080008000c00000000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 03:36:10 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 852.152125] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. [ 852.196531] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. 03:36:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)) 03:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x57}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 03:36:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz0', "9392cdee09291692635799a5b704d860a139224ef672d920f9f85275b04ce10e7bac4ad55b75fe598cbaccb8bfe54373d2f8a6efaa44ed9608b49aa09c5f58581a9de9d2e4e73aa6345a05ae44ff25681394326706396c8a9ea77646f41fb8e14399d71d2914e63f0c212fafb1dcfa767da3f38081016ec57f"}, 0x7d) write$binfmt_aout(r1, &(0x7f0000000000), 0xff8f) 03:36:10 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xd00000000000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nobarrier='nobarrier'}]}) 03:36:10 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:36:10 executing program 2: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140), &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 03:36:10 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) 03:36:10 executing program 2: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140), &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) [ 852.379045] hfsplus: unable to parse mount options 03:36:10 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:36:10 executing program 2: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140), &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 03:36:10 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xd00000000000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nobarrier='nobarrier'}]}) 03:36:10 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x14) 03:36:10 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}, 0xc100) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) 03:36:10 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, r1) r2 = memfd_create(&(0x7f00000001c0)="0099e62aaf0000000000", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000040), 0x1000) 03:36:10 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 852.660794] hfsplus: unable to parse mount options 03:36:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a1}}, 0x8) listen(r1, 0x0) listen(r2, 0x0) 03:36:11 executing program 2: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140), &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 03:36:11 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) flock(r0, 0xfffffffffffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') readv(r1, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 03:36:11 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xd00000000000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nobarrier='nobarrier'}]}) 03:36:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0xca11}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pread64(r0, &(0x7f0000000140)=""/80, 0x50, 0x0) 03:36:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) 03:36:11 executing program 7: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 03:36:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x4058534c, &(0x7f000004d000)={0x80, 0x0, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0x0, "010f010000000100", "88e7ed00000080000000001ef6c699f539e07ca19ab52389861ec9db7fd918e0"}) 03:36:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000005, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 852.881937] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.888442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.897353] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 852.906909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 852.915670] hfsplus: unable to parse mount options 03:36:11 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xd00000000000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nobarrier='nobarrier'}]}) [ 852.939769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 852.968847] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 03:36:11 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x104000, &(0x7f0000000380), &(0x7f0000000300), &(0x7f0000001000), &(0x7f0000000340)) [ 853.006602] IPv6: ADDRCONF(NETDEV_UP): veth2: link is not ready [ 853.015315] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 853.024542] IPv6: ADDRCONF(NETDEV_UP): veth4: link is not ready [ 853.042538] IPv6: ADDRCONF(NETDEV_UP): veth5: link is not ready 03:36:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="6e65742f6970365f6d725f766966001052c79f5e68f227bcf12f5f9ddff97345fbb4ff2fa2d07437ab0101902870b0b7041083ec1f40eb460fb405f46db49e711832e4f8c8df824f8f27f72306250780b217ae6c493a") preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000000)=""/27, 0x1b}], 0x2, 0x13) [ 853.053122] IPv6: ADDRCONF(NETDEV_UP): veth6: link is not ready [ 853.064305] IPv6: ADDRCONF(NETDEV_UP): veth7: link is not ready [ 853.073253] IPv6: ADDRCONF(NETDEV_UP): veth8: link is not ready [ 853.080288] hfsplus: unable to parse mount options [ 853.089545] IPv6: ADDRCONF(NETDEV_UP): veth9: link is not ready [ 853.129198] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 853.135443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.216354] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 853.233579] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 853.241601] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready [ 853.249390] IPv6: ADDRCONF(NETDEV_UP): wlan3: link is not ready [ 853.256999] IPv6: ADDRCONF(NETDEV_UP): wlan4: link is not ready [ 853.264442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 853.273867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 853.282391] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.289422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.305254] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 853.314723] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 853.322896] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 853.330640] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 853.338128] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 853.345423] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 853.352793] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 853.360075] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready 03:36:11 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100), &(0x7f00000002c0)='&]\x00', 0xfffffffffffffffd) keyctl$assume_authority(0x10, r1) 03:36:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af24, &(0x7f0000000040)) 03:36:11 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340), 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000440), &(0x7f0000000480)="01", 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000580)="0238f514e29022ff5fa66351c5d268b4a5e225c45a65836643564f0e3c355d2af99d7c9a712cf4b73f07000000651a84375b6452a23ea586360641700358c85e1c5254f95cc73fe8fed98d56222b5607471d789ed58c15fe9382d8945779eff1f76e000000000000000000000000000400247616e8dafcaa2b9067241bb5f10c21a48800a40fa007d53313b849f8d6060c0c8ca06fc87cd32de8b530f5b4045f481b4f21a373e8cc41bca939863d5cab4eb9cb3fa07b3079d15e3ba011934fb7", 0xc0, r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001e80)={&(0x7f0000001e40)='./file0\x00'}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0xc00) syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001d40)}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002000)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f0000002100)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002280)={@loopback}, &(0x7f00000022c0)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000000300), 0xc, &(0x7f0000002c40)={&(0x7f00000032c0)=ANY=[@ANYRES32], 0x1}}, 0x0) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100), &(0x7f0000000140)="cc", 0x1, r1) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r2, r3, r4}, &(0x7f0000001a00)=""/157, 0x9d, &(0x7f0000000280)={&(0x7f0000001ac0)={'tgr128\x00'}, &(0x7f00000003c0)}) 03:36:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001880)=ANY=[]) r1 = syz_open_dev$admmidi(&(0x7f00000006c0)='/dev/admmidi#\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000006ed"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]}) 03:36:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0xca11}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pread64(r0, &(0x7f0000000140)=""/80, 0x50, 0x0) 03:36:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast1, @mcast1, @loopback, 0x2, 0x1, 0x8, 0x0, 0x0, 0x10000, r3}) io_setup(0x4, &(0x7f00000001c0)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) move_pages(r5, 0x6, &(0x7f0000000200)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000240)=[0x4], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x4) io_getevents(r4, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) close(r2) socket$rds(0x15, 0x5, 0x0) io_submit(r4, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000140), 0x3ab101a9a86b}]) 03:36:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) [ 853.582377] FAT-fs (loop5): bogus number of reserved sectors [ 853.588430] FAT-fs (loop5): Can't find a valid FAT filesystem 03:36:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000002c0)="240000002e0001000080fd940180000020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b625c26e2dae403298ed675", 0x4c}], 0x1}, 0x0) 03:36:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 853.648956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:36:12 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af24, &(0x7f0000000040)) 03:36:12 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000004f0007031dfffd946fa2830020200a0004000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 853.732228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:36:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv6_delroute={0x1c, 0x19, 0x5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) 03:36:12 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af24, &(0x7f0000000040)) 03:36:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0xca11}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pread64(r0, &(0x7f0000000140)=""/80, 0x50, 0x0) [ 853.834783] netlink: 'syz-executor3': attribute type 3 has an invalid length. 03:36:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000002480)=ANY=[@ANYBLOB="7f454c460403010000000000000000000000000000000000000000003800000000000000000000000000200001008708000001000000000001000000000000000000000000000000510b00000000000000000000000000a6fcc0850762c55d60736833610c7e9deb1dae26af5c55907f28432679920a55c2f2d7ce3717671221bbe34b418a2e216b7b26fcdf48d58187bf76ab9a8b1b846cfd1aad4967f8bb758f952603a6b2b35038742c292dda0f4769fee47dbb73da8d3d9a8897fff6191e2732e9cb06634bf1a354329d4409197807adc74f9536bba2fe567fd4954943413aff8d2ca4e67bc211362b179270965fe09160e9bb3fe83d612423fae4bfbaa6cd9b4906d509ae93689d6a319ecd51fd1fbe0b7ccbd768ecfaed2bba804adcaed9452144bc134a5146e805d78500e8b94f0a55c77c99df604a8716c8aa64abb6ffd34c8f6a039301e75cdf89f53694cae7d03ec8036edde91e6f9371944235cb41b4a30c19f739c4bf95c630aa498487593957af40a4f13d1a6ce1ff61e3f95b1d376d951ac78dd9f839e8b63fe1536d237fd1433da3c7ef3ee941797ffa232397a6151d84be0e2eb2c83a4c26ea5f0b59dd78d7f660a58d29200612e51d09817f33e247ad1854c9b8b9560d91dbfa527b78c9d88eb7c41a5157acac4e6827f1746828599774bf1be17890eba87e"], 0x1ee) fcntl$setstatus(r1, 0x4, 0x200060ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) 03:36:12 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100), &(0x7f00000002c0)='&]\x00', 0xfffffffffffffffd) keyctl$assume_authority(0x10, r1) 03:36:12 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af24, &(0x7f0000000040)) 03:36:12 executing program 3: socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2801}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xfeffffff00000000}}]}]}, 0x2c}}, 0x0) [ 854.027955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:36:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r1, 0x0, 0x2, &(0x7f0000000140)=""/44, &(0x7f0000000180)=0x2c) 03:36:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0xca11}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pread64(r0, &(0x7f0000000140)=""/80, 0x50, 0x0) [ 854.226282] netlink: zone id is out of range [ 854.230851] netlink: set zone limit has 4 unknown bytes [ 854.285576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 854.312000] netlink: zone id is out of range [ 854.316509] netlink: set zone limit has 4 unknown bytes 03:36:12 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = dup(r0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x9, 0x7, 0x3, 0x80000001, 0x1ff, 0x300}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x5, 0xbe4feb735e76d526) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0xffffffffffffffff, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 03:36:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x12, 0x0, 0x4, 0x4000000}, 0x2c) 03:36:12 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100), &(0x7f00000002c0)='&]\x00', 0xfffffffffffffffd) keyctl$assume_authority(0x10, r1) 03:36:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xfffffffffffffff7, &(0x7f0000002000/0x2000)=nil, 0x4) 03:36:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) perf_event_open(&(0x7f0000001280)={0x40000000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') 03:36:12 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, 0x0, r0) 03:36:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f00000003c0)=0x67) 03:36:12 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000280), 0x8) listen(r0, 0x0) accept(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, &(0x7f0000000080)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 03:36:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, "105949b481b639195a8a2dd9a89e50d781c8f5c4de2e32000a6e99f963f400"}) 03:36:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000180), 0x0, 0x4c7}], 0x0, &(0x7f0000001380)={[{@rgrplvb='rgrplvb'}, {@spectator='spectator'}]}) 03:36:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x0, 0x80000, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}}) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) 03:36:12 executing program 3: r0 = memfd_create(&(0x7f00000000c0)=',%\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x800000000016, @time={0x0, 0x989680}}) 03:36:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000540000/0x2000)=nil, &(0x7f0000479000/0x4000)=nil, 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0x1, &(0x7f0000000000)) 03:36:13 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00d\x00', 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000300000000000000000073797a5f74756e000000000000000000626a004700000000000000000000000076657468305f746f5f7465616d000000766574683000000000000000000000000180c20000000000000000000000000000000000000000000000a8020000a8020000f80200006270660000000000000000000000000000000000000000000000000000000001100200000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x400) [ 854.678515] attempt to access beyond end of device [ 854.683690] loop2: rw=4096, want=136, limit=4 [ 854.688256] gfs2: error 10 reading superblock 03:36:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="822eb445180900c37d4070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x1}}, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 03:36:13 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 854.769432] attempt to access beyond end of device [ 854.774613] loop2: rw=4096, want=136, limit=4 [ 854.779201] gfs2: error 10 reading superblock 03:36:13 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f00000015c0)=[{&(0x7f00000012c0), 0x2fc}], 0x1) recvfrom(r1, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0xfffffdef, 0x0, 0x0) 03:36:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0000100}]}) 03:36:13 executing program 3: madvise(&(0x7f0000000000/0x4000)=nil, 0x1300000000000000, 0x0) 03:36:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x77, &(0x7f0000000100), 0x0) 03:36:13 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100), &(0x7f00000002c0)='&]\x00', 0xfffffffffffffffd) keyctl$assume_authority(0x10, r1) 03:36:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x0, 0x80000, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}}) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) 03:36:13 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x4) clock_settime(0x6, &(0x7f0000000380)={0x0, 0x1c9c380}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[]) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0505405) [ 855.202014] FAT-fs (loop0): bogus number of reserved sectors [ 855.208277] FAT-fs (loop0): Can't find a valid FAT filesystem 03:36:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x3a}}) close(r2) close(r1) 03:36:14 executing program 2: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file2\x00', 0xfffffffffffffffe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000040)) 03:36:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/2) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1, {{0x7}}}, 0x28) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x10, 0x0, 0x2}, 0x10) 03:36:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x0, 0x80000, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}}) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) 03:36:14 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ifb0\x00', 0x600}) 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in=@multicast2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000410000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000180), 0x8) 03:36:14 executing program 7: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b0000000000008093", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:36:14 executing program 2: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file2\x00', 0xfffffffffffffffe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000040)) 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) 03:36:14 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) recvmsg$kcm(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1, &(0x7f0000000540)=""/207, 0xcf}, 0x0) 03:36:14 executing program 2: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file2\x00', 0xfffffffffffffffe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000040)) 03:36:14 executing program 2: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file2\x00', 0xfffffffffffffffe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000040)) 03:36:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/2) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1, {{0x7}}}, 0x28) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x10, 0x0, 0x2}, 0x10) 03:36:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x16, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) 03:36:14 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_FEATURES(r2, 0xaf02, &(0x7f0000000000)) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) close(r1) 03:36:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x0, 0x80000, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}}) connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80) 03:36:14 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0xf0ffffffffffff, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000032}}}}}, &(0x7f0000000000)) 03:36:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8, 0x9, 0x51}]}}}]}, 0x3c}}, 0x0) [ 856.255505] netlink: 'syz-executor5': attribute type 9 has an invalid length. 03:36:14 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ifb0\x00', 0x600}) 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) 03:36:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000005a40)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) 03:36:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/2) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1, {{0x7}}}, 0x28) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x10, 0x0, 0x2}, 0x10) 03:36:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)='configfs\x00', 0x0, &(0x7f00000005c0)) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x2cc) getdents(r1, &(0x7f0000000140)=""/2, 0x450) 03:36:14 executing program 7: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b0000000000008093", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:36:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b0000000000008093", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:36:14 executing program 2: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x1) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 03:36:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)='configfs\x00', 0x0, &(0x7f00000005c0)) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x2cc) getdents(r1, &(0x7f0000000140)=""/2, 0x450) 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) 03:36:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b0000000000008093", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:36:14 executing program 2: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x1) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 03:36:14 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="01"]}]}, 0x1c}}, 0x0) 03:36:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/2) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1, {{0x7}}}, 0x28) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x10, 0x0, 0x2}, 0x10) 03:36:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)='configfs\x00', 0x0, &(0x7f00000005c0)) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x2cc) getdents(r1, &(0x7f0000000140)=""/2, 0x450) 03:36:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200300000002000900400000000000bc0000000000030006000000000002000000e1000054d81458186fe8b90002000100000000000000080200000000030005000000000002000000e00000010000000000fca0d9"], 0x60}}, 0x0) 03:36:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ifb0\x00', 0x600}) 03:36:15 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b0000000000008093", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:36:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)='configfs\x00', 0x0, &(0x7f00000005c0)) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x2cc) getdents(r1, &(0x7f0000000140)=""/2, 0x450) 03:36:15 executing program 2: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x1) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 03:36:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) lseek(r1, 0x200000000000002, 0x0) 03:36:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af13, &(0x7f0000000440)={0x0, 0xffffffffffffff9c}) 03:36:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000080)}) 03:36:15 executing program 7: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b0000000000008093", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:36:15 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r0, r1) 03:36:15 executing program 2: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") shutdown(r0, 0x1) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 03:36:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0xffffff02}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 03:36:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00\b\x00') readv(r1, &(0x7f0000001680)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x2) [ 856.938834] binder: BC_ATTEMPT_ACQUIRE not supported [ 856.957494] binder: 26766:26769 ioctl c0306201 20000040 returned -22 03:36:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x80800) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000040)) read(r0, &(0x7f0000000100)=""/134, 0x86) 03:36:15 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) prctl$getreaper(0x28, &(0x7f0000000180)) 03:36:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) dup3(r1, r0, 0x0) 03:36:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 857.204893] audit: type=1326 audit(2000000175.523:29): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26797 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 03:36:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ifb0\x00', 0x600}) 03:36:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@srh, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x37, &(0x7f0000e86000), 0x0) 03:36:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='+pids'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2d, 'memory'}]}, 0xe) 03:36:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x8906, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x3}}}}}, &(0x7f0000000040)) 03:36:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140), 0x4) 03:36:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 03:36:15 executing program 7: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b0000000000008093", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:36:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105511, &(0x7f0000000040)={0xa6, 0xffffffffffffff05}) [ 857.286424] audit: type=1326 audit(2000000175.604:30): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26797 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 03:36:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x13, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) 03:36:15 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'eql\x00', 0x401}) flock(0xffffffffffffff9c, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:36:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) 03:36:15 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f0000000180), 0x1) 03:36:15 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000001800), 0x820, &(0x7f0000000300)={[{@data_err_abort='data_err=abort'}]}) 03:36:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x9, &(0x7f0000000200)=""/194, 0xc2) [ 857.529210] hfsplus: invalid uid specified [ 857.533716] hfsplus: unable to parse mount options 03:36:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1, &(0x7f0000001580)}, 0x20048000) sendmsg$rds(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/236, 0xec}], 0x1, &(0x7f0000002480)=ANY=[]}, 0x0) 03:36:15 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x0, &(0x7f0000000280)=""/244, &(0x7f0000000040)=0xfffffd7f) [ 857.591490] hfsplus: invalid uid specified [ 857.595958] hfsplus: unable to parse mount options [ 857.961735] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,,errors=continue [ 857.987188] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,,errors=continue 03:36:16 executing program 7: pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open(&(0x7f0000000180)='./file0/file0\x00', 0x1500, 0x0) 03:36:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0xeca10000}}, 0x10) 03:36:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xc) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x2000400) r1 = socket$inet(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x1d8) 03:36:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) close(r1) 03:36:16 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='gfs2meta\x00', 0x0, 0x0) 03:36:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1, &(0x7f0000001580)}, 0x20048000) sendmsg$rds(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/236, 0xec}], 0x1, &(0x7f0000002480)=ANY=[]}, 0x0) 03:36:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f0000000140)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0xff}, 0x0, @in6=@mcast1, 0x0, 0x2}]}]}, 0xfc}}, 0x0) 03:36:16 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000001800), 0x820, &(0x7f0000000300)={[{@data_err_abort='data_err=abort'}]}) 03:36:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 03:36:16 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070700000ee60000bf150000000000001f650000000000006507000002000000070700004c0000ea0f75000000000000bf5400000000000007040000040000003d43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 858.131226] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,,errors=continue 03:36:16 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x8906, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff89, 0x3}}}}}, &(0x7f0000000040)) 03:36:16 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000001800), 0x820, &(0x7f0000000300)={[{@data_err_abort='data_err=abort'}]}) 03:36:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x0, 0x4000000000000000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66460f388111410f01ca660f01642400c40163d03166ba2100b03cee66baf80cb87873418bef66bafc0cb0b7ee2666460f381d8c210000000066b8df000f00d0dc38470f06", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) read$eventfd(r2, &(0x7f0000000100), 0x8) write$eventfd(r2, &(0x7f0000000040), 0x8) 03:36:16 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0), 0x10) 03:36:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000005e0007031dfffd946fa2830020200a00090003007a1d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 858.299479] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,,errors=continue 03:36:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)) 03:36:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000004000), &(0x7f0000000080)=0xfd24) 03:36:16 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000001800), 0x820, &(0x7f0000000300)={[{@data_err_abort='data_err=abort'}]}) 03:36:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1, &(0x7f0000001580)}, 0x20048000) sendmsg$rds(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/236, 0xec}], 0x1, &(0x7f0000002480)=ANY=[]}, 0x0) 03:36:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") clock_settime(0x20000, &(0x7f0000000000)) 03:36:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000006) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 03:36:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 03:36:16 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0), 0x10) [ 858.525765] gfs2: gfs2 mount does not exist 03:36:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) chdir(&(0x7f0000000180)='./file0\x00') write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xffffffda, 0x2}, 0x10) [ 858.583683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 858.597920] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,,errors=continue 03:36:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fchownat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) 03:36:16 executing program 2: syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 03:36:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x70a3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x400000, 0x20) 03:36:17 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0), 0x10) 03:36:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="0f21e066baf80cb89ce89b85ef66bafc0cb8329c0000efb9800000c00f3235000400000f300f0766baf80cb88014c580ef66bafc0cb8f7ff0000ef66baf80cb8ff57098cef66bafc0cb076eef30f07f2f3670f01390faf6fb6660f388224a3", 0x5f}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_SET_MSRS(r3, 0xc028ae92, &(0x7f0000000100)) 03:36:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000bfcffc), &(0x7f0000000100)=0x305) 03:36:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 858.758098] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 858.855544] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 03:36:17 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffffffffffffe, 0x4) 03:36:17 executing program 5: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000002c0)="626465760026ad9bd98c0a6071b4226e29749b9ae6e47b9053a9538a7c332cc18c958cea5962d1b0a38cec47db3e4af88c0fb0c194bf6a7a5066adefe002ab4f5eb8b80440feaef0ae9f8d64afe500b22ade27e9d288d143a44d4f2ee61d840a019eefb7f6f740c8ffffffff00000000", 0x100000, &(0x7f0000000180)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f00000000c0)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f00000001c0)='mslos\x00', 0x5010, &(0x7f0000000200)) mount(&(0x7f0000000540)='.', &(0x7f00000005c0)='.', &(0x7f0000000580)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000180), 0x80000002) 03:36:17 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x3) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f000003e000/0x4000)=nil) shmat(r0, &(0x7f0000a94000/0x2000)=nil, 0x407002) fcntl$getown(0xffffffffffffffff, 0x9) sched_getparam(0x0, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) 03:36:17 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) 03:36:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80003, 0xc) write(r1, &(0x7f0000000000)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 03:36:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1, &(0x7f0000001580)}, 0x20048000) sendmsg$rds(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/236, 0xec}], 0x1, &(0x7f0000002480)=ANY=[]}, 0x0) 03:36:17 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0), 0x10) 03:36:17 executing program 4: open(&(0x7f0000f9aff8)='./file0\x00', 0x8000000000141046, 0x0) mount(&(0x7f0000ae2d7d)='./file0/file0\x00', &(0x7f0000851000)='./file0\x00', &(0x7f0000a6f000)='nfs4\x00', 0x0, &(0x7f0000000000)='v3') 03:36:17 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7, 0x0) 03:36:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xffffff85}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 03:36:17 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:17 executing program 5: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000002c0)="626465760026ad9bd98c0a6071b4226e29749b9ae6e47b9053a9538a7c332cc18c958cea5962d1b0a38cec47db3e4af88c0fb0c194bf6a7a5066adefe002ab4f5eb8b80440feaef0ae9f8d64afe500b22ade27e9d288d143a44d4f2ee61d840a019eefb7f6f740c8ffffffff00000000", 0x100000, &(0x7f0000000180)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f00000000c0)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f00000001c0)='mslos\x00', 0x5010, &(0x7f0000000200)) mount(&(0x7f0000000540)='.', &(0x7f00000005c0)='.', &(0x7f0000000580)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000180), 0x80000002) 03:36:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'rose0\x00', 0x32}) 03:36:17 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:17 executing program 6: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:17 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002c9000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ab2000/0x2000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000340)=""/4096) pkey_alloc(0x0, 0x0) 03:36:18 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x26, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:36:18 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:18 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x3) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f000003e000/0x4000)=nil) shmat(r0, &(0x7f0000a94000/0x2000)=nil, 0x407002) fcntl$getown(0xffffffffffffffff, 0x9) sched_getparam(0x0, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) 03:36:18 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x2, &(0x7f0000000040), 0x1be) 03:36:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000002c0)="626465760026ad9bd98c0a6071b4226e29749b9ae6e47b9053a9538a7c332cc18c958cea5962d1b0a38cec47db3e4af88c0fb0c194bf6a7a5066adefe002ab4f5eb8b80440feaef0ae9f8d64afe500b22ade27e9d288d143a44d4f2ee61d840a019eefb7f6f740c8ffffffff00000000", 0x100000, &(0x7f0000000180)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f00000000c0)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f00000001c0)='mslos\x00', 0x5010, &(0x7f0000000200)) mount(&(0x7f0000000540)='.', &(0x7f00000005c0)='.', &(0x7f0000000580)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000180), 0x80000002) 03:36:18 executing program 6: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/sockcreate\x00') exit(0x0) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7}, 0x7) 03:36:18 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:18 executing program 3: r0 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="a8", 0x1}], 0x1, 0x80fff) 03:36:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1) 03:36:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000002c0)="626465760026ad9bd98c0a6071b4226e29749b9ae6e47b9053a9538a7c332cc18c958cea5962d1b0a38cec47db3e4af88c0fb0c194bf6a7a5066adefe002ab4f5eb8b80440feaef0ae9f8d64afe500b22ade27e9d288d143a44d4f2ee61d840a019eefb7f6f740c8ffffffff00000000", 0x100000, &(0x7f0000000180)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f00000000c0)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f00000001c0)='mslos\x00', 0x5010, &(0x7f0000000200)) mount(&(0x7f0000000540)='.', &(0x7f00000005c0)='.', &(0x7f0000000580)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000180), 0x80000002) 03:36:18 executing program 3: syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x200) 03:36:18 executing program 6: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:18 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) bind$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @any=0x2000000}, 0x10) 03:36:18 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt(r0, 0xff, 0x7, &(0x7f0000000240), &(0x7f0000000040)=0xffffffffffffffd1) 03:36:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000), 0xc, &(0x7f0000004f80)={&(0x7f0000000280)=ANY=[@ANYBLOB="400002003c00010024000100757365725f6c696e6b7570000000000000000000000000683c2534ba45c6810000040004000800060000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) 03:36:18 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) clone(0x88042408, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000040)) prctl$setendian(0x14, 0x0) 03:36:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) sendto$inet6(r1, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xc686, 0x4) recvmmsg(r1, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x10, &(0x7f0000f5d000), 0x0, &(0x7f0000f62000)=""/89, 0x59}}], 0x61, 0x2041, 0x0) 03:36:19 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x3) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f000003e000/0x4000)=nil) shmat(r0, &(0x7f0000a94000/0x2000)=nil, 0x407002) fcntl$getown(0xffffffffffffffff, 0x9) sched_getparam(0x0, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) 03:36:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xf) 03:36:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd63012c"], &(0x7f00000002c0)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000002c0)='GPL\x00', 0x80000001, 0x3bd, &(0x7f0000000400)=""/187, 0x0, 0x0, [], 0x0, 0xf}, 0x48) 03:36:19 executing program 0: clone(0x20000000, &(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0)) clone(0x0, &(0x7f0000000000), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$intptr(0x24, 0xf91) 03:36:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/sockcreate\x00') exit(0x0) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7}, 0x7) 03:36:19 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f000061d000)="020008000000002000005462fa01a55eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c070000000000000098fc74e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) close(r0) 03:36:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617", 0x20}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:36:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) 03:36:19 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x0, 0x0, &(0x7f0000000000), 0x1000008, &(0x7f0000000180)) 03:36:19 executing program 0: clone(0x20000000, &(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0)) clone(0x0, &(0x7f0000000000), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$intptr(0x24, 0xf91) 03:36:19 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) clone(0x88042408, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000040)) prctl$setendian(0x14, 0x0) 03:36:19 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x3) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f000003e000/0x4000)=nil) shmat(r0, &(0x7f0000a94000/0x2000)=nil, 0x407002) fcntl$getown(0xffffffffffffffff, 0x9) sched_getparam(0x0, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) 03:36:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="66b9800000c00f326635000800000f300f2325363e0f01cb66b9800000c00f326635002000000f30018c448b2e0f0171860fc72cba4200ed67f26cd0bf9f30", 0x3f}], 0x1, 0x0, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4400, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r4}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:36:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617", 0x20}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) [ 861.363324] device veth0_to_bridge entered promiscuous mode [ 861.385049] device veth0_to_bridge left promiscuous mode 03:36:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x20000892}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/164, 0xa4}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x5, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 03:36:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617", 0x20}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:36:19 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f000061d000)="020008000000002000005462fa01a55eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c070000000000000098fc74e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) close(r0) 03:36:19 executing program 0: clone(0x20000000, &(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0)) clone(0x0, &(0x7f0000000000), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$intptr(0x24, 0xf91) 03:36:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r1, 0x0, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)="c646834eb9b6c74628dfecba120ff32140ec86206a889b34b72212a2b101e617", 0x20}], 0x1) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 03:36:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_NUM(r2, 0xaf01, &(0x7f0000000180)) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)) close(r1) 03:36:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/sockcreate\x00') exit(0x0) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7}, 0x7) 03:36:21 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x1, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x12}) 03:36:21 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f000061d000)="020008000000002000005462fa01a55eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c070000000000000098fc74e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) close(r0) 03:36:21 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) 03:36:21 executing program 0: clone(0x20000000, &(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0)) clone(0x0, &(0x7f0000000000), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$intptr(0x24, 0xf91) 03:36:21 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) clone(0x88042408, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000040)) prctl$setendian(0x14, 0x0) 03:36:21 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000068f000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xcd, 0x401, 0x0) 03:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000c) 03:36:21 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2fa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}) writev(r0, &(0x7f00000000c0), 0x10000000000000a4) 03:36:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffd) 03:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000c) 03:36:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000380), 0x80003) 03:36:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400), 0x0) accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)}], 0x1, 0x0) 03:36:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffd) 03:36:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000c) 03:36:21 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f000061d000)="020008000000002000005462fa01a55eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c070000000000000098fc74e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) close(r0) 03:36:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/sockcreate\x00') exit(0x0) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7}, 0x7) 03:36:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400), 0x0) accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)}], 0x1, 0x0) 03:36:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000380), 0x80003) 03:36:22 executing program 1: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffd) 03:36:22 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="0a5cc80700315f8571") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0x0, 0x20d, &(0x7f0000000180)="041e1ec0d175172ace318ad6f9407987458226282c865c23398aafe0fb2d90ad26ea32894dee13fc5434f2e6f85298c30cacf05acecee46a5ca41cfd7def7f2cd1934d92ad94bcaa4319063200b25111cae93a", &(0x7f0000000380), 0x53}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="66b8860000000f23c80f21f866350c0020000f23f8660f2b6de1f30fd6ee66b9670900000f32d8d383910040860f16dc0fc76e00ba610066b80000000066efbaf80c66b841a3308666efbafc0cec", 0x4e}], 0x1, 0x0, &(0x7f0000000080), 0x34) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[]}}, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000c) 03:36:22 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x16) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 03:36:22 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) clone(0x88042408, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000040)) prctl$setendian(0x14, 0x0) 03:36:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0x10) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 03:36:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400), 0x0) accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)}], 0x1, 0x0) 03:36:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x19, &(0x7f0000000a40)={'IDLETIMER\x00'}, &(0x7f0000000a80)=0x1e) 03:36:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000380), 0x80003) 03:36:22 executing program 1: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffd) 03:36:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0xfa) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6, 0x3500}}, 0xe8) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) 03:36:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400), 0x0) accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)}], 0x1, 0x0) 03:36:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="82780000260f017731f3d87e0b0f20e06635000020000f22e066b9800000c00f326635002000000f30640f02d766b8008000000f23d80f21f86635400000f00f23f8db13b85f078ee82e0f01cf"}], 0xaaaaaaaaaaaac60, 0x0, &(0x7f0000000100), 0x330) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x0, 0x101}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) 03:36:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000000c0)=0x4e, 0x4) sendmmsg(r2, &(0x7f0000000000), 0x33, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local, 'veth1_to_bridge\x00'}}, 0x703000) 03:36:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read(r1, &(0x7f0000000040)=""/41, 0x29) setsockopt$inet_mreqsrc(r2, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x200000)=nil, 0x200000}) 03:36:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000380), 0x80003) 03:36:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) 03:36:23 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x0, "1059493481b639195a8a2dd9ee3ff7e9c50e58fe75430138d7f00cfe322bea8af5c4de2e32bb0a6e99f963f4"}) 03:36:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x30, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}}, 0x0) 03:36:23 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040), &(0x7f0000000540)="9b106336e716b379652c6939d4008405e0e6e66636bec02dc697490300000000000000fdc4ae44288a7f4bb2255c38fa0350273313af42d1fdd7dacd6650d7a0cf5a5a0fe0855796fbbfa7f2ac994468a56ecd90e06d84cad25f4a8ca8bee8f5f12b57e5178b024d12ee71b71c18407d1e5ba65297b413f982d5bc9475c5f4722176fa107c707ca397dc285f29a07fdb578144269db12a6f86e04708eb3c28b20b1cc29ff9eadfc4469896a42974ac334794bb7189ad7282504406360f0e5b94ac5c6c530ae5a2d6f60a86654e41d857288f2d495496ce24fe722283e399f60362d78d7e8347391d14348109469c3cd11eb4100e9cfffd109aecd14add3c21c96c3c20d3798de35de6640bf944e42771b0defddc0a140c7c1701293ee5205ebdd71504bf719100e65940169eb5c31c727950d9fdcba1fed589ef24cccf9677f710a09c5485aba81c73b11b54fbb10a73b7f9bcf45c341860a7d03af9d32253066c5ea1de60a677eb330e6ee4f01587aceef64d26a2144d451d425f85b0ba28cfaa785c262ab453ebdbb61dfabc99a081f909fcf99cfbde618d441555927261aeefe3a43310c02d01c6abeaf5867cc35bde39221e9b49042b09bcca5903c5e68a195031a240cd8c4ee91fa0cabf4e8f0b785b69b3a8bed47a86f61d1c157e94cf15b9c8718c0a648182071122405f53603b00ca007783faae4b2428cc2c8afa343a507a473dca5e9b92ecd9100feb053f7b3de329a92197e4c0cd1d960785a57c966340870e5b557dcb4894e78692777f91cc734bf1975eb54ab1788ff960a55ae6304801049114e3e7e33a73595d6499010e1bbe6a36c69db4f7ee353af932a6831b2fa30a10ae7d8c100a0efa572733ec52c5d89d20d43d827ce2d026e8b2677319f411d5e63dd7c469f484e1e9b42c1fd2ac6fd66d8650c3b583844a933970db5418dc7ef392d9213437c1eed6db061dbc7485a0948b0060103893b46e72b587361f3aa99e96171a7b73e671444204e5c0a2c95753c60e23a5b41590b3c1b082726ce62425626c57ae5646bc955aec5059e06523b77aea62ca10fc5f69125e7dfd9fc3ea56474146e1c85241d8be41c9f6c104f4b04caee09822e81f6b80b29be890ee0f4bf88eee47326cd7dfdccd0cc3ac951edd7f54f0eecc78817c96da571f4bf6932ab573e9cbbbbf2c3631c40ef73fe50102a1aed0b92d18b07a27d1d521e2944b4d94ad01bff1331a626ae28481f73ab8168dc57eb64ff02f5915fe48f112366a9d072e7e991b9793425b2cb84d17c0b2d3bcc6c7e935c41a58e0c5ccbc26321b7e89fa01de0a7e365406f06997487511965339aa5b2e0ae341dd4765bf9bd42c1880bf0ecff428a83b1a60acd45cc14ff7e3b4597a0024a09a13ed7d42e6cd7eaa3fa1c441a070ae3035bbb97e6b08e20287f0b16c03e8b91e4449cff58df02651b840964cbf967922c4f0989f1c3b0cef8251fe103bcc172763d791fb9902d180fe35ce8063e137ae77f80e059c39ace4c57f850b6448ea6baff287d435389f825e025c01100cd7d5ddd2da211fc27a8ed800971298e84a276b6c14893e7daf5f9e349ba9c93d04b6baa20eb84b8bb6e332547a1f56f8b8bfde0146c50905960e94580e139dd683a7d9a7cbbb3d03cec85351e0f72814f8399c415c014e1b51c6b7a4a9025d8f227ff2e1d4e87a9168e11c3df2ef14457868fb8a0b993b5385c014e04a", 0x4c9, 0xfffffffffffffffd) 03:36:23 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000d00)='9p\x00', 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000770100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:36:23 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x92) getpgid(0xffffffffffffffff) getresuid(&(0x7f0000003d00), &(0x7f0000003d40), &(0x7f0000003d80)) getresgid(&(0x7f0000003dc0), &(0x7f0000003e00), &(0x7f0000003e40)) getpgid(0x0) lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004080)={{{@in=@remote, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000004180)=0xe8) getgid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000041c0)) getresuid(&(0x7f0000004200), &(0x7f0000004240), &(0x7f0000004280)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000042c0), &(0x7f0000004300)=0xc) getresuid(&(0x7f0000004340), &(0x7f0000004380), &(0x7f00000043c0)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000044c0), &(0x7f0000004500)=0xc) getpgrp(0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000004800)=[{&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a40)}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x41) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x1}) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x400, &(0x7f00000000c0)=0x2) 03:36:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3140, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000200)}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000003c0)=@can, 0x1, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 03:36:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) dup3(r0, r1, 0x0) [ 865.425924] FAULT_FLAG_ALLOW_RETRY missing 30 [ 865.431137] CPU: 1 PID: 27304 Comm: syz-executor0 Not tainted 4.18.0+ #197 [ 865.438171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.447542] Call Trace: [ 865.450160] dump_stack+0x1c9/0x2b4 [ 865.453810] ? dump_stack_print_info.cold.2+0x52/0x52 [ 865.459018] ? kasan_check_write+0x14/0x20 [ 865.463288] ? do_raw_spin_lock+0xc1/0x200 [ 865.467547] handle_userfault.cold.33+0x43/0x52 [ 865.472260] ? userfaultfd_ioctl+0x5420/0x5420 [ 865.476858] ? trace_hardirqs_on+0x10/0x10 [ 865.481116] ? print_usage_bug+0xc0/0xc0 [ 865.485193] ? print_usage_bug+0xc0/0xc0 [ 865.489290] ? userfaultfd_ctx_put+0x810/0x810 [ 865.493959] ? __lock_acquire+0x7fc/0x5020 [ 865.498212] ? graph_lock+0x170/0x170 [ 865.502048] ? find_held_lock+0x36/0x1c0 [ 865.506133] ? lock_downgrade+0x8f0/0x8f0 [ 865.510299] ? kasan_check_read+0x11/0x20 [ 865.514459] ? do_raw_spin_unlock+0xa7/0x2f0 [ 865.518881] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 865.523481] ? kasan_check_write+0x14/0x20 [ 865.527730] ? do_raw_spin_lock+0xc1/0x200 [ 865.531982] __handle_mm_fault+0x38ae/0x4360 [ 865.536413] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 865.541295] ? graph_lock+0x170/0x170 [ 865.545143] ? lock_downgrade+0x8f0/0x8f0 [ 865.549306] ? kasan_check_read+0x11/0x20 [ 865.553469] ? rcu_is_watching+0x8c/0x150 [ 865.557627] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 865.562308] ? handle_mm_fault+0x8c4/0xc80 [ 865.566653] handle_mm_fault+0x53e/0xc80 [ 865.570729] ? __handle_mm_fault+0x4360/0x4360 [ 865.575324] ? find_vma+0x34/0x190 [ 865.578974] __do_page_fault+0x620/0xe50 [ 865.583069] ? mm_fault_error+0x380/0x380 [ 865.587227] ? ip_options_get_from_user+0x38/0xf0 [ 865.592092] ? graph_lock+0x170/0x170 [ 865.595902] ? __sys_setsockopt+0x1c5/0x3b0 [ 865.600228] ? __x64_sys_setsockopt+0xbe/0x150 [ 865.604839] ? do_syscall_64+0x1b9/0x820 [ 865.608918] do_page_fault+0xf6/0x8c0 [ 865.612731] ? vmalloc_sync_all+0x30/0x30 [ 865.616897] ? find_held_lock+0x36/0x1c0 [ 865.620986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 865.625844] page_fault+0x1e/0x30 [ 865.629308] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 865.634936] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 865.653845] RSP: 0018:ffff8801c8ed7700 EFLAGS: 00010203 [ 865.659217] RAX: 0000000000000004 RBX: 000000000000000c RCX: 0000000000000001 [ 865.666492] RDX: 0000000000000004 RSI: 0000000020013ff4 RDI: ffff8801ab30b9a0 [ 865.673768] RBP: ffff8801c8ed7738 R08: ffffed0035661736 R09: ffffed0035661734 [ 865.681042] R10: ffffed0035661735 R11: 0000000000000003 R12: 0000000020014000 [ 865.688338] R13: 0000000020013ff4 R14: ffff8801ab30b9a0 R15: 00007ffffffff000 [ 865.695674] ? _copy_from_user+0x10d/0x150 [ 865.699921] ip_options_get_from_user+0x8d/0xf0 [ 865.704627] do_ip_setsockopt.isra.13+0x1ba6/0x3e70 [ 865.709653] ? ip_ra_control+0x640/0x640 [ 865.713738] ? find_held_lock+0x36/0x1c0 [ 865.717814] ? lock_downgrade+0x8f0/0x8f0 [ 865.721974] ? kasan_check_read+0x11/0x20 [ 865.726128] ? rcu_is_watching+0x8c/0x150 [ 865.730281] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 865.734968] ? __fget+0x4d5/0x740 [ 865.738434] ? ksys_dup3+0x690/0x690 [ 865.742177] ? lock_downgrade+0x8f0/0x8f0 [ 865.746354] ? kasan_check_read+0x11/0x20 [ 865.750504] ? do_raw_spin_unlock+0xa7/0x2f0 [ 865.754923] ? __fget_light+0x2f7/0x440 [ 865.758897] ? do_raw_spin_lock+0xc1/0x200 [ 865.763138] ? fget_raw+0x20/0x20 [ 865.766603] ? _raw_spin_unlock+0x22/0x30 [ 865.770757] ? kcov_ioctl+0x56/0x1f0 [ 865.774493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 865.780156] ip_setsockopt+0x4c/0x140 [ 865.783965] tcp_setsockopt+0x93/0xe0 [ 865.787778] sock_common_setsockopt+0x9a/0xe0 [ 865.792299] __sys_setsockopt+0x1c5/0x3b0 [ 865.796455] ? kernel_accept+0x310/0x310 [ 865.800530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 865.806597] ? fput+0x130/0x1a0 [ 865.809889] __x64_sys_setsockopt+0xbe/0x150 [ 865.814404] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 865.819428] do_syscall_64+0x1b9/0x820 [ 865.823315] ? finish_task_switch+0x1d3/0x870 [ 865.828314] ? syscall_return_slowpath+0x5e0/0x5e0 [ 865.833250] ? syscall_return_slowpath+0x31d/0x5e0 [ 865.838185] ? __switch_to_asm+0x34/0x70 [ 865.842250] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 865.847626] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 865.852482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 865.857695] RIP: 0033:0x457089 03:36:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000380), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@ipv4_newrule={0x34, 0x18, 0x703, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'erspan0\x00'}]}, 0x34}}, 0x0) [ 865.860890] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 865.879793] RSP: 002b:00007f5ad4f32c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 865.887506] RAX: ffffffffffffffda RBX: 00007f5ad4f336d4 RCX: 0000000000457089 [ 865.894773] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 865.902040] RBP: 0000000000930140 R08: 000000000000000c R09: 0000000000000000 [ 865.909307] R10: 0000000020013ff4 R11: 0000000000000246 R12: 00000000ffffffff [ 865.916585] R13: 00000000004d4d90 R14: 00000000004c91cf R15: 0000000000000001 03:36:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3140, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000200)}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000003c0)=@can, 0x1, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 03:36:24 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x92) getpgid(0xffffffffffffffff) getresuid(&(0x7f0000003d00), &(0x7f0000003d40), &(0x7f0000003d80)) getresgid(&(0x7f0000003dc0), &(0x7f0000003e00), &(0x7f0000003e40)) getpgid(0x0) lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004080)={{{@in=@remote, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000004180)=0xe8) getgid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000041c0)) getresuid(&(0x7f0000004200), &(0x7f0000004240), &(0x7f0000004280)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000042c0), &(0x7f0000004300)=0xc) getresuid(&(0x7f0000004340), &(0x7f0000004380), &(0x7f00000043c0)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000044c0), &(0x7f0000004500)=0xc) getpgrp(0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000004800)=[{&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a40)}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x41) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x1}) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x400, &(0x7f00000000c0)=0x2) 03:36:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) wait4(r2, &(0x7f0000000000), 0x0, 0x0) 03:36:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3140, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000200)}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000003c0)=@can, 0x1, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 03:36:24 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x92) getpgid(0xffffffffffffffff) getresuid(&(0x7f0000003d00), &(0x7f0000003d40), &(0x7f0000003d80)) getresgid(&(0x7f0000003dc0), &(0x7f0000003e00), &(0x7f0000003e40)) getpgid(0x0) lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004080)={{{@in=@remote, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000004180)=0xe8) getgid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000041c0)) getresuid(&(0x7f0000004200), &(0x7f0000004240), &(0x7f0000004280)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000042c0), &(0x7f0000004300)=0xc) getresuid(&(0x7f0000004340), &(0x7f0000004380), &(0x7f00000043c0)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000044c0), &(0x7f0000004500)=0xc) getpgrp(0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000004800)=[{&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a40)}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x41) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x1}) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x400, &(0x7f00000000c0)=0x2) 03:36:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) dup3(r0, r1, 0x0) 03:36:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) dup3(r0, r1, 0x0) 03:36:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380), 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f00005fafe4)=@in6={0xa, 0x0, 0x0, @loopback}, 0x259, &(0x7f00008e3fb8)}}, {{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000632000), 0x222}}], 0x2, 0x0) 03:36:24 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000d00)='9p\x00', 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000770100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:36:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) wait4(r2, &(0x7f0000000000), 0x0, 0x0) 03:36:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3140, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000200)}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000003c0)=@can, 0x1, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 03:36:24 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x92) getpgid(0xffffffffffffffff) getresuid(&(0x7f0000003d00), &(0x7f0000003d40), &(0x7f0000003d80)) getresgid(&(0x7f0000003dc0), &(0x7f0000003e00), &(0x7f0000003e40)) getpgid(0x0) lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004080)={{{@in=@remote, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000004180)=0xe8) getgid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000041c0)) getresuid(&(0x7f0000004200), &(0x7f0000004240), &(0x7f0000004280)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000042c0), &(0x7f0000004300)=0xc) getresuid(&(0x7f0000004340), &(0x7f0000004380), &(0x7f00000043c0)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000044c0), &(0x7f0000004500)=0xc) getpgrp(0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000004800)=[{&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a40)}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x41) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x1}) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x400, &(0x7f00000000c0)=0x2) 03:36:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) dup3(r0, r1, 0x0) 03:36:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) dup3(r0, r1, 0x0) 03:36:24 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005a0007031dfffd946f61830020200a00090003fcff1c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:36:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800000002020654000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 03:36:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) dup3(r0, r1, 0x0) 03:36:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) wait4(r2, &(0x7f0000000000), 0x0, 0x0) 03:36:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) 03:36:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) dup3(r0, r1, 0x0) 03:36:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 03:36:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) wait4(r2, &(0x7f0000000000), 0x0, 0x0) 03:36:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 03:36:25 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c0d62edaf4489bd3f62836f9174bc7d42465ad6ccd5af7f4cc3b4aa6ee6c809ea4d636d4a88662b231e2d1d4093d08018d98a854b606aa45713c442b18ca84"}, 0x80}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0xd, @dev}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 03:36:25 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r1, 0x407, 0x40000000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") clone(0x0, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)) dup2(r0, r2) 03:36:25 executing program 0: r0 = socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)) 03:36:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 03:36:25 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000d00)='9p\x00', 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000770100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:36:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924924f0, 0x0) 03:36:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) 03:36:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x5ae8, 0x0, [{}, {}, {}, {0x0, 0x8000a0}]}}) 03:36:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 03:36:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) 03:36:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xe}]}, 0x18}}, 0x0) 03:36:25 executing program 0: r0 = socket$inet(0x10, 0x3, 0x40000000000010) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/71, 0x47}}], 0x1, 0x0, &(0x7f0000001b80)) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 03:36:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=0xffffffffffffff9c) 03:36:25 executing program 2: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7f, 0x4002) 03:36:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000c95000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 03:36:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) [ 867.087969] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 03:36:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000447000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000997000/0x3000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) 03:36:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="940fa2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:25 executing program 0: r0 = socket$inet(0x10, 0x3, 0x40000000000010) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/71, 0x47}}], 0x1, 0x0, &(0x7f0000001b80)) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 03:36:25 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000d00)='9p\x00', 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000770100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:36:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setrlimit(0xc, &(0x7f0000000000)={0x0, 0xfffffffffffffffa}) 03:36:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bridge_slave_1\x00', 0xb000}) 03:36:25 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000), 0xc, &(0x7f0000dd0ff0)={&(0x7f0000d3dc98)={0x14, 0x17, 0xa, 0x1}, 0x14}}, 0x0) 03:36:25 executing program 5: close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=""/157, &(0x7f00000005c0)=0x9d) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 03:36:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000447000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000997000/0x3000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) 03:36:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100)=0x10000000, 0x4) 03:36:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x2000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040), 0x4) 03:36:25 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)) 03:36:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0xbd}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1) [ 867.646296] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 03:36:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bcsf0\x00') 03:36:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x3) 03:36:26 executing program 0: r0 = socket$inet(0x10, 0x3, 0x40000000000010) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/71, 0x47}}], 0x1, 0x0, &(0x7f0000001b80)) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 03:36:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000447000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000997000/0x3000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) 03:36:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x40000004005, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x1, 0x0, r1, &(0x7f0000000000), 0xfe00}]) 03:36:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'team0\x00'}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='yam0\x00', 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={[], [], @loopback}, 0x0, r1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@local, 0x0, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={"7465616d300000ffffffc000", 0xc209}) [ 867.874525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 03:36:26 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_stats={0x49}}) close(r2) close(r0) 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clone(0x20000000, &(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0)) clone(0x0, &(0x7f0000000000), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) memfd_create(&(0x7f0000000040)='.(posix_acl_accessself+\x00', 0x0) prctl$intptr(0x24, 0xf91) 03:36:26 executing program 0: r0 = socket$inet(0x10, 0x3, 0x40000000000010) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/71, 0x47}}], 0x1, 0x0, &(0x7f0000001b80)) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 03:36:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bcsf0\x00') 03:36:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x101}, 0x14}}, 0x0) 03:36:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000447000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000997000/0x3000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) [ 868.402389] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 03:36:26 executing program 7: unshare(0x8020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)={0x1}, 0x8, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x3}, 0x8, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setns(r0, 0x0) 03:36:26 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000000040)={@ipv4={[], [], @rand_addr}}, &(0x7f0000000000)=0x1) 03:36:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x34000}], 0x1, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 03:36:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x101}, 0x14}}, 0x0) 03:36:26 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000000", 0x38}]) 03:36:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x1200}) 03:36:26 executing program 6: socketpair(0x18, 0x0, 0x0, &(0x7f0000000100)) 03:36:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bcsf0\x00') 03:36:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x101}, 0x14}}, 0x0) 03:36:26 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f00000000c0)={0x1}) 03:36:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x1200}) 03:36:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x101}, 0x14}}, 0x0) 03:36:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) 03:36:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x1200}) 03:36:27 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f00000000c0)={0x1}) 03:36:27 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@loopback}, {@in6, 0x0, 0x3c}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}}, 0x0) [ 868.899848] mip6: mip6_destopt_init_state: state's mode is not 2: 0 03:36:27 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="0200a9ffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 03:36:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bcsf0\x00') [ 869.046075] loop7: p1 [ 869.048689] loop7: partition table partially beyond EOD, truncated [ 869.090328] loop7: p1 start 1 is beyond EOD, truncated [ 869.132760] loop7: p1 [ 869.135428] loop7: partition table partially beyond EOD, truncated [ 869.142678] loop7: p1 start 1 is beyond EOD, truncated 03:36:27 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f00000000c0)={0x1}) 03:36:27 executing program 3: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) chmod(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) dup2(r0, r1) 03:36:27 executing program 5: prctl$intptr(0x1c, 0x7) setuid(0x0) 03:36:27 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)='fuseblk\x00', 0x0, &(0x7f0000000600)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa00000000000000ffffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c75737465720000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a00000004155444954000000000000000000000000000000000000000000000000000000080000000000003d0000000000000000"]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) 03:36:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x1200}) 03:36:27 executing program 1: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 03:36:27 executing program 7: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/91, 0xb9f50561a5ce80e0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[]) getdents64(r0, &(0x7f0000000100), 0x219) 03:36:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x8}]}}}]}, 0x3c}}, 0x0) 03:36:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) 03:36:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="ec3159a92b13"], 0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7f}) 03:36:27 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f00000000c0)={0x1}) 03:36:27 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @multicast2, {[@timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {[@empty]}, {}, {}]}, @rr={0x7, 0x1b, 0x0, [@dev, @loopback, @rand_addr, @multicast1, @remote, @remote]}]}}, @icmp=@address_request}}}}, &(0x7f0000000080)) 03:36:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) epoll_create1(0x0) 03:36:27 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045730, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) 03:36:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000002980)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000280)=ANY=[]) 03:36:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x1e, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, 0x90) close(r2) close(r1) 03:36:27 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000440), &(0x7f00000004c0)}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) rt_tgsigqueueinfo(r0, r0, 0x1f, &(0x7f00000005c0)={0x17, 0xff, 0xdade, 0x8}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000500), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @rand_addr=0x7112}, @in={0x2, 0x4e24, @broadcast}], 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x11, 0xb, 0x4, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x20000000000, 0x401, 0x10001, 0x9, 0x1, 0x1, 0xbaa60000, {0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x401, 0x7ff, 0x2, 0x0, 0xffffffffffff8001}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000003c0)={r5, 0xfffffffffffffff9}, &(0x7f0000000400)=0x8) bind$inet(r3, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) write$binfmt_misc(r6, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x1075) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x5) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000640), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x163) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000100), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0xfe6b, 0x4008000, 0x0, 0xb4) 03:36:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x2}}) close(0xffffffffffffffff) 03:36:27 executing program 0: r0 = socket(0x10, 0x4000000000000003, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="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") sendfile(r0, r1, &(0x7f0000000200), 0x100000001) 03:36:27 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x80) msgrcv(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000001d694f31a98d14af4e8100000000170edd3b2d4b39182b9bd1ee6429964a4e1503a7fa77228211ee2ff3b8c263de320b6eb409000000b106c561ad380c44"], 0x1, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20040, 0x0) bind$llc(r3, &(0x7f0000000240)={0x1a, 0x206, 0x3, 0x401, 0xefb, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r4}) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) 03:36:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000edff0)={&(0x7f0000000140)=@bridge_getneigh={0x28, 0x1e, 0xa21, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 03:36:27 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000000000005) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 869.726278] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 [ 869.905723] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 03:36:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000480)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:36:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$HDIO_GETGEO(r1, 0x127c, &(0x7f0000000340)) 03:36:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f0000000680)='\x00', 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000040), &(0x7f0000000280), 0x182, r1) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='u', 0x1, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'rmd256-generic\x00'}}) 03:36:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/84, &(0x7f00000000c0)=0x54) 03:36:28 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000001240), 0xc, &(0x7f00000011c0)={&(0x7f0000001200)=@ipv4_getroute={0x1c, 0x1a, 0x204db6558f819705}, 0x1c}}, 0x0) 03:36:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x40000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f000095cffe)={r2}, &(0x7f000095c000)=0x8) 03:36:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffff7fffd) 03:36:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$HDIO_GETGEO(r1, 0x127c, &(0x7f0000000340)) 03:36:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=@newspdinfo={0x30, 0x24, 0x1, 0x0, 0x0, 0x0, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x0, 0x0, @in6=@mcast2}}]}, 0x30}}, 0x0) 03:36:28 executing program 3: pipe(&(0x7f0000000040)={0x0, 0x0}) fcntl$setpipe(r0, 0x407, 0xdb45aa1) fcntl$setpipe(r0, 0x407, 0x0) 03:36:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000002]}) 03:36:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$HDIO_GETGEO(r1, 0x127c, &(0x7f0000000340)) 03:36:28 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) dup3(r0, r1, 0x0) 03:36:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = memfd_create(&(0x7f00000001c0)='ah\x00', 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x2, 0x4) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000), 0xffe3) 03:36:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_stats={0x6}}) close(r2) close(r1) 03:36:28 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 03:36:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x9, &(0x7f0000000100)="b6f41c51", 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socketpair$inet(0x1e, 0x80002, 0x0, &(0x7f0000000000)={0x0, 0x0}) 03:36:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$HDIO_GETGEO(r1, 0x127c, &(0x7f0000000340)) 03:36:28 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f00000000c0)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000003980), 0x0, &(0x7f0000000480)}, 0x0) 03:36:28 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) sendmsg(r1, &(0x7f0000f36fc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000001380), 0x0, &(0x7f0000d19000)}, 0x0) 03:36:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x80000001}, 0x10) close(r1) 03:36:28 executing program 5: unshare(0x2000400) r0 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 03:36:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote, 0x0, 0x1, [@multicast1]}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 03:36:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:36:28 executing program 2: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') rename(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000180)='./file1\x00') creat(&(0x7f0000000040)='./control/file0\x00', 0x0) dup2(r0, r1) 03:36:28 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x6, 0x0, 0x707000}}) 03:36:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808f00003d88c2000010ae1b"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x1ad, 0x200002, &(0x7f0000000c40)={0x77359400}) 03:36:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x200000039, 0x0, 0xf000) 03:36:29 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x40046104, &(0x7f0000000100)) 03:36:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0xffffffffffffff07, './file0'}]}}, 0xa6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000680)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@version_u='version=9p2000.u'}, {@nodevmap='nodevmap'}, {@uname={'uname'}}, {@posixacl='posixacl'}, {@cache_mmap='cache=mmap'}]}}) 03:36:29 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 03:36:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 03:36:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 03:36:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x121080) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x1000000000000) clone(0x80008000, &(0x7f0000001080)="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", &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)="da4e95d81e83be97314b5c4139e6f3683ed7e6a0a8fde258ab77130337dd1c80cdab5f848212ef") ioctl$int_out(r0, 0x5460, &(0x7f0000000640)) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x412, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000300)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x894, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000036e28e64ddb26503000c0000000000000000009500003844e2d8e1232068d4071a9ca40000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000cc0)=""/251, 0x0, 0x0, [], 0x0, 0x1}, 0x48) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000009c0)={{0x2, 0x4e20, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4, {0x2, 0x4e24, @loopback}, 'syzkaller0\x00'}) sendmsg$nl_netfilter(r0, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x15d}, 0x1, 0x0, 0x0, 0x20400095}, 0x40010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000940)=0x9) sendmsg$nl_netfilter(r3, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000800)={0x4, [0x6, 0xfff, 0xfffffffffffffffc, 0x100]}, 0xc) arch_prctl(0x1004, &(0x7f0000000700)="e45f5e9d151aebc80818259f5a4e20d009bf88f15d61eb13649980ab3b3536755cf3cf4bfb30d483b94ebbcb340b27bb3c2f49bf6b101e16c2389e8ef8b0a468217c0294e3604303f90967b16c93207a041638221ed37566096a06cf57e0fbf165e410775585b022172664d03066f231396854445ab8bd") syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0x9, 0xc000) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000680)=0x3) syz_open_dev$ndb(&(0x7f00000007c0)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc0405519, &(0x7f0000001000)) 03:36:29 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 03:36:29 executing program 2: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') rename(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000180)='./file1\x00') creat(&(0x7f0000000040)='./control/file0\x00', 0x0) dup2(r0, r1) 03:36:29 executing program 7: setrlimit(0x7, &(0x7f0000a9cff8)) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') 03:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000100)={0x1}) 03:36:29 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 03:36:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 03:36:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 03:36:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x1000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}}, 0x0) 03:36:29 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2), 0xfff6) fallocate(r2, 0x8, 0x0, 0x8000) creat(&(0x7f0000000100)='./file0\x00', 0x0) dup2(r0, r1) 03:36:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 03:36:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 03:36:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 03:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x40000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r2, 0x1}, {r0}], 0x3, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) 03:36:29 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000680)="025cc80700145f8f764070") perf_event_open(&(0x7f000000a000)={0x5, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:36:29 executing program 2: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') rename(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000180)='./file1\x00') creat(&(0x7f0000000040)='./control/file0\x00', 0x0) dup2(r0, r1) [ 871.482673] xprt_adjust_timeout: rq_timeout = 0! 03:36:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x2, 0x6, 0x0, 0x200000000000, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x40, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 03:36:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 03:36:29 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 03:36:29 executing program 5: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000fef000)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, &(0x7f0000437000), 0x0, &(0x7f000056cda0)=[{0x28, 0x29, 0x2, "1d1a2d4ba2f2fffffffffffffffd060008"}], 0x28}, 0x0) 03:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x40000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r2, 0x1}, {r0}], 0x3, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) 03:36:29 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000c200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:36:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0xab07, &(0x7f0000000140)) close(r1) 03:36:29 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) clone(0x0, &(0x7f0000000180), &(0x7f0000001300), &(0x7f00000011c0), &(0x7f0000000280)) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) wait4(0x0, &(0x7f0000000180), 0xa0000000, &(0x7f00000001c0)) 03:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x40000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r2, 0x1}, {r0}], 0x3, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) 03:36:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 03:36:29 executing program 2: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') rename(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000180)='./file1\x00') creat(&(0x7f0000000040)='./control/file0\x00', 0x0) dup2(r0, r1) 03:36:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000002c0)}, 0x0) 03:36:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x40000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r2, 0x4}, {r2, 0x1}, {r0}], 0x3, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) 03:36:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) read(r1, &(0x7f0000000040)=""/27, 0x1b) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) 03:36:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='comm\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000540)=""/133, 0x85}], 0x2, 0x0) 03:36:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040), 0x4) 03:36:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x1, 0x0, &(0x7f00000002c0)="9f"}) 03:36:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3ff}) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r1, 0x7, &(0x7f0000000140)) 03:36:30 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) 03:36:30 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@jdev={'jdev'}}]}) 03:36:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) memfd_create(&(0x7f0000000040)='(%i}vboxnet1user\x00', 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140)}]) 03:36:30 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f00003e6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x400, 0x0) 03:36:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0xffffffffffffff99) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x57) 03:36:30 executing program 7: rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) 03:36:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000280a26dde896748b050d600611840"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 03:36:30 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000977000/0x400000)=nil) 03:36:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3ff}) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r1, 0x7, &(0x7f0000000140)) 03:36:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r1, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 872.225634] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "jdev" [ 872.225634] 03:36:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x2, r1, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)}) 03:36:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3ff}) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r1, 0x7, &(0x7f0000000140)) 03:36:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) unshare(0x28020400) [ 872.325750] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "jdev" [ 872.325750] 03:36:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b94f0600000f320f9584aa8a440f20c0663508000000440f22c0d5fe66b9da0800000f32650f5ffa66b8592000000f23d00f21f866351000000b0f23f83e0f013bd9e166b92102000066b8ab340ccd66bad5ae4d710f30", 0x58}], 0x1, 0x0, &(0x7f0000000040), 0x0) 03:36:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") setxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=ANY=[], &(0x7f0000000640)='grpquota', 0x8, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000640)=ANY=[]) 03:36:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3ff}) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r1, 0x7, &(0x7f0000000140)) 03:36:30 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0xd, &(0x7f00000001c0)={0x4000, 0x0, 0x4}, &(0x7f0000000000)=0x10) close(0xffffffffffffffff) 03:36:30 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) 03:36:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="390000001100090469001bfd3f03f5000c450001070000001419001a00040023000700f0000200000809c99183a8a500020000000000000000", 0x39}], 0x1) 03:36:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) 03:36:30 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)) 03:36:30 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 872.603783] binder: 28024:28025 IncRefs 0 refcount change on invalid ref 0 ret -22 03:36:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x703000}]) 03:36:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096}, 0x48) [ 872.662147] netlink: 25 bytes leftover after parsing attributes in process `syz-executor1'. 03:36:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x848000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2714, &(0x7f0000000040)=""/13, &(0x7f0000000000)=0xd) 03:36:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x800) 03:36:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700ff0a0000000000000000030000000c00010008000100582dbacf0e309d15f8320e606b700ed1b993eb8d1634b207e6d1ff573971d097051ecca3f8f7b2904386148dedfacfc89e5d2c2d"], 0x1}}, 0x0) 03:36:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x848000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2714, &(0x7f0000000040)=""/13, &(0x7f0000000000)=0xd) 03:36:31 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x29, &(0x7f0000000340)='cgroup2\x00') prctl$setmm(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) 03:36:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x3c8, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x1d, 0x0, 0x806, 'veth0_to_bridge\x00', 'nr0\x00', 'gre0\x00', 'veth1_to_bond\x00', @local, [], @local, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}, {{{0x9, 0x0, 0x0, 'ipddp0\x00', 'bridge_slave_1\x00', '\x00', 'gre0\x00', @broadcast, [], @empty, [], 0xe0, 0x118, 0x150, [@rateest={'rateest\x00', 0x48, {{'dummy0\x00', 'syz_tun\x00'}}}]}, [@snat={'snat\x00', 0x10, {{@local}}}]}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bridge_slave_1\x00', '\x00', 'lo\x00', 'team0\x00', @dev, [], @local, [], 0xa0, 0x108, 0x140, [@connlabel={'connlabel\x00', 0x8}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @snat={'snat\x00', 0x10}]}, @snat={'snat\x00', 0x10, {{@remote}}}}]}]}, 0x440) [ 873.068165] f2fs_msg: 40 callbacks suppressed [ 873.068181] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 873.079945] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 873.096663] attempt to access beyond end of device [ 873.101734] loop4: rw=12288, want=8200, limit=20 [ 873.107269] F2FS-fs (loop4): invalid crc value [ 873.112809] attempt to access beyond end of device [ 873.117774] loop4: rw=12288, want=12296, limit=20 [ 873.122740] F2FS-fs (loop4): invalid crc value [ 873.127414] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 873.134238] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 873.141372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 873.149368] attempt to access beyond end of device [ 873.154358] loop4: rw=12288, want=8200, limit=20 [ 873.159228] F2FS-fs (loop4): invalid crc value 03:36:31 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) 03:36:31 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) 03:36:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000200)={0x80, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x100000000080, 0x0, 0x1}) 03:36:31 executing program 2: r0 = epoll_create1(0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 03:36:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x848000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2714, &(0x7f0000000040)=""/13, &(0x7f0000000000)=0xd) 03:36:31 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='ppp1eth1,proc-@\x00', 0xffffffffffffff9c}, 0x10) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001b80)={{{@in6=@mcast2, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001c80)=0xe8) getgid() sendmsg$unix(r1, &(0x7f0000001d40)={&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001ac0)="694bd44e1830df21d3fa55bedac49fcaef55b1e372af27f8576e12089ca2c3c71c5f13770b2eae93fc1dac1bec42c6ee7779317af2a639e978fb", 0x3a}], 0x1, &(0x7f0000001cc0), 0x0, 0x4885}, 0x40040) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66690010000000030000000000000047701d246ecc2c25e815a2e574b4177152fcc9b1254e84991636ccdd95e066e55e8956000000000000000008"], 0x40) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x3}}}}}, &(0x7f0000000040)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r4, &(0x7f0000007980)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x2, 0x4, 0x1, {0xa, 0x4e23, 0x8, @ipv4={[], [], @broadcast}, 0x6}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="9576dd792c1d6ef9b450ab3dbcbe43c700d0ca376af4747273941a6bd5963ac52e882089fecc85929ac9bf451aead95f71327910f5fb6d74ada81d0b5cec565b54dacba7ffdd9a70c5406ecf219b56c2968555e1d460cc921825afb2b4531f045de4c1f14f0ba76ee5e0df1c89358f0720b80e9a6160567824c7722339fc684d982418611a84162fe8e965", 0x8b}], 0x1, &(0x7f0000000440), 0x0, 0x4000814}, 0x1}], 0x1, 0x8080) sendto$llc(r4, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x3, 0x800, 0x1, @local}, 0x10) 03:36:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) ioctl$TUNSETPERSIST(r0, 0x400454ce, 0xffffffffffffffff) 03:36:31 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 873.164176] attempt to access beyond end of device [ 873.169201] loop4: rw=12288, want=12296, limit=20 [ 873.174427] F2FS-fs (loop4): invalid crc value [ 873.179110] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 03:36:31 executing program 5: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$netlink(0x10, 0x3, 0x800000000000009) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x30000004}, 0xc) 03:36:31 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="220000002000070700be0000090007010a0000ff0c00000000200010050013800100", 0x22) 03:36:31 executing program 2: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@dev, 0x0, 0x0, 0x2, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffd}, 0x20) 03:36:31 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) setresuid(0x0, r1, 0x0) setresgid(r2, r2, r2) 03:36:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x848000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2714, &(0x7f0000000040)=""/13, &(0x7f0000000000)=0xd) 03:36:31 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback}, &(0x7f00000000c0)=0x20) 03:36:31 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 03:36:31 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000080)) chroot(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 03:36:31 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) 03:36:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e00001700000000001508070000fcffdb98200000000013abdd6d03009a946e99ec00000000000092c682730e590851d92abfdc873dd3531e60c02e2e5feb992c457e9791fd96101963c66c4bf360"], 0x58) 03:36:31 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) ustat(0x0, &(0x7f00000001c0)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r2, r2, 0x0, 0x7fffff29) 03:36:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[]}}, 0x0) bind$netlink(r0, &(0x7f0000000080), 0xc) 03:36:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x10000000000}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000000}) 03:36:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480), 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f0000000380)="7f3ab80100008024", 0x8, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0), &(0x7f0000000140)="19", 0x1, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 03:36:31 executing program 3: r0 = socket(0x2, 0x8000a, 0x0) getpeername$netlink(r0, &(0x7f0000000140), &(0x7f00000001c0)=0xc) 03:36:31 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 03:36:31 executing program 3: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x7530}) 03:36:31 executing program 1: r0 = memfd_create(&(0x7f0000000000)="2c9908871cde871334bd41ea5c8c6500", 0x4) fallocate(r0, 0x0, 0x0, 0x3) 03:36:31 executing program 2: r0 = socket(0x10, 0x80002, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000340), 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x40, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x304}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:31 executing program 0: r0 = socket(0x4000000000000a, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000300)="26091df97f0000000000000034aa45d3", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000340)=""/182, &(0x7f00000001c0)=0xb6) 03:36:31 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x0) 03:36:31 executing program 1: open(&(0x7f0000000000)='./0ile/\x00', 0x40, 0x0) 03:36:31 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 03:36:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x47) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='((wlan1cpuset\x00') close(r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:36:32 executing program 2: r0 = socket(0x10, 0x80002, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000340), 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x40, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x304}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) 03:36:32 executing program 6: r0 = socket$inet6(0xa, 0x40100000003, 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:36:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:36:32 executing program 1: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x0, @multicast1}}) 03:36:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000140)) 03:36:32 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 03:36:32 executing program 2: r0 = socket(0x10, 0x80002, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000340), 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x40, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x304}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x12, 0x3, &(0x7f0000000040), 0x4ffce7) 03:36:32 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r3, r1, r2) 03:36:32 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040), &(0x7f0000facfff), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80001, 0x0) ioctl$KDGKBLED(r1, 0x4004510d, &(0x7f0000000040)) 03:36:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) 03:36:32 executing program 5: perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x8000, 0x3f, 0x0, 0xffffffffffffff9c, 0x0, [0x24000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32000]}, 0x2c) 03:36:32 executing program 0: syz_emit_ethernet(0x1019f, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev, @local, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 03:36:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x7e00000000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000400), 0x4) 03:36:32 executing program 2: r0 = socket(0x10, 0x80002, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000340), 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x40, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x304}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:32 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r1, r2) ioctl$KVM_SET_PIT2(r2, 0xae64, &(0x7f0000000040)) 03:36:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x36, &(0x7f0000000000)={@loopback}, 0x20) close(r1) socket$inet6(0xa, 0x1000000000002, 0x0) dup3(r1, r2, 0x0) 03:36:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 03:36:32 executing program 0: mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=0']) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f00000001c0)) 03:36:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x8000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/98}, 0x18) 03:36:32 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000300)) 03:36:32 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x2000000121080) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x1000000000000) clone(0x80008000, &(0x7f0000001080)="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", &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)="da4e95d81e83be97314b5c4139e6f3683ed7e6a0a8fde258ab77130337dd1c80cdab5f848212ef") ioctl$int_out(r0, 0x5460, &(0x7f0000000640)) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x412, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000300)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x894, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000036e28e64ddb26503000c0000000000000000009500003844e2d8e1232068d4071a9ca40000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000cc0)=""/251, 0x0, 0x0, [], 0x0, 0x1}, 0x48) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000009c0)={{0x2, 0x4e20, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4, {0x2, 0x4e24, @loopback}, 'syzkaller0\x00'}) sendmsg$nl_netfilter(r0, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x15d}, 0x1, 0x0, 0x0, 0x20400095}, 0x40010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000940)=0x9) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000a40)={0x2d, 0x1, {0xffffffffffffffff, 0x3, 0x0, 0x1, 0x6}}) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000100)={@multicast1, @remote}, 0x8) sendmsg$nl_netfilter(r3, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="04a5710000f80500ff0ffcd46b54e6d16670edb61ef6ff0001c4d1d622355d94379c7f927873c34b83dbc528f890af114424f1b6436b56fbaa7f235e8140e5ebe61f24ba46b1b907c1a5982b09f1613e017cc7419fa758b5"], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000800)={0x2, 0x3, 0x0, 0xffffffffffffff81, 'syz1\x00', 0x3ff}) arch_prctl(0x1004, &(0x7f0000000700)="e45f5e9d151aebc80818259f5a4e20d009bf88f15d61eb13649980ab3b3536755cf3cf4bfb30d483b94ebbcb340b27bb3c2f49bf6b101e16c2389e8ef8b0a468217c0294e3604303f90967b16c93207a041638221ed37566096a06cf57e0fbf165e410775585b022172664d03066f231396854445ab8bd") syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0x9, 0xc000) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000680)=0x3) syz_open_dev$ndb(&(0x7f00000007c0)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc0405519, &(0x7f0000001000)) 03:36:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x13, [{}]}]}, 0x24}}, 0x0) 03:36:32 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000000)={0x0, 0x2}, 0x8) [ 874.512199] bond0: cannot enslave bond to itself. 03:36:32 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x80287010, &(0x7f00000000c0)) [ 874.537174] attempt to access beyond end of device [ 874.542360] loop1: rw=12288, want=8200, limit=20 [ 874.548395] bond0: cannot enslave bond to itself. [ 874.568663] attempt to access beyond end of device [ 874.573765] loop1: rw=12288, want=12296, limit=20 03:36:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x8000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/98}, 0x18) 03:36:32 executing program 3: socketpair(0xfffffffffffffffc, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) [ 874.603428] attempt to access beyond end of device [ 874.608667] loop1: rw=12288, want=8200, limit=20 [ 874.636623] attempt to access beyond end of device [ 874.641715] loop1: rw=12288, want=12296, limit=20 03:36:32 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f00000015c0), 0x1000) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000000c0)) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) [ 874.686492] attempt to access beyond end of device [ 874.691733] loop1: rw=12288, want=8200, limit=20 03:36:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x8000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/98}, 0x18) [ 874.727346] attempt to access beyond end of device [ 874.732450] loop1: rw=12288, want=12296, limit=20 [ 874.763079] attempt to access beyond end of device [ 874.768224] loop1: rw=12288, want=8200, limit=20 03:36:33 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000180)) read(r1, &(0x7f0000000400)=""/100, 0x64) 03:36:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000300)={'ip6gretap0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}) 03:36:33 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0xfffffdfd}) [ 874.804500] attempt to access beyond end of device [ 874.809685] loop1: rw=12288, want=12296, limit=20 03:36:33 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}) close(r0) 03:36:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x8000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/98}, 0x18) 03:36:33 executing program 1: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x40000000000013, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffff0) 03:36:33 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x566d}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 03:36:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='trusted.secur'], &(0x7f0000000280)='security.capabimity\x00', 0x14, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) flistxattr(r1, &(0x7f0000000340)=""/243, 0xf3) 03:36:33 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0xc0189436, 0x407fdfffffefff) 03:36:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") request_key(&(0x7f0000000940)="646e735f7265736f6c7665720005083f7610beb89ebb55f56950196fd8b8a6ebddf637ee27ef0fabbbad7523dacb0ab4baaf14787b652566f6eaf50a9d4cff3e30f2d07fd0118cf06573e05f283ef26ec0cc75cf93fe4c95c7185cb70df310c4c08871883fc063c014d46b8b27fd88a01e760bee664a475d69d12e2fc7e3dc680e3bb87b71d301fbf92cadf5537bc8774141ee7d7152d16c9ee500389b527a9b31679b1560e4680fcfd95743ed5305a984645fb4371e5e363f7df35cb72f6d9c953cd2ea3167c037567f7f99399e92ba02db513f40a4d44e072bf5ea9495287934a503a032610a0235c3530cfc99e27a1e10e28ed49beb223bbe910fd417a48e64dbdf97edb9363e6b5853e1323d6f78d0fb80969de2f5fec97acbb11c1ae97f54cf4e3ef9d50e1fbc43cc27e537d18452001232814ac3970ee2938175a91f4e0ca28b803a350dbea3b68d6a71bc65b011a81834b809f86919e4499a53ff8a35993b333b9b2761a44bb4a888a90c078d0b923e28cdbf76aa3fb68394de930dddf27c48926ab9c66951b70ebd4063b510ae453059ff71853bcf5942b5140a111d4a2afbaf612c6415aceb9578cb0d1decc8001f6dfc9d6829dbed2a8dbbc4bc9391960c1bb3fb451d52778143fb3c2f4d17df3c295117e13889037aff061ff283cac330aa03e7d189f01bfd03e68532d5594ef0e4bf1d584c7eacfd53a7ae8ccecc1901c89f4db4a3f1925610f22dac4570169b7f9f4cbf3fa1376f0ce4ab31605a16aff95c1bda1b96b9ded911a38594c3d9b42e7712ac377f377cd30eda00efd15d718e20dba3e76c4850966353c04a178e3b857719f9d81dc0ef8776c46c47d38aad73498289bc0240", &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) 03:36:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0xb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}, &(0x7f0000000000)) 03:36:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x80100200, 0x0, 0x1}, 0x3ef) 03:36:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x2000000}}, 0x90) 03:36:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0xb, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) 03:36:33 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x6, &(0x7f00000001c0), 0x0) 03:36:33 executing program 1: syz_emit_ethernet(0x642, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x223, 0x2b, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634]}, @local, {[], @tcp={{0x2, 0x253, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 03:36:33 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}) close(r0) 03:36:33 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)) 03:36:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f01"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 03:36:33 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 03:36:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3}, 0x2c8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x10) 03:36:33 executing program 6: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket(0x2, 0x2, 0x0) shutdown(r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000000eff4)) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r1, 0x1) 03:36:33 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}) close(r0) 03:36:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r0, r1, 0x0) 03:36:34 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x6488, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) 03:36:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001980)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000100)=""/231, 0xe7, &(0x7f0000001640)=""/178, 0x0, 0x3}}, 0x68) 03:36:34 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}) close(r0) 03:36:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001980)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000100)=""/231, 0xe7, &(0x7f0000001640)=""/178, 0x0, 0x3}}, 0x68) 03:36:34 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:36:34 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}) close(r0) 03:36:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r0, r1, 0x0) 03:36:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001980)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000100)=""/231, 0xe7, &(0x7f0000001640)=""/178, 0x0, 0x3}}, 0x68) 03:36:34 executing program 6: r0 = socket$inet6(0xa, 0x2001000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000640), 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480), 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f0000000380)="7f", 0x1, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0), &(0x7f0000000280), 0x10c, r3) r7 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000580), &(0x7f0000000b40)="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", 0x801, r4) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r7, r5}, &(0x7f0000000740)=""/132, 0x84, 0x0) 03:36:34 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) 03:36:34 executing program 0: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="63707526357c21000000010000039cd30e35cca01d3d0b0a1c60666f8dcc6d5c76fd2e9e09626b31deea1b0d3b8184872d58b62cc5b4223726b5797482fb1d83e6f82e2d6d0af3b128e9604401695c8d6c866c68a8fc80de2c4b74f41ac55d593b0906be2aaa26bd16785186f3d61afdd00427799b7ce4b70845ed9780731957b75bf0253e4d4df598be5e3d7121a60f70013200bbbe9d7235af657010520b26afa8247f3756ed4c4a34cf9040d5540acac2865fc1ce8ded62538de97482f4317a7772e66f88e5e3e7476378c091498dfde4bb73bf0a004b9ee55ba00a0f04a6b07345298ad052c3c12c62201c2349527a36fe4a7edad75fbe1fe586b1787526fbf2bfe87f9193ab05") [ 876.253524] MPI: mpi too large (16392 bits) 03:36:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000001b80)=@rc, 0x80, &(0x7f0000001f80), 0x0, &(0x7f0000002000)=""/94, 0x5e}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 03:36:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28081) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x4000000001, 0x68, 0x2}, {{0x77359400}}], 0x30) 03:36:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r0, r1, 0x0) 03:36:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/58, 0x3a) read$FUSE(r1, &(0x7f00000030c0), 0x12d3) read$FUSE(r1, &(0x7f00000020c0), 0x1000) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) 03:36:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000002bc0)='./file0/bus\x00', &(0x7f0000002c00)) creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x0) 03:36:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001980)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000100)=""/231, 0xe7, &(0x7f0000001640)=""/178, 0x0, 0x3}}, 0x68) 03:36:35 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5351, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0x0, @time={0x77359400}}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000014) 03:36:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}) close(r0) 03:36:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0xfffffffffffffffe) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_extract_tcp_res(&(0x7f0000000040), 0x2dc, 0xffffffffffff7fff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='security.selinux\x00', &(0x7f00000005c0)=""/122, 0x7a) read$FUSE(r2, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0xffffffffffffffda, 0x2}, 0x10) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000100)=""/83, 0x53) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$pptp(0x18, 0x1, 0x2) 03:36:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/230}, 0x18) 03:36:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r0, r1, 0x0) 03:36:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000001b80)=@rc, 0x80, &(0x7f0000001f80), 0x0, &(0x7f0000002000)=""/94, 0x5e}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 03:36:35 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x43, &(0x7f0000000700), 0x4) 03:36:35 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000e, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) 03:36:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x8, 0x0) 03:36:35 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x40000000000200, &(0x7f0000000480), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000580)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000d00), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x1) open$dir(&(0x7f0000000780)='./file0\x00', 0x27a, 0x0) 03:36:35 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x40000000000200, &(0x7f0000000480), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000580)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000d00), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x1) open$dir(&(0x7f0000000780)='./file0\x00', 0x27a, 0x0) 03:36:35 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) unshare(0x2000400) signalfd(r0, &(0x7f0000000080), 0x8) 03:36:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000001b80)=@rc, 0x80, &(0x7f0000001f80), 0x0, &(0x7f0000002000)=""/94, 0x5e}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 03:36:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x12, 0x0, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 03:36:35 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000e, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) 03:36:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0xfffffffffffffffe) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_extract_tcp_res(&(0x7f0000000040), 0x2dc, 0xffffffffffff7fff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='security.selinux\x00', &(0x7f00000005c0)=""/122, 0x7a) read$FUSE(r2, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0xffffffffffffffda, 0x2}, 0x10) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000100)=""/83, 0x53) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$pptp(0x18, 0x1, 0x2) 03:36:36 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x22, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x10) 03:36:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}) close(r0) 03:36:36 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000e, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) 03:36:36 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") r3 = socket$kcm(0xa, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9aad45799ad21d21) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r5}) getpeername$packet(r5, &(0x7f0000008840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008880)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000008b00)={{{@in=@broadcast, @in=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000008c00)=0xe8) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000008e00)={0x0, @rand_addr, @broadcast}, &(0x7f0000008e40)=0xc) accept$packet(r1, &(0x7f0000008e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008ec0)=0x14) getpeername$packet(r5, &(0x7f0000009140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009180)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000009240)={{{@in6=@mcast1, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000009340)=0xe8) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f000000c800)={@remote}, &(0x7f000000c840)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f000000ca00)={{{@in6=@dev, @in=@rand_addr}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f000000cb00)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f000000cb40)={@mcast2}, &(0x7f000000cb80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f000000ce00)={'team0\x00'}) accept$packet(r5, &(0x7f000000cec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000cf00)=0x14) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f000000cf40)={0x0, @local, @multicast2}, &(0x7f000000cf80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f000000cfc0)={'team0\x00'}) shmat(0x0, &(0x7f0000797000/0x1000)=nil, 0x4000) 03:36:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0xfffffffffffffffe) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_extract_tcp_res(&(0x7f0000000040), 0x2dc, 0xffffffffffff7fff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='security.selinux\x00', &(0x7f00000005c0)=""/122, 0x7a) read$FUSE(r2, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0xffffffffffffffda, 0x2}, 0x10) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000100)=""/83, 0x53) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$pptp(0x18, 0x1, 0x2) 03:36:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000001b80)=@rc, 0x80, &(0x7f0000001f80), 0x0, &(0x7f0000002000)=""/94, 0x5e}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 03:36:36 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x40000000000200, &(0x7f0000000480), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000580)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000d00), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x1) open$dir(&(0x7f0000000780)='./file0\x00', 0x27a, 0x0) 03:36:36 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$P9_RLERRORu(r2, &(0x7f0000000080)={0x21, 0x7, 0x0, {{0x14, 'cpuset)&,securityem0'}}}, 0x21) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000001c0)) dup2(r1, r3) [ 878.125029] device lo entered promiscuous mode 03:36:36 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000e, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) 03:36:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000100), &(0x7f0000000000)) 03:36:36 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x40000000000200, &(0x7f0000000480), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000580)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000d00), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x1) open$dir(&(0x7f0000000780)='./file0\x00', 0x27a, 0x0) 03:36:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x2, "fb8caa351a967c4aa7f9d626afeb27cb21f9074838653aeffc606c474c6901f3", "a82a48529797eed08ef4b9e0d3e28d32d1cf8b46fef660fe57d5f36630a87a82", "9cf1fd9499f0c25834d415b8c969be038c2df3a5309daf325b9d8435e2cc3f28", "d850d4b79b39ff39d5ad7689eb290c1664b45f267eea20eec2ae3a1950a4c338", "e62135f4b22afff7bbf152b8f9fc88c64a076b0793dd1381bf0dfb6b043b3663", "4c0d21d8289833482df1bbb0"}}) 03:36:36 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x42002, 0x0) r1 = socket$inet(0x2, 0x80003, 0x3) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000240)=0xdd) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)) modify_ldt$read_default(0x2, &(0x7f0000000140)=""/100, 0x64) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x880000}) 03:36:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0xfffffffffffffffe) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_extract_tcp_res(&(0x7f0000000040), 0x2dc, 0xffffffffffff7fff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='security.selinux\x00', &(0x7f00000005c0)=""/122, 0x7a) read$FUSE(r2, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0xffffffffffffffda, 0x2}, 0x10) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000100)=""/83, 0x53) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$pptp(0x18, 0x1, 0x2) 03:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6520}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000000c0)="0f205926430f01df66430f388070856666410f38dcaef58f0000b9800000c00f3235004000000f300f6e7500400f01ca66baf80cb85061e081ef66bafc0ced0f00d066baa10066b85b0066ef", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000240)) 03:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x485]}) 03:36:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x1, @u64}]}, 0x20}}, 0x0) [ 878.671622] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 878.716098] netlink: 'syz-executor2': attribute type 1 has an invalid length. 03:36:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, {0x0, 0x0, 0x0, 0x100002}}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r0, 0x0) listen(r1, 0x0) 03:36:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x14, &(0x7f0000000000)="0030c6400d72502bf000100007ff000000000037"}) 03:36:36 executing program 6: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xa4b, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000180)="050100000500000000001e00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e7725f58a55afce0b86f61f7402810c3aae5dafadc5712f29508c008e26575efe5eb8f5972ea77ef35682f2884fa39139350f13c", 0x5e, 0x0, &(0x7f0000000000)={0xa, 0x100200000800, 0x8000000000005, @mcast1}, 0x1c) 03:36:36 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) madvise(&(0x7f00008ed000/0x4000)=nil, 0x4000, 0x9) getpid() 03:36:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) recvfrom(r1, &(0x7f0000000080)=""/114, 0x72, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="240000005e0007031dfffd946fa283df8fc43900090000005e9effff000000000d00ff7e", 0x24}], 0x1}, 0x0) 03:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6520}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000000c0)="0f205926430f01df66430f388070856666410f38dcaef58f0000b9800000c00f3235004000000f300f6e7500400f01ca66baf80cb85061e081ef66bafc0ced0f00d066baa10066b85b0066ef", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000240)) 03:36:36 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:36:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x2}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xfffffffffffffdc2}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb0000000000000000000400000000000000000000000000000000000004000400170000001f000000000700003f00000000000000030000000000120002000b00050000000100000000000000"], 0x88}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 03:36:37 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "a68f19b9db12fa262f520c976d8e04834d2c88cf1f2f9b331b23af04578a36e0", "4390cd23e87e331ecfc9081f6c98d7849002babe052842a7c60d8f550cfa502d", "94209f11773fa166fc60c272a4c3f09d430d263082205a12858c58a4b008fbac", "0e6704c7d2ece4b46c4c93a3769260575db7a49e8c9be1e1019572c67006afde", "f2affbe434781d2dc25ec69ad22fe45790bff36f7584365dce703f5b3c1ba8db", "4b68d5055a16603e58308a8f"}}) 03:36:37 executing program 0: mknod$loop(&(0x7f0000000480)='./file0\x00', 0x6008, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 03:36:37 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000140)) 03:36:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 03:36:37 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x20, 0x20, 0x201, 0x0, 0x0, {0x3}}, 0x20}}, 0x0) [ 879.041911] print_req_error: 120 callbacks suppressed [ 879.041928] print_req_error: I/O error, dev loop0, sector 0 03:36:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6520}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000000c0)="0f205926430f01df66430f388070856666410f38dcaef58f0000b9800000c00f3235004000000f300f6e7500400f01ca66baf80cb85061e081ef66bafc0ced0f00d066baa10066b85b0066ef", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000240)) 03:36:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 879.082932] XFS (loop0): SB validate failed with error -5. [ 879.118536] print_req_error: I/O error, dev loop0, sector 0 03:36:37 executing program 0: mknod$loop(&(0x7f0000000480)='./file0\x00', 0x6008, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 03:36:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 879.228766] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 03:36:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 03:36:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6520}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000000c0)="0f205926430f01df66430f388070856666410f38dcaef58f0000b9800000c00f3235004000000f300f6e7500400f01ca66baf80cb85061e081ef66bafc0ced0f00d066baa10066b85b0066ef", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000240)) [ 879.269926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. [ 879.273160] print_req_error: I/O error, dev loop0, sector 0 [ 879.299758] XFS (loop0): SB validate failed with error -5. [ 879.327627] print_req_error: I/O error, dev loop0, sector 0 03:36:37 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) madvise(&(0x7f00008ed000/0x4000)=nil, 0x4000, 0x9) getpid() 03:36:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 03:36:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 03:36:37 executing program 0: mknod$loop(&(0x7f0000000480)='./file0\x00', 0x6008, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 03:36:37 executing program 6: unshare(0x20400) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 03:36:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) 03:36:37 executing program 7: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="f67f986af9dc3ba1fe8000000000000087209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x28}], 0x1, &(0x7f0000000100)}, 0x0) 03:36:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0ac43a0700315f85715070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 03:36:37 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:36:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r2 = socket(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) dup3(r2, r0, 0x0) [ 879.830264] binder: 28709:28725 ERROR: BC_REGISTER_LOOPER called without request [ 879.855889] print_req_error: I/O error, dev loop0, sector 0 [ 879.872155] XFS (loop0): SB validate failed with error -5. 03:36:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/78, 0x26) [ 879.898452] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 879.909506] print_req_error: I/O error, dev loop0, sector 0 03:36:38 executing program 0: mknod$loop(&(0x7f0000000480)='./file0\x00', 0x6008, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 03:36:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/78, 0x26) 03:36:38 executing program 6: unshare(0x20400) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) [ 879.985094] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 03:36:38 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:36:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/78, 0x26) [ 880.091763] print_req_error: I/O error, dev loop0, sector 0 [ 880.101995] XFS (loop0): SB validate failed with error -5. [ 880.113642] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 880.123973] print_req_error: I/O error, dev loop0, sector 0 03:36:38 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) madvise(&(0x7f00008ed000/0x4000)=nil, 0x4000, 0x9) getpid() 03:36:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/78, 0x26) 03:36:38 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:36:38 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:36:38 executing program 6: unshare(0x20400) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) [ 880.500795] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 880.520651] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 880.579780] binder_alloc: binder_alloc_mmap_handler: 28709 20001000-20004000 already mapped failed -16 [ 880.616232] binder: BINDER_SET_CONTEXT_MGR already set [ 880.639958] binder_alloc: 28709: binder_alloc_buf, no vma [ 880.645749] binder: 28709:28807 transaction failed 29189/-3, size 24-8 line 2970 [ 880.660197] binder: 28709:28725 ioctl 40046207 0 returned -16 [ 880.670229] binder: 28709:28725 Release 1 refcount change on invalid ref 1 ret -22 [ 880.687059] binder: 28709:28807 BC_INCREFS_DONE u0000000000000000 no match [ 880.700271] binder: 28709:28725 BC_ACQUIRE_DONE u0000000000000000 no match [ 880.710032] binder: 28709:28807 ERROR: BC_REGISTER_LOOPER called without request 03:36:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) 03:36:38 executing program 7: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) [ 880.747906] binder: send failed reply for transaction 197 to 28709:28713 [ 880.761857] binder: undelivered TRANSACTION_ERROR: 29189 [ 880.829207] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 [ 880.857412] binder: 28812:28819 ERROR: BC_REGISTER_LOOPER called without request [ 881.612941] binder: release 28812:28813 transaction 202 out, still active [ 881.624097] binder: send failed reply for transaction 202, target dead 03:36:41 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:36:41 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:41 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:36:41 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) madvise(&(0x7f00008ed000/0x4000)=nil, 0x4000, 0x9) getpid() 03:36:41 executing program 6: unshare(0x20400) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 03:36:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) 03:36:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) 03:36:41 executing program 7: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) [ 883.357418] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 883.369516] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 03:36:41 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) [ 883.426595] binder: 28829:28847 ERROR: BC_REGISTER_LOOPER called without request 03:36:41 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:36:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x8000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x809, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 883.568258] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 883.583332] bond0: veth0_to_bridge is up - this may be due to an out of date ifenslave 03:36:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x5}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0) [ 883.646107] bond0: veth0_to_bridge is up - this may be due to an out of date ifenslave 03:36:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x1) 03:36:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet(0x2, 0xe, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYPTR], &(0x7f0000000840)=0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003a80)={r0}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000003ac0)="a7685cb722d515ce2dd36136bddfd74f", 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000200)={@empty, @remote, @multicast2}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x80}, &(0x7f00000001c0)=0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYBLOB="80000200010000002f00945766bd8f87ff0002000300ffcdd461e73b66d83a"], &(0x7f0000000240)=0x1) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x3c07f944825fb10b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=@framed={{0xffffff87, 0x0, 0x0, 0x0, 0x2f, 0x1c}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x1c4, &(0x7f0000000000)=""/195}, 0x48) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000380)=0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000380), 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e22, @broadcast}}) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="9a", 0x1, 0x4008010, 0x0, 0x0) close(r0) 03:36:41 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) 03:36:41 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f00000001c0)="e6"}, 0x10) 03:36:42 executing program 1: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in, 0x0, 0x0, 0x0, 0x1ff}, &(0x7f00000002c0)=0x98) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) [ 883.932449] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 [ 883.974332] binder: BINDER_SET_CONTEXT_MGR already set [ 884.008957] binder: 28887:28888 ioctl 40046207 0 returned -16 [ 884.017294] binder: 28887:28888 Release 1 refcount change on invalid ref 1 ret -22 [ 884.101140] binder: 28887:28896 ERROR: BC_REGISTER_LOOPER called without request 03:36:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:36:42 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) 03:36:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001140)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000900)=[{&(0x7f0000000200)=""/75, 0x4b}], 0x1, &(0x7f00000009c0)=""/186, 0xba}}], 0x1, 0x0, &(0x7f0000001200)={0x77359400}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES64], 0xfffffea2) close(r2) 03:36:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') [ 884.144507] binder: release 28829:28834 transaction 206 out, still active [ 884.162459] binder: send failed reply for transaction 206, target dead [ 884.169309] binder: send failed reply for transaction 209 to 28887:28888 03:36:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) 03:36:42 executing program 7: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0x1) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:36:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) 03:36:42 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @local, [], {@ipv4={0x6558, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, &(0x7f0000ea3000)) 03:36:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:36:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x4, 0xde0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000080), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x0, 0x0, 'veth1_to_bridge\x00', 'bridge_slave_0\x00', 'veth0_to_bond\x00', 'ip_vti0\x00', @broadcast, [], @random="80edc1eaebd4", [], 0xa0, 0xa0, 0xd0, [@vlan={'vlan\x00', 0x8}]}}, @common=@redirect={'redirect\x00', 0x8}}, {{{0x1b, 0x0, 0x0, 'ip6tnl0\x00', 'bond_slave_0\x00', 'tunl0\x00', 'veth1_to_bridge\x00', @random="c97aa57c3508", [], @empty, [], 0xa8, 0x128, 0x160, [@mac={'mac\x00', 0x10, {{@local}}}]}, [@common=@log={'log\x00', 0x28, {{0x0, "03935051d757d6820e4bac5b529a00f99269470df285abab190232c45be1"}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x15, 0x0, 0x0, 'eql\x00', 'bridge_slave_1\x00', 'erspan0\x00', 'bond0\x00', @local, [], @broadcast, [], 0x918, 0x950, 0x980, [@connbytes={'connbytes\x00', 0x18}, @among={'among\x00', 0x840, {{0x0, 0x0, 0x0, {[], 0x2, [{[], @multicast2}, {[], @dev}]}, {[], 0x1, [{[], @multicast1}]}}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@remote}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x1f, 0x0, 0x0, 'team_slave_1\x00', 'bridge_slave_1\x00', 'bcsh0\x00', 'irlan0\x00', @local, [], @local, [], 0x100, 0x168, 0x1a0, [@connbytes={'connbytes\x00', 0x18}, @helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@mark={'mark\x00', 0x10}]}, @common=@mark={'mark\x00', 0x10}}]}]}, 0xe58) 03:36:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:36:42 executing program 2: r0 = socket$inet6(0xa, 0x1200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x005\x00', @ifru_settings={0x907000}}) [ 884.391640] binder: 28915:28921 ERROR: BC_REGISTER_LOOPER called without request [ 884.535160] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 [ 884.554092] binder: BINDER_SET_CONTEXT_MGR already set [ 884.569964] binder: 28939:28940 ioctl 40046207 0 returned -16 [ 884.577673] binder: 28939:28940 Release 1 refcount change on invalid ref 1 ret -22 03:36:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet(0x2, 0xe, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYPTR], &(0x7f0000000840)=0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003a80)={r0}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000003ac0)="a7685cb722d515ce2dd36136bddfd74f", 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000200)={@empty, @remote, @multicast2}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x80}, &(0x7f00000001c0)=0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYBLOB="80000200010000002f00945766bd8f87ff0002000300ffcdd461e73b66d83a"], &(0x7f0000000240)=0x1) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x3c07f944825fb10b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=@framed={{0xffffff87, 0x0, 0x0, 0x0, 0x2f, 0x1c}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x1c4, &(0x7f0000000000)=""/195}, 0x48) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000380)=0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000380), 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e22, @broadcast}}) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="9a", 0x1, 0x4008010, 0x0, 0x0) close(r0) 03:36:42 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x1) bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) 03:36:42 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) 03:36:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:36:42 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"05000000020002000000000000000000180000000303ffffffffa0008000", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 03:36:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) sendfile(r1, r1, &(0x7f0000000380), 0x1000000020000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xc0, &(0x7f0000000100), &(0x7f0000000400)=""/192}, 0x57) [ 884.636464] binder: 28939:28942 ERROR: BC_REGISTER_LOOPER called without request 03:36:42 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 03:36:42 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x1000000000000286, 0x0) 03:36:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) 03:36:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000340)="7465616d3000f5ff00") sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1000000000000, 0x4000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 03:36:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_journal='data=journal'}, {@barrier_val={'barrier'}}, {@dax='dax'}]}) 03:36:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./file1\x00', 0x40, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x1) renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file2\x00', 0x0) mknod$loop(&(0x7f00000008c0)='./file3\x00', 0x0, 0xffffffffffffffff) 03:36:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0xa}}) 03:36:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000200)) [ 885.137415] binder: release 28915:28919 transaction 213 out, still active [ 885.157677] binder: send failed reply for transaction 213, target dead [ 885.164438] binder: send failed reply for transaction 216 to 28939:28940 [ 885.237252] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 885.245428] EXT4-fs (loop5): can't mount with both data=journal and dax 03:36:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cf"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:36:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, 0x0, 0x0) 03:36:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:36:43 executing program 2: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001280)={0x0, 0x98, "55ea1ddeea40b1f646c6e471de53d20059f4e856732f63f38e410e75adc3ad9e525a57f500d6c15953a34b44e57c14d2ef9ecafe830ceeaa0f236d1597ad1741f38c96da85c98dda93f1571c09069c77ca1eb45f078575f1ba1749878e1da4687e71cfd94c9f617d126ccd0d10fcedc65813e17eb85d3e14ea88ed38b0835eb456fe0d54dcf81fe727b4ce668fcb10905172251eb9c93acd"}, &(0x7f00000000c0)=0xa0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 03:36:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet(0x2, 0xe, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYPTR], &(0x7f0000000840)=0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003a80)={r0}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000003ac0)="a7685cb722d515ce2dd36136bddfd74f", 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000200)={@empty, @remote, @multicast2}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x80}, &(0x7f00000001c0)=0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYBLOB="80000200010000002f00945766bd8f87ff0002000300ffcdd461e73b66d83a"], &(0x7f0000000240)=0x1) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x3c07f944825fb10b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=@framed={{0xffffff87, 0x0, 0x0, 0x0, 0x2f, 0x1c}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x1c4, &(0x7f0000000000)=""/195}, 0x48) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000380)=0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000380), 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e22, @broadcast}}) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="9a", 0x1, 0x4008010, 0x0, 0x0) close(r0) 03:36:43 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x4, &(0x7f00000000c0), &(0x7f0000000040)=0x68) close(r1) close(r0) 03:36:43 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 03:36:43 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 03:36:43 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 03:36:44 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) [ 886.071534] binder: 29031:29034 ERROR: BC_REGISTER_LOOPER called without request [ 886.158909] team0 (unregistering): Port device team_slave_0 removed [ 886.390522] team0 (unregistering): Port device team_slave_1 removed 03:36:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet(0x2, 0xe, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYPTR], &(0x7f0000000840)=0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003a80)={r0}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000003ac0)="a7685cb722d515ce2dd36136bddfd74f", 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000200)={@empty, @remote, @multicast2}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x80}, &(0x7f00000001c0)=0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYBLOB="80000200010000002f00945766bd8f87ff0002000300ffcdd461e73b66d83a"], &(0x7f0000000240)=0x1) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x3c07f944825fb10b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=@framed={{0xffffff87, 0x0, 0x0, 0x0, 0x2f, 0x1c}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x1c4, &(0x7f0000000000)=""/195}, 0x48) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000380)=0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000380), 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e22, @broadcast}}) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="9a", 0x1, 0x4008010, 0x0, 0x0) close(r0) 03:36:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 03:36:44 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1000000000d, 0x1ff, 0x4, 0x100000001, 0x1, r1}, 0x2c) 03:36:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='+4', 0x2}], 0x1) 03:36:44 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0), &(0x7f0000000180)={0x1}, &(0x7f0000002000), &(0x7f0000003000)={0x77359400}) 03:36:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000340)="7465616d3000f5ff00") sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1000000000000, 0x4000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 03:36:44 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e21, @loopback}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) sendto$inet(r2, &(0x7f0000000000)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000580)=0x10) io_setup(0x100, &(0x7f0000001cc0)=0x0) io_destroy(r5) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000005c0)={r4, 0x7ff}, 0x8) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000640)={'team_slave_1\x00', @ifru_flags=0x1}) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000004c0), 0x4) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)) ioctl$TCXONC(r1, 0x540a, 0x1) sendmsg$inet_sctp(r3, &(0x7f0000001c80)={&(0x7f00000006c0)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000700)="5aa283e0e7e23808c0f10c36d4d088262ed9627002c9ca9604f8cb427b98f3596355e16f5cbf02339b046b244aaaf8eb69a6ee75dd65824ac4ff2ea406bc649768dabed058ae2954f34053eca62252d639d2fea14398a6eeffac33b9d6d66516a4044c622a5af28222929405c2e516ff7488b7dedc5d691bf2a3555410b2684eabfbd62a334349ca9dd4bec77bcab43eb5", 0x91}, {&(0x7f0000000880)="ad001c2165b2dfcf676d55a1727627ac9decf178684ed379158a22eefe723a24a9ebe7edfd5715938d3631043941d5e48a6577f4bcdb496e59633152c3632f3b354e0aa65fb98c3038d414b1f198acb0c1ea726be77b29dec27a39c405f1d01212bee167ad1a8a11cc6c7f73f0139761c07478f7fdeb3f13ea42bc02eb3a090099ccf41b1ce35db5eda8a8256590f079a67ed63220c06b4d725aed1ad852c334a24d851671bdf2d93549552dfa115b96df", 0xb1}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000001a40)="2fc44f53802fee3c30dfcbaacb4bf45d3b1fb431314ca8cef23a9df84d676ef53dd2ff35a2bf1c9ab0ce9114775e8ffa9b71fa30fad27311281c2bce18f043305a9163e994220789452d5b71c9e46caea8af7319a7123e0ba27d0ad488dd112b2a8526a6d803aaab5cbc44164c493ffe6eaa0f19e493552e0286332e8296f7696f68892a4a2afdb4199f42d2fcb689078960ec58056850c7f2375c24cc2103d3e222db021ca97e1922fa", 0xaa}], 0x4, &(0x7f0000000800)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x589cf670}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x38, 0x80}, 0xc000) [ 886.768906] binder: release 29031:29032 transaction 220 out, still active [ 886.781176] binder: send failed reply for transaction 220, target dead 03:36:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 03:36:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = epoll_create1(0x0) flock(r2, 0x100000000000001) r3 = gettid() dup2(r0, r2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000015) 03:36:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000340)="7465616d3000f5ff00") sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1000000000000, 0x4000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) [ 886.852338] team_slave_1: mtu less than device minimum [ 886.867450] team_slave_1: mtu less than device minimum 03:36:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xb91b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x2]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10009}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:45 executing program 2: r0 = socket$inet(0x2, 0x3, 0x32) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmmsg$unix(r2, &(0x7f0000000540)=[{&(0x7f0000000000)=@file={0x0, "2e2f66696c6530000000000000000005b400"}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000480), 0xe}], 0x49249f6, 0x0) 03:36:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 03:36:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0xab07, &(0x7f00000003c0)) close(r0) 03:36:45 executing program 2: r0 = socket$inet(0x2, 0x3, 0x32) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmmsg$unix(r2, &(0x7f0000000540)=[{&(0x7f0000000000)=@file={0x0, "2e2f66696c6530000000000000000005b400"}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000480), 0xe}], 0x49249f6, 0x0) 03:36:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 03:36:45 executing program 2: r0 = socket$inet(0x2, 0x3, 0x32) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmmsg$unix(r2, &(0x7f0000000540)=[{&(0x7f0000000000)=@file={0x0, "2e2f66696c6530000000000000000005b400"}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000480), 0xe}], 0x49249f6, 0x0) 03:36:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000340)="7465616d3000f5ff00") sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1000000000000, 0x4000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 03:36:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0xab07, &(0x7f00000003c0)) close(r0) 03:36:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='+4', 0x2}], 0x1) 03:36:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xb91b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x2]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10009}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:45 executing program 2: r0 = socket$inet(0x2, 0x3, 0x32) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmmsg$unix(r2, &(0x7f0000000540)=[{&(0x7f0000000000)=@file={0x0, "2e2f66696c6530000000000000000005b400"}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000480), 0xe}], 0x49249f6, 0x0) 03:36:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0xab07, &(0x7f00000003c0)) close(r0) 03:36:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0xab07, &(0x7f00000003c0)) close(r0) 03:36:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xb91b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x2]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10009}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='+4', 0x2}], 0x1) 03:36:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xb91b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x2]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10009}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='+4', 0x2}], 0x1) 03:36:48 executing program 4: mount$bpf(0x8000a0, &(0x7f0000000400)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x0, &(0x7f0000000100)=ANY=[]) bpf$MAP_CREATE(0x12, &(0x7f0000000000)={0x800004, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x11) 03:36:48 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e20, 0x80000000, @loopback, 0x73f}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 03:36:48 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000044c0), 0x0, &(0x7f00000045c0)={[{@session={'session', 0x3d, 0x3ff}}]}) 03:36:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:36:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) bind$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x0, 0x0, 0x0, 0x2}}, 0xa) 03:36:48 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) 03:36:48 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") syz_mount_image$xfs(&(0x7f0000000340)='xfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{&(0x7f0000000580), 0x0, 0xfffffffffffffff9}], 0x4000, &(0x7f0000000840)={[{@gquota='gquota'}, {@noattr2='noattr2'}, {@nodiscard='nodiscard'}]}) 03:36:48 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000100), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffff9c, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 03:36:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 03:36:49 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e20, 0x80000000, @loopback, 0x73f}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 03:36:49 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') sendfile(r0, r1, &(0x7f0000000280)=0x62, 0x2000000004) 03:36:49 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) shutdown(r0, 0x0) r1 = dup(r0) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20}, 0x20) [ 891.075122] XFS (loop1): Invalid superblock magic number 03:36:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x2000400) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000940)) 03:36:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0xfffffffffffffd34, './file0'}]}}, 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) open$dir(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 03:36:49 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f00000000c0)) 03:36:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 03:36:49 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e20, 0x80000000, @loopback, 0x73f}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 03:36:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 03:36:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r1, &(0x7f0000000140)=""/187, 0xbb, 0x0, &(0x7f0000000280)=@ax25={0x3, {"65e40a94e65d9a"}}, 0x709000) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 03:36:49 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@srh, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 03:36:49 executing program 0: unshare(0x2000400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') setns(r0, 0x0) 03:36:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 03:36:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 03:36:49 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdfffffffffff, @perf_bp={&(0x7f0000a7dfff)}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:36:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x2000400) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000940)) 03:36:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000040), &(0x7f0000000380)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x108) 03:36:49 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e20, 0x80000000, @loopback, 0x73f}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1a, &(0x7f00000001c0)=ANY=[@ANYBLOB="fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007465716c3000000000000000000000006966623000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80010010000000000000000000000000000000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000736e6d7000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000006c6f0000000000000000000000000000766c616e"], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 03:36:49 executing program 7: syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000380), 0x0, 0xffff}], 0x0, &(0x7f00000006c0)={[{@resize='resize'}]}) 03:36:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 03:36:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 03:36:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x80044d76, &(0x7f00000001c0)) [ 891.645756] kernel msg: ebtables bug: please report to author: Wrong len argument [ 891.676153] kernel msg: ebtables bug: please report to author: Wrong len argument 03:36:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x4, 0x550, [0x20000200, 0x0, 0x0, 0x20000230, 0x200003b0], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x86dd, 'team_slave_1\x00', 'bond_slave_1\x00', 'bond_slave_0\x00', 'bond_slave_0\x00', @broadcast, [], @empty, [], 0xe8, 0x118, 0x150, [@ip6={'ip6\x00', 0x50, {{@loopback, @mcast1, [], [], 0x0, 0x0, 0x18, 0x8}}}]}, [@common=@STANDARD={'\x00', 0x8}]}, @arpreply={'arpreply\x00', 0x10, {{@dev}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x0, 'nr0\x00', '\x00', 'veth0_to_bond\x00', 'vlan0\x00', @empty, [], @link_local, [], 0x100, 0x138, 0x168, [@devgroup={'devgroup\x00', 0x18}, @helper={'helper\x00', 0x28, {{0x0, 'H.245\x00'}}}]}, [@snat={'snat\x00', 0x10, {{@broadcast}}}]}, @common=@STANDARD={'\x00', 0x8}}, {{{0x9, 0x0, 0x0, 'gretap0\x00', 'vlan0\x00', 'bond_slave_1\x00', 'ip6_vti0\x00', @broadcast, [], @link_local, [], 0xb0, 0xb0, 0xe8, [@time={'time\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@remote}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x0, 0x0, '\x00', 'ip6tnl0\x00', 'ip6tnl0\x00', 'gre0\x00', @link_local, [], @random="015948c39ee6", [], 0x70, 0xb8, 0xf0}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local}}}}]}]}, 0x5c8) 03:36:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40000, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 03:36:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x803, 0x7) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x7}]}}}]}, 0x3c}}, 0x0) 03:36:49 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x2000400) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000940)) 03:36:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r1, &(0x7f0000000140)=""/187, 0xbb, 0x0, &(0x7f0000000280)=@ax25={0x3, {"65e40a94e65d9a"}}, 0x709000) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 03:36:49 executing program 1: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@umask={'umask'}}]}) 03:36:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000100)) 03:36:50 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 892.265796] resize option for remount only [ 892.303675] resize option for remount only 03:36:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x13}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000440)) 03:36:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x17}}) close(r2) close(r1) 03:36:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 03:36:50 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1c3) setresuid(r1, 0x0, 0x0) ioprio_set$uid(0x3, r1, 0x0) 03:36:50 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x2000400) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000940)) 03:36:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40000, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 03:36:50 executing program 3: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) recvmmsg(r2, &(0x7f0000003640)=[{{&(0x7f0000001f00)=@xdp, 0x80, &(0x7f0000003580)=[{&(0x7f00000020c0)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, &(0x7f00000036c0)={0x0, 0x1c9c380}) recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f0000003fc0)=@hci, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004040)=""/201, 0xc9}], 0x1, &(0x7f0000004640)=""/208, 0xd0}}], 0x1, 0x0, 0x0) close(r2) close(r1) 03:36:50 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:50 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000100)=0xf922, 0x4) 03:36:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r1, &(0x7f0000000140)=""/187, 0xbb, 0x0, &(0x7f0000000280)=@ax25={0x3, {"65e40a94e65d9a"}}, 0x709000) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 03:36:50 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d6f64653d303030303030303017"]) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) 03:36:50 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000013000/0x1000)=nil, 0x2302}) 03:36:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [0xc0010058, 0x1]}) 03:36:50 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x402) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)={0x29, 0x4, 0x0, {0x0, 0x9, 0x1, 0x0, [0x0]}}, 0x29) 03:36:50 executing program 3: pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x3ffffffffb) flock(r0, 0x7fffffffffeffffd) [ 892.683581] tmpfs: Bad value '00000000' for mount option 'mode' [ 892.697452] kvm [29344]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1 [ 892.736550] tmpfs: Bad value '00000000' for mount option 'mode' 03:36:51 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tgkill(r2, r2, 0x2e) wait4(r2, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) 03:36:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000084}]}) 03:36:51 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000140)={0xcc73}) 03:36:51 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0xffffff85, 0x7, 0x2, 0x1, 0x8}]}, &(0x7f0000f6bffb), 0x0, 0xfffffe21, &(0x7f00001a7f05)=""/251}, 0x18) 03:36:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x2}, 0x48) 03:36:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r1, &(0x7f0000000140)=""/187, 0xbb, 0x0, &(0x7f0000000280)=@ax25={0x3, {"65e40a94e65d9a"}}, 0x709000) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 03:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40000, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 03:36:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}, 0x5}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x5, "f50f02"}], 0x18}}], 0x2, 0x0) 03:36:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001100)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 03:36:51 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="0d43b7057acfb01f48fd1ddf667540cbe37494b4e376a6ac63c29a7fca9db9656088", 0x22}], 0x1, &(0x7f0000000040)}, 0x0) 03:36:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 03:36:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000084}]}) 03:36:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001100)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 03:36:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x1) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x1012, r3, 0x0) ioctl(r1, 0xc0884123, &(0x7f0000001f64)) 03:36:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c5603067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:36:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001100)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 03:36:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000100)) 03:36:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000084}]}) 03:36:51 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000140)={0xcc73}) 03:36:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c5603067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:36:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001100)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 03:36:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000084}]}) 03:36:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000100)) 03:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40000, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 03:36:51 executing program 6: r0 = socket(0x2, 0x802, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x100000000000000, {0x0, @broadcast, 'ip6_vti0\x00'}}, 0x1e) 03:36:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") poll(&(0x7f0000000040)=[{r1}], 0x1, 0x7fffffff) sendfile(r1, r2, &(0x7f0000000140), 0x8402) 03:36:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c5603067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:36:51 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000ad5000)) 03:36:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000100)) 03:36:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/49) 03:36:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c5603067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 03:36:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") read(r0, &(0x7f0000fb6000)=""/28, 0x293) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0xfeffffff, 0x0, 'client0\x00', 0x0, "5aa1f2be831635b2", "2587bb32e570348ef8436daab699366c9aecbf41f9931e9d5275629520c0df5e"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:36:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000100)) 03:36:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 03:36:52 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000140)={0xcc73}) 03:36:52 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x1000000, &(0x7f0000000200), &(0x7f0000000100), 0x0) 03:36:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 03:36:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) rmdir(&(0x7f0000000040)='./file0\x00') 03:36:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a001f00ff03f4f9002304000a04f511080001000201007d0800028001000400", 0x24) 03:36:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00`', 0xffeffffffffffffd}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x2, 0xf6, 0xfa95}, 0xa) 03:36:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 03:36:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)='@', 0x1) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=""/126, &(0x7f00000000c0)=0x7e) 03:36:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) rmdir(&(0x7f0000000040)='./file0\x00') 03:36:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) rmdir(&(0x7f0000000040)='./file0\x00') 03:36:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) 03:36:52 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000140)={0xcc73}) 03:36:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) rmdir(&(0x7f0000000040)='./file0\x00') [ 894.580100] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.587359] bridge0: port 1(bridge_slave_0) entered disabled state 03:36:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5441, &(0x7f0000000000)) 03:36:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) rmdir(&(0x7f0000000040)='./file0\x00') 03:36:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) 03:36:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) rmdir(&(0x7f0000000040)='./file0\x00') 03:36:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) rmdir(&(0x7f0000000040)='./file0\x00') 03:36:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 03:36:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000002640)='net/ip_vs_stats_percpu\x00') preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000340)=""/43, 0x2b}], 0x1, 0x1a) 03:36:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x716}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:36:53 executing program 3: clone(0x0, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000500), &(0x7f0000000480)) waitid(0x0, 0x0, &(0x7f0000002ff0), 0x4100000c, &(0x7f0000000000)) 03:36:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x431, &(0x7f0000000180)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x71, &(0x7f0000000300), &(0x7f0000000000)=""/113}, 0x48) 03:36:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000580)="0a5cc80700315f85715070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000540)={[{@fat=@sys_immutable='sys_immutable'}]}) 03:36:53 executing program 2: getrandom(&(0x7f0000000480)=""/246, 0xf6, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) 03:36:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) [ 895.261666] FAT-fs (loop0): bogus number of reserved sectors [ 895.267693] FAT-fs (loop0): Can't find a valid FAT filesystem [ 895.306663] FAT-fs (loop0): bogus number of reserved sectors [ 895.312588] FAT-fs (loop0): Can't find a valid FAT filesystem 03:36:53 executing program 4: mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000340)=""/70, 0x148, &(0x7f00000001c0)=""/123}}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000c40)) close(r0) 03:36:53 executing program 1: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000001640), 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000040)="92a88ed40ca365e96b138d573ae703afe0680a8d7ef762f39fd5f790ffffffdf137dc737f5953735c9e86297d2a3cbc679e5a12ea1e14a8b68f6cdcd62e119311b04ba5e0effc1dd46fbba8099ea73aa23f5de9a0523e61fafb03fe7682d9ce61c0450032e369ce18a7ea3bd10e75a4efdecd23143c9bd8d", 0x78) 03:36:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2286, 0x0) 03:36:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:36:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000580)="0a5cc80700315f85715070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000540)={[{@fat=@sys_immutable='sys_immutable'}]}) 03:36:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x88, 0x1ff) recvmmsg(r1, &(0x7f0000008400)=[{{&(0x7f00000081c0)=@l2, 0x80, &(0x7f00000082c0), 0x0, &(0x7f0000008300)=""/231, 0xe7}}], 0x1, 0x0, &(0x7f0000008640)) 03:36:53 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x10001}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x0, 0x4}, 0x8) 03:36:53 executing program 7: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) 03:36:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x200003, 0x25, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 03:36:53 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) [ 895.510019] FAT-fs (loop0): bogus number of reserved sectors [ 895.515954] FAT-fs (loop0): Can't find a valid FAT filesystem 03:36:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:36:53 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) 03:36:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000580)="0a5cc80700315f85715070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000540)={[{@fat=@sys_immutable='sys_immutable'}]}) [ 895.645585] sock: sock_set_timeout: `syz-executor1' (pid 29615) tries to set negative timeout [ 895.657844] sock: sock_set_timeout: `syz-executor1' (pid 29617) tries to set negative timeout 03:36:53 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 03:36:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 895.686771] FAT-fs (loop0): bogus number of reserved sectors [ 895.693459] FAT-fs (loop0): Can't find a valid FAT filesystem 03:36:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r5, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000002, 0x20012, r5, 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xffffffee) read(r2, &(0x7f0000000000)=""/126, 0xfffffeab) dup2(r2, r4) 03:36:54 executing program 4: mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000340)=""/70, 0x148, &(0x7f00000001c0)=""/123}}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000c40)) close(r0) 03:36:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0xa, 0x8) dup2(r0, r1) 03:36:54 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 03:36:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000580)="0a5cc80700315f85715070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000540)={[{@fat=@sys_immutable='sys_immutable'}]}) 03:36:54 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:36:54 executing program 7: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) [ 896.088073] FAT-fs (loop0): bogus number of reserved sectors [ 896.094080] FAT-fs (loop0): Can't find a valid FAT filesystem 03:36:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:54 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 03:36:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0xa, 0x8) dup2(r0, r1) 03:36:54 executing program 7: r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r2, 0x0) recvmsg(r1, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 03:36:54 executing program 3: mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000340)=""/70, 0x148, &(0x7f00000001c0)=""/123}}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000c40)) close(r0) 03:36:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x43716f8f5a7fc148) 03:36:54 executing program 4: mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000340)=""/70, 0x148, &(0x7f00000001c0)=""/123}}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000c40)) close(r0) 03:36:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0xa, 0x8) dup2(r0, r1) 03:36:54 executing program 2: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000000), 0xff) 03:36:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240000000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0xf, &(0x7f0000000040), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, 'port0\x00'}) 03:36:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x20000000004, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/181}, 0x14) 03:36:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x10}]}}}]}, 0x3c}}, 0x0) 03:36:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0xa, 0x8) dup2(r0, r1) 03:36:54 executing program 2: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000000), 0xff) 03:36:54 executing program 3: mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000340)=""/70, 0x148, &(0x7f00000001c0)=""/123}}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000c40)) close(r0) 03:36:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000040)=0xc8, 0x4) 03:36:54 executing program 0: r0 = userfaultfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x26}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) prctl$intptr(0x29, 0x2) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) read(r0, &(0x7f0000000400)=""/100, 0x64) 03:36:54 executing program 2: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000000), 0xff) 03:36:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3b, &(0x7f0000000000)={@loopback}, 0x20) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000000c0), 0x8) close(r1) socket$inet6(0xa, 0x1000000000002, 0x0) dup3(r1, r2, 0x0) [ 896.701750] netlink: 'syz-executor6': attribute type 16 has an invalid length. 03:36:54 executing program 5: capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)) bpf$MAP_CREATE(0x13, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) 03:36:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000040)=0xc8, 0x4) 03:36:54 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 03:36:54 executing program 4: mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000340)=""/70, 0x148, &(0x7f00000001c0)=""/123}}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000c40)) close(r0) 03:36:54 executing program 2: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000000), 0xff) 03:36:54 executing program 3: mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000340)=""/70, 0x148, &(0x7f00000001c0)=""/123}}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000c40)) close(r0) 03:36:54 executing program 5: capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)) bpf$MAP_CREATE(0x13, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) 03:36:54 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)="6576656e7473000000c7aaff0fb0c79b9391e4ae6459d80000000000", 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086607, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 03:36:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8}}) 03:36:55 executing program 5: capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)) bpf$MAP_CREATE(0x13, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) 03:36:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) 03:36:55 executing program 1: clone(0x200, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000080)) mknod(&(0x7f0000000000)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), &(0x7f0000001640)) r0 = syz_open_procfs(0x0, &(0x7f0000000680)="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") read(r0, &(0x7f00000000c0)=""/245, 0x3bd) write$P9_RSTAT(r0, &(0x7f0000000a00)={0x380, 0x7d, 0x0, {0x0, 0x379, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, "", 0x194, "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", 0x1e, '{ppp1proceth1vmnet0\'loeth0\\:$\x00', 0x194, "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"}}, 0x380) open$dir(&(0x7f0000000080)='./file0\x00', 0x289, 0x0) 03:36:55 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002840)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002340), 0x0, &(0x7f0000002880)}}], 0x1, 0x0) 03:36:55 executing program 5: capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)) bpf$MAP_CREATE(0x13, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) 03:36:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000200)=""/219, 0xdb) 03:36:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=r1) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000000c0)=':', 0x1, 0x1, 0x0, 0x0) 03:36:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f70000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0xfc, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", &(0x7f0000000380)=""/252}, 0x28) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:36:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000040)=0xc8, 0x4) 03:36:55 executing program 5: personality(0x1bb2baf3005ac137) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f000002b000)='./file0\x00', 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r1, 0x0) 03:36:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000040)=0xc8, 0x4) 03:36:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 03:36:55 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@gettaction={0x18, 0x32, 0x101, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 03:36:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 03:36:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000200)=""/219, 0xdb) 03:36:55 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @remote, 'syzkaller1\x00'}}, 0x1e) 03:36:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f70000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0xfc, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", &(0x7f0000000380)=""/252}, 0x28) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:36:55 executing program 5: r0 = socket$inet(0x2, 0x200000000003, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) [ 897.611998] tc_dump_action: action bad kind 03:36:55 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local}], 0x1c) 03:36:55 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffffffffffe75) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@random="b100485caa2a", @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000140)) 03:36:55 executing program 5: r0 = socket$inet(0x2, 0x200000000003, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 03:36:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000200)=""/219, 0xdb) 03:36:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f70000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0xfc, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", &(0x7f0000000380)=""/252}, 0x28) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:36:55 executing program 6: add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 03:36:55 executing program 5: r0 = socket$inet(0x2, 0x200000000003, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 03:36:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)={0x0, @broadcast, @dev}, &(0x7f00000000c0)=0xc) r1 = openat$cgroup_procs(r0, &(0x7f0000007480)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x28013, r1, 0x0) 03:36:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f70000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0xfc, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", &(0x7f0000000380)=""/252}, 0x28) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:36:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) 03:36:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="df", 0x1, 0x40041, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 03:36:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000000200)=""/219, 0xdb) 03:36:56 executing program 5: r0 = socket$inet(0x2, 0x200000000003, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 03:36:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd000000090001000b0aa8f7410400000000fcff", 0x58}], 0x1) 03:36:56 executing program 7: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/dev/loop#\x00') 03:36:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') read$FUSE(r1, &(0x7f0000000540), 0x1000) 03:36:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 03:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001500192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000a0c0c00fcff0000040e05a5", 0x58}], 0x1) 03:36:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@dead_binder_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000f80)}) 03:36:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000180)) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x100000001, 0x80000001}) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) [ 898.362772] Dead loop on virtual device ip6_vti0, fix it urgently! [ 898.397045] Dead loop on virtual device ip6_vti0, fix it urgently! 03:36:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="f200c40671cbeac65705a4463c11d24353441af42b91ca0b2d17d1e56547f7b6c4106009ef9c2eaf0e83c520bc2621c384ea19295b045d5a5d83722d99d5245d75315a5fa46487641f9307ff1b2a2b000c8b7766b2191b088d0dd5199510ad7d6b9c80396e95a9766203cccde3fb8b278e4583721b521f2d", 0x78) 03:36:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x169) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "f17b8ddd"}, 0x8) 03:36:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f000000f000), 0xc, &(0x7f0000bd7000)={&(0x7f0000c91000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}, @algo_aead={0x4c, 0x12, {{'rfc4309(rfc4309(rfc7539(xts(twofish),rmd320-generic)))\x00'}}}]}, 0x144}}, 0x0) 03:36:56 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, r1) setresuid(r1, r1, 0x0) 03:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:56 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x810c5701, &(0x7f0000000100)) 03:36:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) 03:36:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_sco(r1, &(0x7f0000000040), 0x8) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10) listen(r1, 0x0) accept(r1, &(0x7f0000000080)=@can, &(0x7f0000000000)=0x33) 03:36:56 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') lseek(r1, 0x16, 0x0) 03:36:56 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080), 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) 03:36:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)) 03:36:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:57 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x21f}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000280)) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) shmget(0xffffffffffffffff, 0x1000, 0x60, &(0x7f0000ffe000/0x1000)=nil) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) fadvise64(r2, 0x0, 0xffffffffffff0001, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) ioctl$UI_DEV_DESTROY(r3, 0x5502) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/94, 0x5e, 0x0, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r2, &(0x7f0000000180)={0x18}, 0x18) 03:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/softnet_stat\x00') r1 = socket$kcm(0x29, 0x805, 0x0) write$binfmt_aout(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\b'], 0x1) sendfile(r1, r0, &(0x7f0000301ff8), 0x6) 03:36:57 executing program 3: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7fff, 0x338) sendto$inet6(r0, &(0x7f0000000080), 0x1e8, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 03:36:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 03:36:57 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000180), 0x0) 03:36:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4048ae9b, &(0x7f0000000200)={0xfffffdfd}) ioctl$KVM_GET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000300)) 03:36:57 executing program 2: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1000f3070000000000000048b153"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 03:36:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f00000000c0)=0x10) 03:36:57 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140), 0xf}]) 03:36:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) 03:36:57 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/39}, 0x18) 03:36:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000007126000000000000bf67000000000000570600000f0000006706000002000000070600000ee619f2bf250000000000001f6500000000000067070000000000000707000099741df70f75000000000000bf5400000000000007000000040000003d43010000000000950000000000000061160000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:36:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x5}, {0x6}]}, 0x10) 03:36:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000040)=0x880000000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0227ec195fd610c5c72070") ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f857140") sendto(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2ed) 03:36:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 899.973498] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value 03:36:58 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x21f}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000280)) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) shmget(0xffffffffffffffff, 0x1000, 0x60, &(0x7f0000ffe000/0x1000)=nil) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) fadvise64(r2, 0x0, 0xffffffffffff0001, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) ioctl$UI_DEV_DESTROY(r3, 0x5502) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/94, 0x5e, 0x0, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r2, &(0x7f0000000180)={0x18}, 0x18) 03:36:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66702e666174000204070a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@flush='flush'}]}) 03:36:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x0, 0x0, 0x102, 0x0, [0xfffffffe]}) dup3(r0, r1, 0x0) 03:36:58 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb674) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 03:36:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x0, 0x0, 0x400000b7]}) 03:36:58 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2}, 0x4c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f00000003c0)="0e1ecaef92e2e864850de91914f5222488e7beed33f6f50c96019005c75d5972e5b5d4450c96fcedddffe187be83c04041530c823b2860cc519d5f683638682b9910211d4e99e0a805a9d3dc49def65a8f1481b48469398ba3ebe45008fbc6c796070cb060d5aef3c7b00f0e8a59008e5bba558f13eb80b5f87cb3d53f78d3a279e9", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) shutdown(r1, 0x1) 03:36:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 03:36:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x19, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) [ 900.107145] FAT-fs (loop5): Directory bread(block 2569) failed [ 900.115934] FAT-fs (loop5): Directory bread(block 2570) failed [ 900.124588] FAT-fs (loop5): Directory bread(block 2571) failed [ 900.133836] FAT-fs (loop5): Directory bread(block 2572) failed [ 900.150846] FAT-fs (loop5): Directory bread(block 2573) failed [ 900.165691] FAT-fs (loop5): Directory bread(block 2574) failed [ 900.178336] FAT-fs (loop5): Directory bread(block 2575) failed [ 900.201727] FAT-fs (loop5): Directory bread(block 2576) failed 03:36:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x20f, 0x0, 0x1e8da990}]}) [ 900.218555] FAT-fs (loop5): Directory bread(block 2577) failed [ 900.225907] FAT-fs (loop5): Directory bread(block 2578) failed 03:36:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5207, &(0x7f0000000040)) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400), &(0x7f0000000440)='trusted,:self,wlan0\x00', 0xffffffffffffffff) 03:36:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) 03:36:58 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 03:36:58 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0xa, 0x0, 0x0, &(0x7f0000000140), 0x4000000000000231}, 0x3f) 03:36:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") prctl$setmm(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) prctl$setmm(0x23, 0x4000000000000001, &(0x7f0000ff1000/0x2000)=nil) 03:36:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5207, &(0x7f0000000040)) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400), &(0x7f0000000440)='trusted,:self,wlan0\x00', 0xffffffffffffffff) 03:36:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="50907800005ba2779e5d538bcd2e59dc8deec9f7a9df8c7ac6f717dcc9ba273a64d77e3a8ba08c957eaa6cbab600a08e875131d02bb02658cb66b680fa5df978"], &(0x7f00000002c0)) 03:36:58 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x21f}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000280)) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) shmget(0xffffffffffffffff, 0x1000, 0x60, &(0x7f0000ffe000/0x1000)=nil) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) fadvise64(r2, 0x0, 0xffffffffffff0001, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) ioctl$UI_DEV_DESTROY(r3, 0x5502) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/94, 0x5e, 0x0, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r2, &(0x7f0000000180)={0x18}, 0x18) 03:36:58 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0xa, 0x0, 0x0, &(0x7f0000000140), 0x4000000000000231}, 0x3f) 03:36:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f00000004c0)="2400000021002551071c0165ff0ffc020200000000100f000ee1000c08000a000001a000bc0000008f3943793a5ea67658cb22b79489bbdd14f6fd59b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c483daabb7e919e204853d48a5a6bd525801d5cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1acb78ce510c7e060f433314f5a171b182deb7904", 0xe0) 03:36:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5207, &(0x7f0000000040)) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400), &(0x7f0000000440)='trusted,:self,wlan0\x00', 0xffffffffffffffff) 03:36:58 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)) 03:36:58 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) close(r0) 03:36:58 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f0000000000), 0x8) read$FUSE(r0, &(0x7f0000001040), 0x1000) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) 03:36:59 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0xa, 0x0, 0x0, &(0x7f0000000140), 0x4000000000000231}, 0x3f) 03:36:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5207, &(0x7f0000000040)) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400), &(0x7f0000000440)='trusted,:self,wlan0\x00', 0xffffffffffffffff) 03:36:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) close(r0) 03:36:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) 03:36:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x24, 0x25}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffd, 0xc3, &(0x7f0000000200)=""/195}, 0x48) 03:36:59 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 03:36:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) close(r0) 03:36:59 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0xa, 0x0, 0x0, &(0x7f0000000140), 0x4000000000000231}, 0x3f) 03:36:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x5, 0x80, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000200)}, 0x10) [ 901.345840] syz-executor3[30161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 03:36:59 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x21f}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000280)) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) shmget(0xffffffffffffffff, 0x1000, 0x60, &(0x7f0000ffe000/0x1000)=nil) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) fadvise64(r2, 0x0, 0xffffffffffff0001, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) ioctl$UI_DEV_DESTROY(r3, 0x5502) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/94, 0x5e, 0x0, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r2, &(0x7f0000000180)={0x18}, 0x18) 03:36:59 executing program 5: r0 = memfd_create(&(0x7f0000000040)='vboxnet1\'vboxnet1\\\\@}-%]\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 03:36:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) close(r0) 03:36:59 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x100000000000c}}) 03:36:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240000000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0xf, &(0x7f0000000040), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 03:36:59 executing program 6: clone(0x0, &(0x7f0000000000)="37ed9329dd02be7f0f8aeb94e9", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x20000000) 03:37:00 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f0000000000), 0x8) read$FUSE(r0, &(0x7f0000001040), 0x1000) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) 03:37:00 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000400020423dcffdf00", 0x1f) 03:37:00 executing program 5: r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:37:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240000000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0xf, &(0x7f0000000040), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") [ 901.347676] syz-executor3[30161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 902.188952] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 03:37:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0x0, 0x150, 0x0, 0x0, 0x150, 0x330, 0x330, 0x330, 0x330, 0x330, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc8, 0x128}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}, {{@ipv6={@dev, @empty, [], [], 'team_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) close(r2) close(r1) 03:37:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000200)={{0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x0, 0x1}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000001000)=""/246) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 03:37:00 executing program 5: r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 902.273074] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 03:37:00 executing program 5: r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 902.322500] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 902.323233] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 03:37:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r4 = syz_open_pts(r0, 0x0) dup2(r3, r2) close(r1) dup2(r2, r4) 03:37:00 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r0, &(0x7f0000000100)="ae35aac347f0748b1e5ebc9ca71ca6fae6f2196d", 0x14, 0x400c890, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 03:37:00 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:37:00 executing program 5: r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:37:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 03:37:00 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:37:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)}, 0x8080) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x100000001) [ 902.930757] binder: 30254:30256 ioctl 40046205 0 returned -22 [ 902.959077] binder: 30254:30256 ioctl 40046205 0 returned -22 03:37:01 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000200)=0x7, 0x4) 03:37:01 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f0000000000), 0x8) read$FUSE(r0, &(0x7f0000001040), 0x1000) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) 03:37:01 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:37:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x5000000000020a42, 0x0) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r1, 0x40007) sendfile(r0, r1, &(0x7f000064d000)=0x4, 0x40fffffffd) 03:37:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:37:01 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000400)={0x1, "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"}, 0xfd1, 0x0) msgrcv(r0, &(0x7f0000000240)={0x0, ""/79}, 0xfc99, 0x0, 0xa4a3ad41a879dde0) 03:37:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240000000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0xf, &(0x7f0000000040), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 03:37:01 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}], 0x2, &(0x7f000000e840)=""/229, 0x24}}], 0x1, 0x0, &(0x7f000000ff40)={0x0, 0x1c9c380}) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 03:37:01 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) 03:37:01 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000407000000000e0ff40000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x100, &(0x7f0000000400)="43a000800000000c000000000000", &(0x7f0000000140)=""/256}, 0x28) 03:37:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) 03:37:01 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 903.486361] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.493898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 03:37:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") mmap(&(0x7f0000016000/0x3000)=nil, 0x3000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4800000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmmsg(r1, &(0x7f0000001180)=[{{&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x0) close(r1) [ 903.599234] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value 03:37:01 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 903.640103] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.647714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 903.661160] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value 03:37:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) [ 903.688382] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.695900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 903.728209] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.735775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 03:37:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4) [ 903.775253] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value [ 903.785799] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.793487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 903.806590] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.814231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 03:37:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) [ 903.825725] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.834936] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.915177] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 903.929666] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value [ 903.947053] netlink: 'syz-executor6': attribute type 29 has an invalid length. 03:37:02 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f0000000000), 0x8) read$FUSE(r0, &(0x7f0000001040), 0x1000) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) 03:37:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) lremovexattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)=@random={'os2.', 'group_id'}) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) 03:37:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)="6263736630000000000000001100") 03:37:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240000000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0xf, &(0x7f0000000040), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 03:37:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000), &(0x7f0000000140)=0x4) 03:37:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) write$FUSE_ATTR(r0, &(0x7f0000000480)={0x78, 0x0, 0x3}, 0x78) 03:37:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x14c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'gre0\x00'}) 03:37:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) 03:37:10 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100), 0x10) 03:37:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f00000005c0)=0x0) getpid() getuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0x13) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) r6 = shmat(0x0, &(0x7f0000fee000/0x11000)=nil, 0x1000) shmdt(r6) getgid() sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="cbc2c09619adc4609db15283d8c4960f1ae2d23a69ecdf6ed737b73db69e874bf2a5d1ad0d65b8fdf99c84f100dc2029848ec0c9776329d47756672bc9d4cd18b319c2fe14e694a64dfb97f0b5d0b452240f91e8100ab3aa5dfe58423270c05cc7925786dd5835508df9af07b35a668436acb1eef58dd77d1af1f2458e0b96e46e77608cf0b0378fb0cec0", 0x8b}], 0x1, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4000}], 0x1, 0x40000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000700)={0x6, 0x1, 0xa5, 0x7, 0x3}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x1555a24f97ac8484, 0x0) write$9p(r7, &(0x7f0000000800)="b91f939a412266afff238e91f093d868e7d6a43c744ce4ad2720", 0x1a) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)=0x1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x20, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0x101, 0x8, 0x5, 0x7fff, 0x1, 0x9, 0x7f, 0x100000001}, &(0x7f0000000880)={0x1, 0x9, 0xffffffff80000000, 0x125, 0x9, 0x2, 0x6, 0x401}, &(0x7f00000008c0)={0x8000, 0x100000000000000, 0xd1e, 0x7, 0x7, 0x1, 0xff, 0x7}, &(0x7f0000000940)={r8, r9/1000+30000}) fgetxattr(r7, &(0x7f0000000740)=@known='com.apple.system.Security\x00', &(0x7f0000000780)=""/80, 0x50) 03:37:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85322, &(0x7f0000000080)) 03:37:10 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) [ 912.274724] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value [ 912.306390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:37:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) 03:37:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x9}) [ 912.330131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 912.352676] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.406980] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 912.432167] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 03:37:10 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xffffffee) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) write$P9_RWSTAT(r3, &(0x7f0000000140)={0x5}, 0x1) dup2(r1, r2) [ 912.454050] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready 03:37:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f00000002c0)={0x1c, 0x28, 0x10000000000005, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="02"]}]}, 0x1c}}, 0x0) [ 912.478237] IPv6: ADDRCONF(NETDEV_UP): wlan3: link is not ready [ 912.498095] IPv6: ADDRCONF(NETDEV_UP): wlan4: link is not ready [ 912.524690] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 912.530978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 912.549531] IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready [ 912.555794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 912.564030] IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready [ 912.570242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 912.579749] IPv6: ADDRCONF(NETDEV_UP): bond4: link is not ready [ 912.586007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 912.594845] IPv6: ADDRCONF(NETDEV_UP): wlan5: link is not ready [ 912.604448] IPv6: ADDRCONF(NETDEV_UP): wlan6: link is not ready [ 912.612698] IPv6: ADDRCONF(NETDEV_UP): wlan7: link is not ready [ 912.622244] IPv6: ADDRCONF(NETDEV_UP): wlan8: link is not ready 03:37:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 912.630495] IPv6: ADDRCONF(NETDEV_UP): wlan9: link is not ready 03:37:10 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 03:37:10 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 03:37:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0x1, 0x0, &(0x7f0000000000)=[@cr4={0x1, 0x400}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@', &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) 03:37:10 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 03:37:10 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) 03:37:10 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 03:37:10 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xbe65, @empty, 0x1f}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x100000001, 0x7c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0xce0, 0x4) write$eventfd(r1, &(0x7f0000605ff8), 0xffbe) 03:37:10 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000014c0)) msgsnd(r0, &(0x7f0000be2f0a)={0x2}, 0x0, 0x0) msgrcv(r0, &(0x7f0000745000)={0x0, ""/4096}, 0x1008, 0x0, 0x0) 03:37:10 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 03:37:10 executing program 3: timer_create(0x7, &(0x7f0000000300)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, r0+30000000}, {0x0, r1+10000000}}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) 03:37:11 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) io_setup(0x1f0, &(0x7f0000000000)=0x0) listen(r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="ab", 0x1}]) 03:37:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x430, 0x118, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000000), {[{{@arp={@empty, @local, 0x0, 0x0, @empty, {}, @empty, {}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 'teql0\x00', 'ip_vti0\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@arp={@remote, @multicast1, 0x0, 0xffffff00, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x4, 0x7, 0x0, 0x3, 0x100000001, 'irlan0\x00', 'teql0\x00'}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) close(r0) 03:37:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x800442d2, &(0x7f0000000080)={0x0, 0x3f}) 03:37:11 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 03:37:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) write(r1, &(0x7f0000000040), 0xff4a) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) 03:37:11 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x9, 0x0, "9cce9d6551c0ce509ef3a0afa558c8e5449fa27be444cc621b3216aa50d65c9beb61d0b4b5a0d18d61328109166ef289cedb65e9c9a3160994c5a6ad186531326b0b5a8d6ca761c7eb68fa2b74ac0f9c"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="94", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000010, &(0x7f00004daff0)={0x2, 0x0, @loopback}, 0x10) 03:37:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f000000a3c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007d80), 0x0, &(0x7f0000007dc0)}}, {{&(0x7f0000008f40)=@nfc, 0x80, &(0x7f000000a280), 0x2ec, &(0x7f000000a300)}, 0x2}], 0x2, 0x0) 03:37:11 executing program 4: r0 = socket$inet(0x2, 0x803, 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1}) 03:37:11 executing program 7: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 03:37:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x430, 0x118, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000000), {[{{@arp={@empty, @local, 0x0, 0x0, @empty, {}, @empty, {}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 'teql0\x00', 'ip_vti0\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@arp={@remote, @multicast1, 0x0, 0xffffff00, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x4, 0x7, 0x0, 0x3, 0x100000001, 'irlan0\x00', 'teql0\x00'}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) close(r0) 03:37:11 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000f5001200bfa30000000000000703000000f6ffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6a05000000000065040400010000000404000001000000b705000004009a056a0a00fe00000000850000000a000000b7000000000000009500000000000000f99f815922bf7a31cbae15d634d000e9fab83a220de8f6f2c072b2df7bf82375a1c837fce926de67d63908658a2237ffc4bf9dde3aa747b704b97a2b68af668a9ba9cf2c5b0804dcabfcd4fcce60cf666efb22c5daa3dc67ad8ff140f2f1f00b1e066f6b125755e8f2018fc8557013a79457eb13893b92d38864e63ff7ea9643ace55ce296d8c6714670c9ee77cfe2b5373cb4a74e6f4fc9ba701d959d3f65c7a88a2a8263838de94c584fadc0a1184a9c03643ce0498ea1868d870500fc6dc0c86a88bdc2b0e3aa9a814b4f24e4b3722bd869b3dbeee8bba10567e70265cebdb8e4c538d8a41cf9b4e58755592427dcceb7d1ed82708c42fb6bdae4174486ff743e98785a83aa8b"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x4a, &(0x7f0000000080)="b5bbec02108f84a83520d926997a", &(0x7f0000000100)=""/74}, 0x28) 03:37:11 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)={[{@four_active_logs='active_logs=4'}]}) 03:37:11 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 03:37:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000240)={0x0, 0x2000000001, 0x2, &(0x7f0000000080)}) 03:37:11 executing program 1: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x20, 0x0, 0x8000) 03:37:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4c, 0x3, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f000051e000)={r1, &(0x7f00000002c0), &(0x7f0000950000)}, 0x20) [ 913.581010] f2fs_msg: 20 callbacks suppressed [ 913.581025] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 913.592807] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 913.617307] attempt to access beyond end of device [ 913.622413] loop5: rw=12288, want=8200, limit=20 03:37:11 executing program 3: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @queue}], 0x30) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 03:37:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x430, 0x118, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000000), {[{{@arp={@empty, @local, 0x0, 0x0, @empty, {}, @empty, {}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 'teql0\x00', 'ip_vti0\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@arp={@remote, @multicast1, 0x0, 0xffffff00, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x4, 0x7, 0x0, 0x3, 0x100000001, 'irlan0\x00', 'teql0\x00'}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) close(r0) [ 913.635512] F2FS-fs (loop5): invalid crc value [ 913.641437] attempt to access beyond end of device [ 913.646527] loop5: rw=12288, want=12296, limit=20 [ 913.652228] F2FS-fs (loop5): invalid crc value [ 913.656954] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 913.677328] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 913.684571] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 913.697597] attempt to access beyond end of device [ 913.702725] loop5: rw=12288, want=8200, limit=20 [ 913.722629] F2FS-fs (loop5): invalid crc value [ 913.727713] attempt to access beyond end of device 03:37:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) close(r0) 03:37:11 executing program 1: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 03:37:11 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x200000000006, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000c6000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000230000006a0a00fe000000008500000036000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0xd2, &(0x7f0000001640)="bf1bede299067d34645faebd0357", &(0x7f00000016c0)=""/210, 0xf000}, 0x28) 03:37:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 913.732757] loop5: rw=12288, want=12296, limit=20 [ 913.739237] F2FS-fs (loop5): invalid crc value [ 913.744017] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 913.802402] attempt to access beyond end of device [ 913.807862] loop5: rw=12288, want=8200, limit=20 [ 913.836762] attempt to access beyond end of device [ 913.841933] loop5: rw=12288, want=12296, limit=20 03:37:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x430, 0x118, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000000), {[{{@arp={@empty, @local, 0x0, 0x0, @empty, {}, @empty, {}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 'teql0\x00', 'ip_vti0\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@arp={@remote, @multicast1, 0x0, 0xffffff00, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x4, 0x7, 0x0, 0x3, 0x100000001, 'irlan0\x00', 'teql0\x00'}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) close(r0) [ 913.861090] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 913.870670] attempt to access beyond end of device [ 913.871559] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 913.876499] loop5: rw=12288, want=8200, limit=20 [ 913.876739] attempt to access beyond end of device [ 913.895700] loop5: rw=12288, want=12296, limit=20 03:37:11 executing program 4: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x551}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(0xffffffffffffffff, &(0x7f0000000140)="f9d8f77e888236b6e83ce03d1a06cfc9562b3c73ca3d07ddbd54fc", 0x1b, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='{@&em0\x00', 0x7, 0x3) unshare(0x40000000) 03:37:11 executing program 7: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) write(r1, &(0x7f0000001800)="42869ff3a7dd0f82bd6a65c66b69dce3630ad3de7c621589f3e07afe091c4e0df1198bc1ac578b196fe0de5777332a7a3799390a36cc6acb425c029df8517c92e7e4c46cff43c5ef0608c6f0135c522b2addb1986f7ccef6454a3c2ee51b602485c6c85b6d285a8b0f6eee05d55229b1430f628cbc59c783c5cfae389336a3d4093eb804bdd720392767fd1987137e56c1570d15e4c221dce7813bf257da45fe9a5438f48ec213723e2b2bf92d5bd8f54db52602d2c8e8dda85d735224b93eed", 0xc0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c) 03:37:11 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") open(&(0x7f00000000c0)='./file0\x00', 0x2241, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)="5f97a87b32fce6b85972143a05ddfe4cf4046ff533699830e7345831398eeb8661a5530fce5a95f416cbaf3cf2509d9c17306042eff5ec") 03:37:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) close(r1) 03:37:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 03:37:11 executing program 1: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 03:37:12 executing program 1: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 03:37:12 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='security.s'], &(0x7f0000000100)='\x00', 0x1, 0x0) llistxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)=""/15, 0x0) 03:37:12 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") open(&(0x7f00000000c0)='./file0\x00', 0x2241, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)="5f97a87b32fce6b85972143a05ddfe4cf4046ff533699830e7345831398eeb8661a5530fce5a95f416cbaf3cf2509d9c17306042eff5ec") [ 914.108253] hugetlbfs: Bad mount option: "_—¨{2üæ¸Yr:ÝþLôoõ3i˜0ç4X19Žë†a¥SÎZ•ô˯<òPœ0`Bïõì" [ 914.129911] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 914.140380] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 03:37:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x1, &(0x7f0000001400), &(0x7f0000000140)=0x14) 03:37:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 03:37:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0x10}], 0xf}}], 0x1, 0x0) 03:37:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getrlimit(0x4000, &(0x7f0000000080)) 03:37:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'syzkaller0\x00'}) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='gre0\x00', 0x10) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000000)='u', 0x1}], 0x1, &(0x7f0000275000)}}], 0x1, 0x48084) shutdown(r1, 0x200000000002) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)) [ 914.275744] hugetlbfs: Bad mount option: "_—¨{2üæ¸Yr:ÝþLôoõ3i˜0ç4X19Žë†a¥SÎZ•ô˯<òPœ0`Bïõì" 03:37:12 executing program 1: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 03:37:12 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") open(&(0x7f00000000c0)='./file0\x00', 0x2241, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)="5f97a87b32fce6b85972143a05ddfe4cf4046ff533699830e7345831398eeb8661a5530fce5a95f416cbaf3cf2509d9c17306042eff5ec") [ 914.347914] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 914.358416] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 914.464997] hugetlbfs: Bad mount option: "_—¨{2üæ¸Yr:ÝþLôoõ3i˜0ç4X19Žë†a¥SÎZ•ô˯<òPœ0`Bïõì" [ 914.643674] IPVS: ftp: loaded support on port[0] = 21 03:37:12 executing program 4: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x551}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(0xffffffffffffffff, &(0x7f0000000140)="f9d8f77e888236b6e83ce03d1a06cfc9562b3c73ca3d07ddbd54fc", 0x1b, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='{@&em0\x00', 0x7, 0x3) unshare(0x40000000) [ 914.770523] IPVS: ftp: loaded support on port[0] = 21 03:37:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 03:37:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getrlimit(0x4000, &(0x7f0000000080)) 03:37:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f9c000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r1, &(0x7f00003d6fc8)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 03:37:12 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") open(&(0x7f00000000c0)='./file0\x00', 0x2241, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)="5f97a87b32fce6b85972143a05ddfe4cf4046ff533699830e7345831398eeb8661a5530fce5a95f416cbaf3cf2509d9c17306042eff5ec") 03:37:12 executing program 1: timer_create(0xb, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, r0+10000000}, {0x77359400}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) 03:37:12 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x5}, 0x2c) mkdir(&(0x7f0000001340)='./file0\x00', 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x0, &(0x7f0000001740), &(0x7f0000001300), &(0x7f00000011c0), &(0x7f0000000280)) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=""/112}, 0x18) 03:37:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x0, 0xfffffffffffffffa}, 0x2c) 03:37:12 executing program 5: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x551}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(0xffffffffffffffff, &(0x7f0000000140)="f9d8f77e888236b6e83ce03d1a06cfc9562b3c73ca3d07ddbd54fc", 0x1b, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='{@&em0\x00', 0x7, 0x3) unshare(0x40000000) [ 914.844404] hugetlbfs: Bad mount option: "_—¨{2üæ¸Yr:ÝþLôoõ3i˜0ç4X19Žë†a¥SÎZ•ô˯<òPœ0`Bïõì" [ 914.852144] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 914.864053] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 03:37:12 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)) creat(&(0x7f0000000300)='./file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[]) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffd37) ioctl$FS_IOC_FSSETXATTR(r0, 0x6609, &(0x7f00000004c0)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) 03:37:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getrlimit(0x4000, &(0x7f0000000080)) 03:37:12 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x607bd73a, 0x2) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000540)={0xa0}, 0xa0) 03:37:12 executing program 5: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x551}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(0xffffffffffffffff, &(0x7f0000000140)="f9d8f77e888236b6e83ce03d1a06cfc9562b3c73ca3d07ddbd54fc", 0x1b, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='{@&em0\x00', 0x7, 0x3) unshare(0x40000000) 03:37:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getrlimit(0x4000, &(0x7f0000000080)) 03:37:13 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x1f40) 03:37:13 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f00000001c0)="240000001900030007ff0907000083be8020000000040005035a5bf4d31d85680300a33f", 0x24}], 0x1}, 0x0) [ 916.035516] IPVS: ftp: loaded support on port[0] = 21 03:37:14 executing program 4: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x551}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(0xffffffffffffffff, &(0x7f0000000140)="f9d8f77e888236b6e83ce03d1a06cfc9562b3c73ca3d07ddbd54fc", 0x1b, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='{@&em0\x00', 0x7, 0x3) unshare(0x40000000) 03:37:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x23) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d400000000000000000000000000400000000000000000000000000018b7074db0cb5a9f31eb5bd400000000000000000000000000000000000000000000e12a6babbd23ab1c000000000000001a00469a000000000000000000004c1f"], 0x6f) 03:37:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="df1f3e650f01c80f51152eef26a850a50f090f20e06635000040000f22e00f71d227267300", 0x25}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:37:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 03:37:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000400)=""/159, 0x2000049f}], 0x2, &(0x7f0000000800)=""/85, 0x55}}], 0x1, 0x0, 0x0) 03:37:14 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)) 03:37:14 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) shutdown(r0, 0x0) shutdown(r0, 0x0) 03:37:14 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x689}, @random="063d3b650453", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @rand_addr}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 03:37:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000012c0)=@flushpolicy={0x10, 0x1d, 0x725}, 0x10}}, 0x0) 03:37:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:37:14 executing program 5: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x551}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(0xffffffffffffffff, &(0x7f0000000140)="f9d8f77e888236b6e83ce03d1a06cfc9562b3c73ca3d07ddbd54fc", 0x1b, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='{@&em0\x00', 0x7, 0x3) unshare(0x40000000) 03:37:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000000)=ANY=[]) 03:37:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) dup3(r2, r1, 0x0) 03:37:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100000001) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000001340)}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000003900)=[{0x10}], 0xf5}}], 0x2, 0x0) 03:37:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007101dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:37:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 916.734750] IPVS: ftp: loaded support on port[0] = 21 [ 916.870245] nla_parse: 10 callbacks suppressed [ 916.870255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 917.473655] IPVS: ftp: loaded support on port[0] = 21 03:37:15 executing program 4: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x551}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(0xffffffffffffffff, &(0x7f0000000140)="f9d8f77e888236b6e83ce03d1a06cfc9562b3c73ca3d07ddbd54fc", 0x1b, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='{@&em0\x00', 0x7, 0x3) unshare(0x40000000) 03:37:15 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/185, 0xb9, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000280)=0x20000085a, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000002540)}, 0x0) 03:37:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18}], 0x24}], 0x4924924924924b1, 0x0) 03:37:15 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c) 03:37:15 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500090021001000080000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000e2d4ec6bab91d4", 0x55}], 0x1, &(0x7f0000000200)}, 0x0) 03:37:15 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)) 03:37:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000400)=""/159, 0x2000049f}], 0x2, &(0x7f0000000800)=""/85, 0x55}}], 0x1, 0x0, 0x0) 03:37:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008010, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028]}, 0x10) r2 = socket(0x11, 0x803, 0x300) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000300)}], 0x0, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) 03:37:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000200)='}keyring.[)Oem1loselfposix_acl_access{vmnet0posix_acl_access#\\[\x00', 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) dup2(r2, r1) 03:37:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xcc5, 0x0, 0x4}, 0x257) [ 917.797140] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 917.871139] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.877668] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.914260] device bridge_slave_0 entered promiscuous mode [ 917.975870] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.982348] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.992306] device bridge_slave_1 entered promiscuous mode [ 918.039041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 918.151045] IPVS: ftp: loaded support on port[0] = 21 [ 918.471737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 918.544004] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 919.114022] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 919.257543] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 919.962212] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 919.969768] team0: Port device team_slave_0 added [ 920.001801] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 920.009137] team0: Port device team_slave_1 added [ 920.156951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 920.310478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 920.457871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 920.465079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 920.473705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 920.619983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 920.627212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 920.636030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 921.415337] device bridge_slave_1 left promiscuous mode [ 921.421841] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.439327] device bridge_slave_0 left promiscuous mode [ 921.444872] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.181138] bond4 (unregistering): Released all slaves [ 924.195109] bond3 (unregistering): Released all slaves [ 924.203799] bond2 (unregistering): Released all slaves [ 924.212334] bond1 (unregistering): Released all slaves [ 924.221762] team0 (unregistering): Port device team_slave_1 removed [ 924.232941] team0 (unregistering): Port device team_slave_0 removed [ 924.246343] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 924.265841] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 924.292772] bond0 (unregistering): Released all slaves [ 924.406212] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.412955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.419708] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.426109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.433616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 925.390383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 925.943726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.095543] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 926.237822] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 926.244379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 926.260936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 926.364369] 8021q: adding VLAN 0 to HW filter on device team0 03:37:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000180)=@ethtool_dump={0x3f}}) close(r2) close(r1) 03:37:24 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x40000105]}) 03:37:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9205, 0x0) 03:37:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdr={0x2c, 0x15, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14}]}, 0x2c}}, 0x0) 03:37:24 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)) 03:37:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000400)=""/159, 0x2000049f}], 0x2, &(0x7f0000000800)=""/85, 0x55}}], 0x1, 0x0, 0x0) 03:37:24 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x4) 03:37:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8}]}]}, 0x30}}, 0x0) 03:37:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x1) [ 927.296448] validate_nla: 6 callbacks suppressed [ 927.296513] netlink: 'syz-executor0': attribute type 4 has an invalid length. [ 927.308865] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 927.316252] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:37:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x2, 0xfe4a) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) 03:37:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000400)="0401000000c000ddb8460900ffed35c4f6f41d32395854d3e8dfc33d13b25b4202938207d9033780398d5375", 0x2c, 0x0, &(0x7f0000000080)={0xa, 0x200000800, 0x2000000000f, @mcast2}, 0x1c) 03:37:25 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000040)) [ 927.412126] netlink: 'syz-executor0': attribute type 4 has an invalid length. [ 927.419596] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 927.427027] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:37:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1279, &(0x7f0000000040)) 03:37:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) 03:37:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") fcntl$lock(r0, 0x7, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000140)=""/11}, {&(0x7f00000002c0)=""/26}, {&(0x7f0000000300)=""/117}, {&(0x7f0000000380)=""/189}, {&(0x7f0000000440)=""/6}, {&(0x7f0000000480)=""/4096, 0x27b}], 0x1000000000000093, 0x0) 03:37:25 executing program 1: syz_read_part_table(0xfffffffffffffffd, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="02008100000006000000ff07000000000000000700000000000000000000000000000000000000000000000000000000000000dec31a2d0000000000000055aa", 0x40, 0x1c0}]) 03:37:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000000)='./control\x00', 0x28042, 0xfffffffffffff7fc) lchown(&(0x7f0000000200)='./control\x00', 0xffffffffffffffff, 0x0) [ 927.672014] loop1: p1 [ 927.703138] loop1: p1 03:37:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x40000105]}) 03:37:25 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d1", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) 03:37:25 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000000400)=@sco, 0x80, &(0x7f0000002700)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x1, @loopback}, 0x80, &(0x7f0000000300)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x4, 0x894f, 0x5, @dev}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 03:37:25 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)) 03:37:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000400)=""/159, 0x2000049f}], 0x2, &(0x7f0000000800)=""/85, 0x55}}], 0x1, 0x0, 0x0) 03:37:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000008c0)="0a0775b0d5e383e5b3b60ced5c54dbb729d77ebe73356dc32621a9c6b4e30cb093fd2e5cafcda83020f8a79a7a4227c29ae4302d70771cb1f96036a50085b87661", 0x41) 03:37:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x24}], 0x24}], 0x1, 0x0) 03:37:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000480)="66b9800000c00f326635008000000f300f20c06635020000000f22c066b9250a000066b8af00000066ba000000000f300f01cfac0f32660f3801d6260f01c832170fc72c", 0x44}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x70c000) 03:37:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x47f]}) 03:37:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0xfffffffffffffff8, {{0xa, 0x4e22, 0x8000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, 0x3ff}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x17}, 0xc52c}}, {{0xa, 0x4e23, 0x8, @local, 0x4}}]}, 0x190) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) r2 = socket$inet6(0xa, 0x1000000000003, 0x100000003) dup3(r1, r2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000140)={'lo\x00', {0x2, 0x0, @broadcast}}) 03:37:25 executing program 5: syslog(0x3, &(0x7f0000000180)=""/255, 0xff) 03:37:25 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) 03:37:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000063fc90000000000000003000000000000000400000000000000000065750ede825e45a90f3d09876e700cd4e191a1f98937702d8f952bb12ed909205c7333fdff7d0e28d49fffffe1ffffffff1c8275dd4b26916a0dc38b518cdf628235cebb98b79414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x88) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x4) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x8) 03:37:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x40000105]}) 03:37:26 executing program 5: syslog(0x3, &(0x7f0000000180)=""/255, 0xff) 03:37:26 executing program 1: r0 = memfd_create(&(0x7f000088f000)='\r\x00\x00', 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x3) 03:37:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x88) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:37:26 executing program 5: syslog(0x3, &(0x7f0000000180)=""/255, 0xff) 03:37:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0xfffffffffffffe23, 0x0, 0x0, 0x15b) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0x74c, 0x0, &(0x7f0000001000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 03:37:26 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x40000105]}) 03:37:26 executing program 5: syslog(0x3, &(0x7f0000000180)=""/255, 0xff) 03:37:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8}, 0x10) 03:37:26 executing program 3: syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x40000000000a132, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x0, 0x0) 03:37:26 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x200, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1) dup3(r0, r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) tkill(r2, 0x1000000000013) 03:37:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x72, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000000)=0x2c2) 03:37:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="c6", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180)=0x2, 0x4) write(r1, &(0x7f0000ce6ffe)="da", 0x1) 03:37:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) 03:37:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x7}], 0x10}, 0x0) 03:37:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3fd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x10001}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000480)={r2, 0x3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) unshare(0x40000000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000007c0)=""/153) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2}, 0x4) bind(r0, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x4, 0x2, 0x0, {0xa, 0x4e20, 0x8e27, @ipv4={[], [], @loopback}}}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000500)={{0xd7, 0xaf}, {0x7fffffff, 0x2}, 0x4, 0x4, 0x157c}) clock_gettime(0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) prctl$setname(0xf, &(0x7f0000000740)='.\x00') ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000140)=0xd977) io_setup(0xfffffffffffffff8, &(0x7f0000000300)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x40840, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000780)={r2}, &(0x7f00000005c0)=0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) fstat(r0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl='posixacl'}, {@access_user='access=user'}, {@dfltgid={'dfltgid'}}, {@cache_fscache='cache=fscache'}]}}) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000000240)=0x40, 0x4) [ 929.147756] dccp_invalid_packet: invalid packet type [ 929.161329] dccp_invalid_packet: invalid packet type 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000040), 0x0, 0x0) 03:37:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, '\v'}, 0xffff8005) 03:37:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 929.321934] IPVS: ftp: loaded support on port[0] = 21 03:37:27 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 03:37:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) fstat(r0, &(0x7f0000000400)) write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6f82, 0x0, 0x7}}}}, 0xa0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 03:37:27 executing program 5: r0 = socket(0x1e, 0x80005, 0x0) bind(r0, &(0x7f0000000380)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x50) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000000300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00002d4000)}, 0x0) [ 929.399184] sock: process `syz-executor5' is using obsolete getsockopt SO_BSDCOMPAT [ 929.438695] tmpfs: No value for mount option './file0' 03:37:27 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/105, 0x3eb23b) read(r1, &(0x7f0000001180)=""/94, 0x5e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0x120c352c0) 03:37:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty=0xe0ffffff}}, 0x34) close(r1) socket$inet6(0xa, 0x1000000000002, 0x0) dup3(r1, r2, 0x0) 03:37:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8, 0x2}]}, 0x20}}, 0x0) 03:37:27 executing program 5: clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000000080), &(0x7f0000553000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioprio_get$uid(0x2, 0x0) 03:37:27 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x1000) rename(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000180)='./file1\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x10000}}, 0x50) umount2(&(0x7f0000000040)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c004000000000002b7379737465746a48be1b31486dcc6370757365dee8f7206f75b87c3183726f000000000000000000000000000000000044f3a79b931bce"], 0x90) [ 929.841396] IPVS: ftp: loaded support on port[0] = 21 03:37:27 executing program 4: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f0000000240)=[{}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000040)=""/167) 03:37:27 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x6, 0x209e20, 0x8000000001, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) 03:37:27 executing program 5: r0 = memfd_create(&(0x7f0000000040)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) 03:37:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9040000000000000000000000010000000000800000002c0000000000008893", 0x66, 0x400}], 0x0, &(0x7f00000001c0)) 03:37:27 executing program 0: socket$kcm(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x8f, &(0x7f0000000100)="46f1263ab0e2d21caa642b2a88a8", &(0x7f0000000280)=""/143}, 0x28) 03:37:27 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3fd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x10001}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000480)={r2, 0x3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) unshare(0x40000000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000007c0)=""/153) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2}, 0x4) bind(r0, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x4, 0x2, 0x0, {0xa, 0x4e20, 0x8e27, @ipv4={[], [], @loopback}}}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000500)={{0xd7, 0xaf}, {0x7fffffff, 0x2}, 0x4, 0x4, 0x157c}) clock_gettime(0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) prctl$setname(0xf, &(0x7f0000000740)='.\x00') ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000140)=0xd977) io_setup(0xfffffffffffffff8, &(0x7f0000000300)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x40840, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000780)={r2}, &(0x7f00000005c0)=0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) fstat(r0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl='posixacl'}, {@access_user='access=user'}, {@dfltgid={'dfltgid'}}, {@cache_fscache='cache=fscache'}]}}) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000000240)=0x40, 0x4) 03:37:27 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) msgget$private(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6101) mkdir(&(0x7f0000000200)='./bus\x00', 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) bind$packet(r0, &(0x7f0000000540)={0x11, 0x11, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) r3 = inotify_add_watch(r1, &(0x7f0000000240)='./bus\x00', 0x80000004) inotify_rm_watch(r0, r3) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000000002f0200003a010000030000003e010000000000a3c6a6000000000000f62baa914dde0c930b06c84d6475d726889f3bfdfea8db7264bf251591a17f08ce3913162ab5ce9e6e07f40ba2e912c549e3ffbc82e31948ca667b9c0bb07dbf94b2b8e4e240e0616fd53438c360ec221287c6cc11a48d88f67235a4e9da510412992f0a85c13dff100d265eb603e748523ef44b249d5b87f92e78184bcd2bd09c73a1bbeba5340db1f68d5f79e723a96ec08be4b11d568059f84a353c79b17b90a86947254806874ea4bbd857a152eb47a523e9"], 0xd4) ftruncate(r1, 0x3c7) r4 = open(&(0x7f0000000080)='./bus\x00', 0x48800, 0x0) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) r5 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000000c0)="29c689d88b", &(0x7f0000000700)=""/130}, 0x18) 03:37:27 executing program 7: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cgroup.max.depth\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0), 0x0) [ 930.102491] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 930.110975] EXT4-fs (loop2): filesystem is read-only [ 930.116204] EXT4-fs (loop2): bad geometry: block count 65280 exceeds size of device (2 blocks) 03:37:27 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:37:27 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) r1 = inotify_init() r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x80000000) [ 930.211705] IPVS: ftp: loaded support on port[0] = 21 [ 930.315875] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 930.324400] EXT4-fs (loop2): filesystem is read-only [ 930.329617] EXT4-fs (loop2): bad geometry: block count 65280 exceeds size of device (2 blocks) 03:37:28 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 930.371189] protocol 88a8 is buggy, dev ip_vti0 03:37:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:37:28 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x800000031, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)) 03:37:28 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc02c5341, &(0x7f0000000240)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x40a85321, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:37:28 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:37:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:37:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r0 = gettid() process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/167, 0x14f}], 0x1, &(0x7f0000000240)=[{&(0x7f00000005c0)=""/172, 0xac}], 0x23, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 03:37:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000100)="aa543eef", 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0xe21, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @multicast2}]}, 0x24}}, 0x0) 03:37:29 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:37:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x8000008e, 0x2}, {}], 0x8e) 03:37:29 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/48, 0x30}, 0x0) 03:37:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3fd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x10001}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000480)={r2, 0x3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) unshare(0x40000000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000007c0)=""/153) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2}, 0x4) bind(r0, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x4, 0x2, 0x0, {0xa, 0x4e20, 0x8e27, @ipv4={[], [], @loopback}}}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000500)={{0xd7, 0xaf}, {0x7fffffff, 0x2}, 0x4, 0x4, 0x157c}) clock_gettime(0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) prctl$setname(0xf, &(0x7f0000000740)='.\x00') ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000140)=0xd977) io_setup(0xfffffffffffffff8, &(0x7f0000000300)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x40840, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000780)={r2}, &(0x7f00000005c0)=0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) fstat(r0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl='posixacl'}, {@access_user='access=user'}, {@dfltgid={'dfltgid'}}, {@cache_fscache='cache=fscache'}]}}) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000000240)=0x40, 0x4) 03:37:29 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:37:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x100a}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x355, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:37:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10, &(0x7f0000000100)="0249c83d6d345f8f762070") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r1, &(0x7f0000007980)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x4, 0x1, {0xa, 0x4e23, 0x8, @ipv4={[], [], @broadcast}, 0x6}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="9576dd792c1d6ef9b450ab3dbcbe43c700d0ca376af4747273941a6bd5963ac52e882089fecc85929ac9bf451aead95f71327910f5fb6d74ada81d0b5cec565b54dacba7ffdd9a70c5406ecf219b56c2968555e1d460cc921825afb2b4531f045de4c1f14f0ba76ee5e0df1c89358f0720b80e9a6160567824c7722339fc684d982418611a84162fe8e965", 0x8b}], 0x1, &(0x7f0000000440), 0x0, 0x4000814}, 0x1}], 0x1, 0x8080) sendto$llc(r1, &(0x7f0000000000)="298248337a8d2a6b177cac842110cf5c2017fca5d843bce67d7fe54070b5bdaf737e5c3ab8647625fd292234c6d4883aa100742e3fba9e0f40c44e5fe4cdf0a2d7399822a502e9f3687cfa974cca2f13699d1021edbd3f8ee471fa782d2521279cf828ea38c6c075", 0x68, 0x4000000, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000100)={0x0}) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000005c0)='./file0\x00', 0x113080, 0x8) write$sndseq(r4, &(0x7f0000000600)=[{0x0, 0x1, 0x101, 0xffffffff, @tick=0x59de, {0x40a5, 0x5}, {0x2, 0x3}, @raw8={"d4e68f4276c7e9f5d909d79c"}}, {0x1f, 0x6, 0x1, 0x5, @time, {0x2, 0xd4b}, {0xffffffffffffffff}, @raw32={[0x8, 0x100000001, 0x3ca0]}}], 0x60) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000380), &(0x7f0000000400)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000480)=""/245) sendmsg$nl_generic(r5, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES32=r2], 0x1}}, 0x0) recvmsg(r5, &(0x7f0000003f00)={&(0x7f0000002a00)=@can, 0x80, &(0x7f0000003d80), 0x0, &(0x7f0000003e00)=""/240, 0xf0}, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)) time(&(0x7f00000002c0)) r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x19c6a6b4e739ed0e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004940)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000004a40)=0xe8) socket$inet6(0xa, 0x5, 0x9) bind$packet(r6, &(0x7f0000004a80)={0x11, 0x10, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000014) 03:37:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x800004}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 931.697133] IPVS: ftp: loaded support on port[0] = 21 03:37:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000001c0)={'team0\x00', 0x892}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) 03:37:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x100a}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x355, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) 03:37:29 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000000c0)}]) 03:37:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)='K', 0x1}], 0x1) 03:37:29 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00'}) [ 931.980499] ================================================================== [ 931.988305] BUG: KASAN: use-after-free in do_shrink_slab+0xbd4/0xcb0 [ 931.994829] Read of size 8 at addr ffff8801b12cf818 by task syz-executor5/31333 [ 932.002688] [ 932.004351] CPU: 0 PID: 31333 Comm: syz-executor5 Not tainted 4.18.0+ #197 [ 932.011383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.020770] Call Trace: [ 932.023386] dump_stack+0x1c9/0x2b4 [ 932.027046] ? dump_stack_print_info.cold.2+0x52/0x52 [ 932.032265] ? printk+0xa7/0xcf [ 932.035582] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 932.040371] ? do_shrink_slab+0xbd4/0xcb0 [ 932.044553] print_address_description+0x6c/0x20b [ 932.049498] ? do_shrink_slab+0xbd4/0xcb0 [ 932.053693] kasan_report.cold.7+0x242/0x30d [ 932.058139] __asan_report_load8_noabort+0x14/0x20 [ 932.063104] do_shrink_slab+0xbd4/0xcb0 [ 932.067125] ? snapshot_refaults+0x290/0x290 [ 932.071560] ? lruvec_lru_size+0x450/0x450 [ 932.075833] ? shrink_slab+0x1e7/0x990 [ 932.079748] ? rcu_note_context_switch+0x730/0x730 [ 932.084709] ? downgrade_write+0x2b0/0x2b0 [ 932.088992] ? radix_tree_lookup+0x21/0x30 [ 932.093261] shrink_slab+0x7b7/0x990 [ 932.097017] ? unregister_memcg_shrinker.isra.40+0x50/0x50 [ 932.102721] ? __lock_acquire+0x7fc/0x5020 [ 932.107000] shrink_node+0x429/0x16a0 [ 932.110869] ? shrink_node_memcg+0x18f0/0x18f0 [ 932.115486] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 932.120544] ? ktime_get_raw_ts64+0x4f0/0x4f0 [ 932.125061] ? print_usage_bug+0xc0/0xc0 [ 932.129181] do_try_to_free_pages+0x3e7/0x1290 [ 932.133813] ? shrink_node+0x16a0/0x16a0 [ 932.137906] ? __lock_is_held+0xb5/0x140 [ 932.141994] ? lock_downgrade+0x8f0/0x8f0 [ 932.146187] try_to_free_mem_cgroup_pages+0x49d/0xc90 [ 932.151402] ? pointer_string+0x1b0/0x1b0 [ 932.155701] ? kasan_check_write+0x14/0x20 [ 932.159967] ? try_to_free_pages+0xb80/0xb80 [ 932.164419] ? memparse+0x171/0x1d0 [ 932.168078] ? get_options+0x380/0x380 [ 932.171987] ? kasan_kmalloc+0xc4/0xe0 [ 932.175895] ? __kmalloc+0x14e/0x760 [ 932.179659] ? kernfs_fop_write+0x33d/0x480 [ 932.184017] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 932.189573] ? page_counter_memparse+0xb5/0x1e0 [ 932.194260] ? page_counter_set_low+0x180/0x180 [ 932.198951] ? cgroup_control+0x180/0x180 [ 932.203133] memory_high_write+0x283/0x310 [ 932.207395] ? mem_cgroup_css_released+0x120/0x120 [ 932.212357] ? graph_lock+0x170/0x170 [ 932.216192] cgroup_file_write+0x31f/0x840 [ 932.220518] ? mem_cgroup_css_released+0x120/0x120 [ 932.225470] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 932.230425] ? __lock_is_held+0xb5/0x140 [ 932.234526] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 932.239477] kernfs_fop_write+0x2ba/0x480 [ 932.243679] do_iter_write+0x491/0x5f0 [ 932.247604] vfs_writev+0x1f1/0x360 [ 932.251273] ? __fget_light+0x2f7/0x440 [ 932.255274] ? vfs_iter_write+0xb0/0xb0 [ 932.259277] ? debug_check_no_obj_freed+0x30b/0x595 [ 932.264374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 932.269944] ? rcu_is_watching+0x8c/0x150 [ 932.274111] ? rcu_pm_notify+0xc0/0xc0 [ 932.278024] ? mutex_lock_nested+0x16/0x20 [ 932.282278] ? mutex_lock_nested+0x16/0x20 [ 932.286532] ? __fdget_pos+0xde/0x200 [ 932.290360] ? __fdget_raw+0x20/0x20 [ 932.294120] do_writev+0x11a/0x310 [ 932.297716] ? vfs_writev+0x360/0x360 [ 932.301560] __x64_sys_writev+0x75/0xb0 [ 932.305573] do_syscall_64+0x1b9/0x820 [ 932.309492] ? finish_task_switch+0x1d3/0x870 [ 932.314026] ? syscall_return_slowpath+0x5e0/0x5e0 [ 932.319066] ? syscall_return_slowpath+0x31d/0x5e0 [ 932.324100] ? __switch_to_asm+0x34/0x70 [ 932.328213] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 932.333627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 932.338548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.343833] RIP: 0033:0x457089 [ 932.347058] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.366000] RSP: 002b:00007fac0c834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 932.373945] RAX: ffffffffffffffda RBX: 00007fac0c8356d4 RCX: 0000000000457089 [ 932.381249] RDX: 0000000000000001 RSI: 0000000020000700 RDI: 0000000000000004 [ 932.388550] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 932.395850] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 932.403150] R13: 00000000004d77f0 R14: 00000000004c834e R15: 0000000000000000 [ 932.410562] [ 932.412214] Allocated by task 30193: [ 932.415956] save_stack+0x43/0xd0 [ 932.419433] kasan_kmalloc+0xc4/0xe0 [ 932.423171] __kmalloc+0x14e/0x760 [ 932.426741] iter_file_splice_write+0x25d/0x1010 [ 932.431530] direct_splice_actor+0x128/0x190 [ 932.435992] splice_direct_to_actor+0x318/0x8f0 [ 932.440741] do_splice_direct+0x2d4/0x420 [ 932.444976] do_sendfile+0x623/0xe20 [ 932.448746] __x64_sys_sendfile64+0x15d/0x250 [ 932.453296] do_syscall_64+0x1b9/0x820 [ 932.457220] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.462429] [ 932.464094] Freed by task 30193: [ 932.467481] save_stack+0x43/0xd0 [ 932.470971] __kasan_slab_free+0x11a/0x170 [ 932.475232] kasan_slab_free+0xe/0x10 [ 932.479055] kfree+0xd9/0x260 [ 932.482184] iter_file_splice_write+0x78d/0x1010 [ 932.486965] direct_splice_actor+0x128/0x190 [ 932.491396] splice_direct_to_actor+0x318/0x8f0 [ 932.496093] do_splice_direct+0x2d4/0x420 [ 932.500262] do_sendfile+0x623/0xe20 [ 932.504005] __x64_sys_sendfile64+0x15d/0x250 [ 932.508526] do_syscall_64+0x1b9/0x820 [ 932.512543] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.517859] [ 932.519551] The buggy address belongs to the object at ffff8801b12cf7c0 [ 932.519551] which belongs to the cache kmalloc-256 of size 256 [ 932.532243] The buggy address is located 88 bytes inside of [ 932.532243] 256-byte region [ffff8801b12cf7c0, ffff8801b12cf8c0) [ 932.544055] The buggy address belongs to the page: [ 932.549017] page:ffffea0006c4b3c0 count:1 mapcount:0 mapping:ffff8801dac007c0 index:0x0 [ 932.557197] flags: 0x2fffc0000000100(slab) [ 932.561465] raw: 02fffc0000000100 ffffea0007210588 ffffea0007205948 ffff8801dac007c0 [ 932.569381] raw: 0000000000000000 ffff8801b12cf040 000000010000000c 0000000000000000 [ 932.577280] page dumped because: kasan: bad access detected [ 932.583007] [ 932.584709] Memory state around the buggy address: [ 932.589683] ffff8801b12cf700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 932.597070] ffff8801b12cf780: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 932.604467] >ffff8801b12cf800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 932.611845] ^ [ 932.616017] ffff8801b12cf880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 932.623504] ffff8801b12cf900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 932.630885] ================================================================== [ 932.638266] Disabling lock debugging due to kernel taint [ 932.644008] Kernel panic - not syncing: panic_on_warn set ... [ 932.644008] [ 932.651410] CPU: 0 PID: 31333 Comm: syz-executor5 Tainted: G B 4.18.0+ #197 [ 932.659833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.669206] Call Trace: [ 932.671812] dump_stack+0x1c9/0x2b4 [ 932.675817] ? dump_stack_print_info.cold.2+0x52/0x52 [ 932.681029] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.685809] panic+0x238/0x4e7 [ 932.689033] ? add_taint.cold.5+0x16/0x16 [ 932.693208] ? do_raw_spin_unlock+0xa7/0x2f0 [ 932.697670] ? do_shrink_slab+0xbd4/0xcb0 [ 932.701838] kasan_end_report+0x47/0x4f [ 932.705830] kasan_report.cold.7+0x76/0x30d [ 932.710172] __asan_report_load8_noabort+0x14/0x20 [ 932.715128] do_shrink_slab+0xbd4/0xcb0 [ 932.719137] ? snapshot_refaults+0x290/0x290 [ 932.723572] ? lruvec_lru_size+0x450/0x450 [ 932.727835] ? shrink_slab+0x1e7/0x990 03:37:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) [ 932.731743] ? rcu_note_context_switch+0x730/0x730 [ 932.736709] ? downgrade_write+0x2b0/0x2b0 [ 932.740976] ? radix_tree_lookup+0x21/0x30 [ 932.745237] shrink_slab+0x7b7/0x990 [ 932.748978] ? unregister_memcg_shrinker.isra.40+0x50/0x50 [ 932.754659] ? __lock_acquire+0x7fc/0x5020 [ 932.758939] shrink_node+0x429/0x16a0 [ 932.762783] ? shrink_node_memcg+0x18f0/0x18f0 [ 932.767397] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 932.772448] ? ktime_get_raw_ts64+0x4f0/0x4f0 [ 932.776964] ? print_usage_bug+0xc0/0xc0 [ 932.781062] do_try_to_free_pages+0x3e7/0x1290 [ 932.785703] ? shrink_node+0x16a0/0x16a0 [ 932.789789] ? __lock_is_held+0xb5/0x140 [ 932.793867] ? lock_downgrade+0x8f0/0x8f0 [ 932.798047] try_to_free_mem_cgroup_pages+0x49d/0xc90 [ 932.803253] ? pointer_string+0x1b0/0x1b0 [ 932.807538] ? kasan_check_write+0x14/0x20 [ 932.811794] ? try_to_free_pages+0xb80/0xb80 [ 932.816233] ? memparse+0x171/0x1d0 [ 932.819877] ? get_options+0x380/0x380 [ 932.823791] ? kasan_kmalloc+0xc4/0xe0 [ 932.827698] ? __kmalloc+0x14e/0x760 [ 932.831430] ? kernfs_fop_write+0x33d/0x480 [ 932.835777] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 932.841336] ? page_counter_memparse+0xb5/0x1e0 [ 932.846027] ? page_counter_set_low+0x180/0x180 [ 932.850542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 932.850720] ? cgroup_control+0x180/0x180 [ 932.850748] memory_high_write+0x283/0x310 [ 932.867681] ? mem_cgroup_css_released+0x120/0x120 [ 932.872672] ? graph_lock+0x170/0x170 [ 932.876504] cgroup_file_write+0x31f/0x840 [ 932.880763] ? mem_cgroup_css_released+0x120/0x120 [ 932.885723] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 932.890699] ? __lock_is_held+0xb5/0x140 [ 932.894796] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 932.899753] kernfs_fop_write+0x2ba/0x480 [ 932.903940] do_iter_write+0x491/0x5f0 [ 932.907858] vfs_writev+0x1f1/0x360 [ 932.911555] ? __fget_light+0x2f7/0x440 [ 932.915557] ? vfs_iter_write+0xb0/0xb0 [ 932.919561] ? debug_check_no_obj_freed+0x30b/0x595 [ 932.924603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 932.930196] ? rcu_is_watching+0x8c/0x150 [ 932.934367] ? rcu_pm_notify+0xc0/0xc0 [ 932.938284] ? mutex_lock_nested+0x16/0x20 [ 932.942542] ? mutex_lock_nested+0x16/0x20 [ 932.946798] ? __fdget_pos+0xde/0x200 [ 932.950627] ? __fdget_raw+0x20/0x20 [ 932.954404] do_writev+0x11a/0x310 [ 932.957976] ? vfs_writev+0x360/0x360 [ 932.961813] __x64_sys_writev+0x75/0xb0 [ 932.965822] do_syscall_64+0x1b9/0x820 [ 932.969727] ? finish_task_switch+0x1d3/0x870 [ 932.974247] ? syscall_return_slowpath+0x5e0/0x5e0 [ 932.979300] ? syscall_return_slowpath+0x31d/0x5e0 [ 932.984248] ? __switch_to_asm+0x34/0x70 [ 932.988348] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 932.993802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 932.998675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.003864] RIP: 0033:0x457089 [ 933.007145] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 933.026049] RSP: 002b:00007fac0c834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 933.033765] RAX: ffffffffffffffda RBX: 00007fac0c8356d4 RCX: 0000000000457089 [ 933.041050] RDX: 0000000000000001 RSI: 0000000020000700 RDI: 0000000000000004 [ 933.048346] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 933.055657] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 933.062956] R13: 00000000004d77f0 R14: 00000000004c834e R15: 0000000000000000 [ 933.070838] Dumping ftrace buffer: [ 933.074391] --------------------------------- [ 933.079039] syz-exec-17496 0...2 717513064us : 0: u1501854464 [ 933.079056] syz-exec-17496 0...2 717513076us : 0: u1501854464 [ 933.085131] syz-exec-17496 0...2 717513083us : 0: u1501854464 [ 933.091204] syz-exec-17496 0...2 717513088us : 0: u1501854464 [ 933.097440] syz-exec-17496 0...2 717513094us : 0: u1501854464 [ 933.103514] syz-exec-17496 0...2 717513099us : 0: u1501854464 [ 933.109583] syz-exec-17496 0...2 717513104us : 0: u1501854464 [ 933.115721] syz-exec-17496 0...2 717513110us : 0: u1501854464 [ 933.121848] syz-exec-17496 0...2 717513114us : 0: u1501854464 [ 933.127928] syz-exec-17496 0...2 717513120us : 0: u1501854464 [ 933.134000] syz-exec-17496 0...2 717513125us : 0: u1501854464 [ 933.140193] syz-exec-17496 0...2 717513130us : 0: u1501854464 [ 933.146254] syz-exec-17496 0...2 717513134us : 0: u1501854464 [ 933.152311] syz-exec-17496 0...2 717513140us : 0: u1501854464 [ 933.158370] syz-exec-17496 0...2 717513145us : 0: u1501854464 [ 933.164431] syz-exec-17496 0...2 717513149us : 0: u1501854464 [ 933.170491] syz-exec-17496 0...2 717513155us : 0: u1501854464 [ 933.176551] syz-exec-17496 0...2 717513159us : 0: u1501854464 [ 933.182612] syz-exec-17496 0...2 717513165us : 0: u1501854464 [ 933.188709] syz-exec-17496 0...2 717513169us : 0: u1501854464 [ 933.194768] syz-exec-17496 0...2 717513174us : 0: u1501854464 [ 933.200828] syz-exec-17496 0...2 717513179us : 0: u1501854464 [ 933.206885] syz-exec-17496 0...2 717513183us : 0: u1501854464 [ 933.212943] syz-exec-17496 0...2 717513188us : 0: u1501854464 [ 933.219002] syz-exec-17496 0...2 717513192us : 0: u1501854464 [ 933.225061] syz-exec-17496 0...2 717513197us : 0: u1501854464 [ 933.231120] syz-exec-17496 0...2 717513201us : 0: u1501854464 [ 933.237179] syz-exec-17496 0...2 717513206us : 0: u1501854464 [ 933.243236] syz-exec-17496 0...2 717513211us : 0: u1501854464 [ 933.249295] syz-exec-17496 0...2 717513215us : 0: u1501854464 [ 933.255405] syz-exec-17496 0...2 717513220us : 0: u1501854464 [ 933.261467] syz-exec-17496 0...2 717513224us : 0: u1501854464 [ 933.267526] syz-exec-17496 0...2 717513229us : 0: u1501854464 [ 933.273583] syz-exec-17496 0...2 717513233us : 0: u1501854464 [ 933.279662] syz-exec-17496 0...2 717513238us : 0: u1501854464 [ 933.285722] syz-exec-17496 0...2 717513242us : 0: u1501854464 [ 933.291780] syz-exec-17496 0...2 717513247us : 0: u1501854464 [ 933.297897] syz-exec-17496 0...2 717513251us : 0: u1501854464 [ 933.303962] syz-exec-17496 0...2 717513256us : 0: u1501854464 [ 933.310022] syz-exec-17496 0...2 717513260us : 0: u1501854464 [ 933.316080] syz-exec-17496 0...2 717513265us : 0: u1501854464 [ 933.322137] syz-exec-17496 0...2 717513269us : 0: u1501854464 [ 933.328193] syz-exec-17496 0...2 717513274us : 0: u1501854464 [ 933.334248] syz-exec-17496 0...2 717513278us : 0: u1501854464 [ 933.340307] syz-exec-17496 0...2 717513283us : 0: u1501854464 [ 933.346365] syz-exec-17496 0...2 717513288us : 0: u1501854464 [ 933.352425] syz-exec-17496 0...2 717513292us : 0: u1501854464 [ 933.358484] syz-exec-17496 0...2 717513296us : 0: u1501854464 [ 933.364544] syz-exec-17496 0...2 717513302us : 0: u1501854464 [ 933.370601] syz-exec-17496 0...2 717513307us : 0: u1501854464 [ 933.376683] syz-exec-17496 0...2 717513474us : 0: u1501854464 [ 933.382745] syz-exec-17496 0...2 717513481us : 0: u1501854464 [ 933.388804] syz-exec-17496 0...2 717513487us : 0: u1501854464 [ 933.394930] syz-exec-17496 0...2 717513491us : 0: u1501854464 [ 933.400993] syz-exec-17496 0...2 717513497us : 0: u1501854464 [ 933.407052] syz-exec-17496 0...2 717513502us : 0: u1501854464 [ 933.413114] syz-exec-17496 0...2 717513508us : 0: u1501854464 [ 933.419170] syz-exec-17496 0...2 717513526us : 0: u1501854464 [ 933.425289] syz-exec-17496 0...2 717513533us : 0: u1501854464 [ 933.431350] syz-exec-17496 0...2 717513537us : 0: u1501854464 [ 933.437406] syz-exec-17496 0...2 717513543us : 0: u1501854464 [ 933.443478] syz-exec-17496 0...2 717513548us : 0: u1501854464 [ 933.449547] syz-exec-17496 0...2 717513553us : 0: u1501854464 [ 933.455615] syz-exec-17496 0...2 717513558us : 0: u1501854464 [ 933.461709] syz-exec-17496 0...2 717513563us : 0: u1501854464 [ 933.467831] syz-exec-17496 0...2 717513569us : 0: u1501854464 [ 933.473901] syz-exec-17496 0...2 717513573us : 0: u1501854464 [ 933.480025] syz-exec-17496 0...2 717513579us : 0: u1501854464 [ 933.486089] syz-exec-17496 0...2 717513583us : 0: u1501854464 [ 933.492202] syz-exec-17496 0...2 717513590us : 0: u1501854464 [ 933.498315] syz-exec-17496 0...2 717513594us : 0: u1501854464 [ 933.504376] syz-exec-17496 0...2 717513600us : 0: u1501854464 [ 933.510490] syz-exec-17496 0...2 717513604us : 0: u1501854464 [ 933.516552] syz-exec-17496 0...2 717513610us : 0: u1501854464 [ 933.522705] syz-exec-17496 0...2 717513614us : 0: u1501854464 [ 933.528772] syz-exec-17496 0...2 717513620us : 0: u1501854464 [ 933.534840] syz-exec-17496 0...2 717513624us : 0: u1501854464 [ 933.540899] syz-exec-17496 0...2 717513629us : 0: u1501854464 [ 933.546962] syz-exec-17496 0...2 717513634us : 0: u1501854464 [ 933.553020] syz-exec-17496 0...2 717513639us : 0: u1501854464 [ 933.559078] syz-exec-17496 0...2 717513644us : 0: u1501854464 [ 933.565136] syz-exec-17496 0...2 717513648us : 0: u1501854464 [ 933.571192] syz-exec-17496 0...2 717513653us : 0: u1501854464 [ 933.577248] syz-exec-17496 0...2 717513657us : 0: u1501854464 [ 933.583304] syz-exec-17496 0...2 717513662us : 0: u1501854464 [ 933.589362] syz-exec-17496 0...2 717513666us : 0: u1501854464 [ 933.595425] syz-exec-17496 0...2 717513671us : 0: u1501854464 [ 933.601491] syz-exec-17496 0...2 717513675us : 0: u1501854464 [ 933.607612] syz-exec-17496 0...2 717513679us : 0: u1501854464 [ 933.613711] syz-exec-17496 0...2 717513684us : 0: u1501854464 [ 933.619781] syz-exec-17496 0...2 717513688us : 0: u1501854464 [ 933.625848] syz-exec-17496 0...2 717513693us : 0: u1501854464 [ 933.631909] syz-exec-17496 0...2 717513697us : 0: u1501854464 [ 933.637980] syz-exec-17496 0...2 717513702us : 0: u1501854464 [ 933.644048] syz-exec-17496 0...2 717513706us : 0: u1501854464 [ 933.650119] syz-exec-17496 0...2 717513711us : 0: u1501854464 [ 933.656194] syz-exec-17496 0...2 717513715us : 0: u1501854464 [ 933.662266] syz-exec-17496 0...2 717513720us : 0: u1501854464 [ 933.668340] syz-exec-17496 0...2 717513724us : 0: u1501854464 [ 933.674416] syz-exec-17496 0...2 717513729us : 0: u1501854464 [ 933.680627] syz-exec-17496 0...2 717513733us : 0: u1501854464 [ 933.686726] syz-exec-17496 0...2 717513738us : 0: u1501854464 [ 933.692859] syz-exec-17496 0...2 717513742us : 0: u1501854464 [ 933.698936] syz-exec-17496 0...2 717513747us : 0: u1501854464 [ 933.705006] syz-exec-17496 0...2 717513751us : 0: u1501854464 [ 933.711077] syz-exec-17496 0...2 717513756us : 0: u1501854464 [ 933.717149] syz-exec-17496 0...2 717513760us : 0: u1501854464 [ 933.723221] syz-exec-17496 0...2 717513765us : 0: u1501854464 [ 933.729292] syz-exec-17496 0...2 717513769us : 0: u1501854464 [ 933.735364] syz-exec-17496 0...2 717513774us : 0: u1501854464 [ 933.741435] syz-exec-17496 0...2 717513778us : 0: u1501854464 [ 933.747509] syz-exec-17496 0...2 717513783us : 0: u1501854464 [ 933.753580] syz-exec-17496 0...2 717513787us : 0: u1501854464 [ 933.759675] syz-exec-17496 0...2 717513792us : 0: u1501854464 [ 933.765803] syz-exec-17496 0...2 717513806us : 0: u1501854464 [ 933.771881] syz-exec-17496 0...2 717513812us : 0: u1501854464 [ 933.780872] syz-exec-17496 0...2 717513817us : 0: u1501854464 [ 933.786951] syz-exec-17496 0...2 717513822us : 0: u1501854464 [ 933.793028] syz-exec-17496 0...2 717513827us : 0: u1501854464 [ 933.799155] syz-exec-17496 0...2 717513832us : 0: u1501854464 [ 933.805230] syz-exec-17496 0...2 717513838us : 0: u1501854464 [ 933.811556] syz-exec-17496 0...2 717513842us : 0: u1501854464 [ 933.817719] syz-exec-17496 0...2 717513848us : 0: u1501854464 [ 933.823851] syz-exec-17496 0...2 717513852us : 0: u1501854464 [ 933.829933] syz-exec-17496 0...2 717513858us : 0: u1501854464 [ 933.836005] syz-exec-17496 0...2 717513862us : 0: u1501854464 [ 933.842075] syz-exec-17496 0...2 717513867us : 0: u1501854464 [ 933.848334] syz-exec-17496 0...2 717513874us : 0: u1501854464 [ 933.854415] syz-exec-17496 0...2 717513879us : 0: u1501854464 [ 933.860558] syz-exec-17496 0...2 717513885us : 0: u1501854464 [ 933.866657] syz-exec-17496 0...2 717513890us : 0: u1501854464 [ 933.872732] syz-exec-17496 0...2 717513895us : 0: u1501854464 [ 933.878913] syz-exec-17496 0...2 717513901us : 0: u1501854464 [ 933.884992] syz-exec-17496 0...2 717513906us : 0: u1501854464 [ 933.891065] syz-exec-17496 0...2 717513911us : 0: u1501854464 [ 933.897137] syz-exec-17496 0...2 717513917us : 0: u1501854464 [ 933.903210] syz-exec-17496 0...2 717513923us : 0: u1501854464 [ 933.909283] syz-exec-17496 0...2 717513930us : 0: u1501854464 [ 933.915534] syz-exec-17496 0...2 717513934us : 0: u1501854464 [ 933.921606] syz-exec-17496 0...2 717513941us : 0: u1501854464 [ 933.927710] syz-exec-17496 0...2 717513946us : 0: u1501854464 [ 933.933836] syz-exec-17496 0...2 717513952us : 0: u1501854464 [ 933.939909] syz-exec-17496 0...2 717513957us : 0: u1501854464 [ 933.945985] syz-exec-17496 0...2 717513963us : 0: u1501854464 [ 933.952055] syz-exec-17496 0...2 717513968us : 0: u1501854464 [ 933.958130] syz-exec-17496 0...2 717513973us : 0: u1501854464 [ 933.964213] syz-exec-17496 0...2 717513977us : 0: u1501854464 [ 933.970285] syz-exec-17496 0...2 717513983us : 0: u1501854464 [ 933.976357] syz-exec-17496 0...2 717513988us : 0: u1501854464 [ 933.982430] syz-exec-17496 0...2 717514025us : 0: u1501854464 [ 933.988505] syz-exec-17496 0...2 717514032us : 0: u1501854464 [ 933.994656] syz-exec-17496 0...2 717514037us : 0: u1501854464 [ 934.000733] syz-exec-17496 0...2 717514042us : 0: u1501854464 [ 934.006804] syz-exec-17496 0...2 717514047us : 0: u1501854464 [ 934.012881] syz-exec-17496 0...2 717514052us : 0: u1501854464 [ 934.018956] syz-exec-17496 0...2 717514057us : 0: u1501854464 [ 934.025028] syz-exec-17496 0...2 717514063us : 0: u1501854464 [ 934.031104] syz-exec-17496 0...2 717514067us : 0: u1501854464 [ 934.037237] syz-exec-17496 0...2 717514073us : 0: u1501854464 [ 934.043318] syz-exec-17496 0...2 717514078us : 0: u1501854464 [ 934.049390] syz-exec-17496 0...2 717514084us : 0: u1501854464 [ 934.055463] syz-exec-17496 0...2 717514088us : 0: u1501854464 [ 934.061586] syz-exec-17496 0...2 717514092us : 0: u1501854464 [ 934.067680] syz-exec-17496 0...2 717514097us : 0: u1501854464 [ 934.073758] syz-exec-17496 0...2 717514101us : 0: u1501854464 [ 934.079833] syz-exec-17496 0...2 717514105us : 0: u1501854464 [ 934.085994] syz-exec-17496 0...2 717514110us : 0: u1501854464 [ 934.092064] syz-exec-17496 0...2 717514114us : 0: u1501854464 [ 934.098132] syz-exec-17496 0...2 717514119us : 0: u1501854464 [ 934.104204] syz-exec-17496 0...2 717514123us : 0: u1501854464 [ 934.110325] syz-exec-17496 0...2 717514129us : 0: u1501854464 [ 934.116399] syz-exec-17496 0...2 717514136us : 0: u1501854464 [ 934.122530] syz-exec-17496 0...2 717514141us : 0: u1501854464 [ 934.128599] syz-exec-17496 0...2 717514149us : 0: u1501854464 [ 934.134805] syz-exec-17496 0...2 717514154us : 0: u1501854464 [ 934.140880] syz-exec-17496 0...2 717514160us : 0: u1501854464 [ 934.146954] syz-exec-17496 0...2 717514165us : 0: u1501854464 [ 934.153077] syz-exec-17496 0...2 717514170us : 0: u1501854464 [ 934.159203] syz-exec-17496 0...2 717514176us : 0: u1501854464 [ 934.165329] syz-exec-17496 0...2 717514182us : 0: u1501854464 [ 934.171404] syz-exec-17496 0...2 717514186us : 0: u1501854464 [ 934.177477] syz-exec-17496 0...2 717514191us : 0: u1501854464 [ 934.183655] syz-exec-17496 0...2 717514197us : 0: u1501854464 [ 934.189718] syz-exec-17496 0...2 717514204us : 0: u1501854464 [ 934.195776] syz-exec-17496 0...2 717514208us : 0: u1501854464 [ 934.201833] syz-exec-17496 0...2 717514214us : 0: u1501854464 [ 934.207887] syz-exec-17496 0...2 717514221us : 0: u1501854464 [ 934.214068] syz-exec-17496 0...2 717514226us : 0: u1501854464 [ 934.220127] syz-exec-17496 0...2 717514232us : 0: u1501854464 [ 934.226188] syz-exec-17496 0...2 717514238us : 0: u1501854464 [ 934.232244] syz-exec-17496 0...2 717514244us : 0: u1501854464 [ 934.238314] syz-exec-17496 0...2 717514248us : 0: u1501854464 [ 934.244371] syz-exec-17496 0...2 717514254us : 0: u1501854464 [ 934.250431] syz-exec-17496 0...2 717514259us : 0: u1501854464 [ 934.256491] syz-exec-17496 0...2 717514265us : 0: u1501854464 [ 934.262549] syz-exec-17496 0...2 717514269us : 0: u1501854464 [ 934.268608] syz-exec-17496 0...2 717514275us : 0: u1501854464 [ 934.274690] syz-exec-17496 0...2 717514280us : 0: u1501854464 [ 934.280798] syz-exec-17496 0...2 717514285us : 0: u1501854464 [ 934.286907] syz-exec-17496 0...2 717514290us : 0: u1501854464 [ 934.292972] syz-exec-17496 0...2 717514294us : 0: u1501854464 [ 934.299031] syz-exec-17496 0...2 717514299us : 0: u1501854464 [ 934.305090] syz-exec-17496 0...2 717514305us : 0: u1501854464 [ 934.311147] syz-exec-17496 0...2 717514345us : 0: u1501854464 [ 934.317202] syz-exec-17496 0...2 717514352us : 0: u1501854464 [ 934.323257] syz-exec-17496 0...2 717514358us : 0: u1501854464 [ 934.329313] syz-exec-17496 0...2 717514362us : 0: u1501854464 [ 934.335369] syz-exec-17496 0...2 717514368us : 0: u1501854464 [ 934.341425] syz-exec-17496 0...2 717514373us : 0: u1501854464 [ 934.347484] syz-exec-17496 0...2 717514381us : 0: u1501854464 [ 934.353545] syz-exec-17496 0...2 717514387us : 0: u1501854464 [ 934.359601] syz-exec-17496 0...2 717514393us : 0: u1501854464 [ 934.365684] syz-exec-17496 0...2 717514397us : 0: u1501854464 [ 934.371742] syz-exec-17496 0...2 717514404us : 0: u1501854464 [ 934.377801] syz-exec-17496 0...2 717514408us : 0: u1501854464 [ 934.383857] syz-exec-17496 0...2 717514414us : 0: u1501854464 [ 934.389912] syz-exec-17496 0...2 717514418us : 0: u1501854464 [ 934.395977] syz-exec-17496 0...2 717514424us : 0: u1501854464 [ 934.402085] syz-exec-17496 0...2 717514428us : 0: u1501854464 [ 934.408143] syz-exec-17496 0...2 717514433us : 0: u1501854464 [ 934.414202] syz-exec-17496 0...2 717514438us : 0: u1501854464 [ 934.420260] syz-exec-17496 0...2 717514443us : 0: u1501854464 [ 934.426315] syz-exec-17496 0...2 717514449us : 0: u1501854464 [ 934.432372] syz-exec-17496 0...2 717514453us : 0: u1501854464 [ 934.438433] syz-exec-17496 0...2 717514459us : 0: u1501854464 [ 934.444509] syz-exec-17496 0...2 717514464us : 0: u1501854464 [ 934.450599] syz-exec-17496 0...2 717514469us : 0: u1501854464 [ 934.456676] syz-exec-17496 0...2 717514474us : 0: u1501854464 [ 934.462736] syz-exec-17496 0...2 717514480us : 0: u1501854464 [ 934.468791] syz-exec-17496 0...2 717514484us : 0: u1501854464 [ 934.474883] syz-exec-17496 0...2 717514489us : 0: u1501854464 [ 934.480940] syz-exec-17496 0...2 717514493us : 0: u1501854464 [ 934.486989] syz-exec-17496 0...2 717514498us : 0: u1501854464 [ 934.493040] syz-exec-17496 0...2 717514502us : 0: u1501854464 [ 934.499087] syz-exec-17496 0...2 717514507us : 0: u1501854464 [ 934.505134] syz-exec-17496 0...2 717514524us : 0: u1501854464 [ 934.511182] syz-exec-17496 0...2 717514531us : 0: u1501854464 [ 934.517225] syz-exec-17496 0...2 717514536us : 0: u1501854464 [ 934.523274] syz-exec-17496 0...2 717514541us : 0: u1501854464 [ 934.529321] syz-exec-17496 0...2 717514546us : 0: u1501854464 [ 934.535423] syz-exec-17496 0...2 717514551us : 0: u1501854464 [ 934.541530] syz-exec-17496 0...2 717514557us : 0: u1501854464 [ 934.547612] syz-exec-17496 0...2 717514561us : 0: u1501854464 [ 934.553705] syz-exec-17496 0...2 717514567us : 0: u1501854464 [ 934.559756] syz-exec-17496 0...2 717514572us : 0: u1501854464 [ 934.565807] syz-exec-17496 0...2 717514578us : 0: u1501854464 [ 934.571854] syz-exec-17496 0...2 717514582us : 0: u1501854464 [ 934.577899] syz-exec-17496 0...2 717514589us : 0: u1501854464 [ 934.583963] syz-exec-17496 0...2 717514593us : 0: u1501854464 [ 934.590011] syz-exec-17496 0...2 717514599us : 0: u1501854464 [ 934.596057] syz-exec-17496 0...2 717514603us : 0: u1501854464 [ 934.602100] syz-exec-17496 0...2 717514609us : 0: u1501854464 [ 934.608153] syz-exec-17496 0...2 717514614us : 0: u1501854464 [ 934.614203] syz-exec-17496 0...2 717514619us : 0: u1501854464 [ 934.620252] syz-exec-17496 0...2 717514627us : 0: u1501854464 [ 934.626393] syz-exec-17496 0...2 717514631us : 0: u1501854464 [ 934.632439] syz-exec-17496 0...2 717514636us : 0: u1501854464 [ 934.638485] syz-exec-17496 0...2 717514641us : 0: u1501854464 [ 934.644561] syz-exec-17496 0...2 717514645us : 0: u1501854464 [ 934.650609] syz-exec-17496 0...2 717514650us : 0: u1501854464 [ 934.656709] syz-exec-17496 0...2 717514656us : 0: u1501854464 [ 934.662765] syz-exec-17496 0...2 717514660us : 0: u1501854464 [ 934.668809] syz-exec-17496 0...2 717514666us : 0: u1501854464 [ 934.675084] syz-exec-17496 0...2 717514671us : 0: u1501854464 [ 934.681146] syz-exec-17496 0...2 717514676us : 0: u1501854464 [ 934.687202] syz-exec-17496 0...2 717514681us : 0: u1501854464 [ 934.693270] syz-exec-17496 0...2 717514687us : 0: u1501854464 [ 934.699323] syz-exec-17496 0...2 717514691us : 0: u1501854464 [ 934.705368] syz-exec-17496 0...2 717514697us : 0: u1501854464 [ 934.711411] syz-exec-17496 0...2 717514701us : 0: u1501854464 [ 934.717457] syz-exec-17496 0...2 717514707us : 0: u1501854464 [ 934.723505] syz-exec-17496 0...2 717514712us : 0: u1501854464 [ 934.729553] syz-exec-17496 0...2 717514716us : 0: u1501854464 [ 934.735618] syz-exec-17496 0...2 717514721us : 0: u1501854464 [ 934.741697] syz-exec-17496 0...2 717514725us : 0: u1501854464 [ 934.747756] syz-exec-17496 0...2 717514730us : 0: u1501854464 [ 934.753814] syz-exec-17496 0...2 717514734us : 0: u1501854464 [ 934.759872] syz-exec-17496 0...2 717514738us : 0: u1501854464 [ 934.765940] syz-exec-17496 0...2 717514743us : 0: u1501854464 [ 934.771995] syz-exec-17496 0...2 717514748us : 0: u1501854464 [ 934.778048] syz-exec-17496 0...2 717514752us : 0: u1501854464 [ 934.784159] syz-exec-17496 0...2 717514757us : 0: u1501854464 [ 934.790217] syz-exec-17496 0...2 717514761us : 0: u1501854464 [ 934.796271] syz-exec-17496 0...2 717514766us : 0: u1501854464 [ 934.802326] syz-exec-17496 0...2 717514770us : 0: u1501854464 [ 934.808398] syz-exec-17496 0...2 717514774us : 0: u1501854464 [ 934.814457] syz-exec-17496 0...2 717514779us : 0: u1501854464 [ 934.820513] syz-exec-17496 0...2 717514784us : 0: u1501854464 [ 934.826570] syz-exec-17496 0...2 717514788us : 0: u1501854464 [ 934.832651] syz-exec-17496 0...2 717514792us : 0: u1501854464 [ 934.838710] syz-exec-17496 0...2 717514807us : 0: u1501854464 [ 934.844768] syz-exec-17496 0...2 717514812us : 0: u1501854464 [ 934.850829] syz-exec-17496 0...2 717514818us : 0: u1501854464 [ 934.856889] syz-exec-17496 0...2 717514822us : 0: u1501854464 [ 934.862952] syz-exec-17496 0...2 717514828us : 0: u1501854464 [ 934.869017] syz-exec-17496 0...2 717514833us : 0: u1501854464 [ 934.875082] syz-exec-17496 0...2 717514839us : 0: u1501854464 [ 934.881139] syz-exec-17496 0...2 717514843us : 0: u1501854464 [ 934.887216] syz-exec-17496 0...2 717514849us : 0: u1501854464 [ 934.893278] syz-exec-17496 0...2 717514854us : 0: u1501854464 [ 934.899336] syz-exec-17496 0...2 717514859us : 0: u1501854464 [ 934.905389] syz-exec-17496 0...2 717514864us : 0: u1501854464 [ 934.911447] syz-exec-17496 0...2 717514870us : 0: u1501854464 [ 934.917503] syz-exec-17496 0...2 717514874us : 0: u1501854464 [ 934.923574] syz-exec-17496 0...2 717514880us : 0: u1501854464 [ 934.929626] syz-exec-17496 0...2 717514885us : 0: u1501854464 [ 934.935682] syz-exec-17496 0...2 717514890us : 0: u1501854464 [ 934.941733] syz-exec-17496 0...2 717514896us : 0: u1501854464 [ 934.947801] syz-exec-17496 0...2 717514901us : 0: u1501854464 [ 934.953856] syz-exec-17496 0...2 717514906us : 0: u1501854464 [ 934.959911] syz-exec-17496 0...2 717514911us : 0: u1501854464 [ 934.965975] syz-exec-17496 0...2 717514917us : 0: u1501854464 [ 934.972030] syz-exec-17496 0...2 717514921us : 0: u1501854464 [ 934.978082] syz-exec-17496 0...2 717514925us : 0: u1501854464 [ 934.984133] syz-exec-17496 0...2 717514929us : 0: u1501854464 [ 934.990187] syz-exec-17496 0...2 717514934us : 0: u1501854464 [ 934.996252] syz-exec-17496 0...2 717514938us : 0: u1501854464 [ 935.002301] syz-exec-17496 0...2 717514942us : 0: u1501854464 [ 935.012792] syz-exec-17496 0...2 717514946us : 0: u1501854464 [ 935.018841] syz-exec-17496 0...2 717514953us : 0: u1501854464 [ 935.024893] syz-exec-17496 0...2 717514957us : 0: u1501854464 [ 935.030946] syz-exec-17496 0...2 717514964us : 0: u1501854464 [ 935.036998] syz-exec-17496 0...2 717514970us : 0: u1501854464 [ 935.043046] syz-exec-17496 0...2 717514977us : 0: u1501854464 [ 935.049096] syz-exec-17496 0...2 717514983us : 0: u1501854464 [ 935.055148] syz-exec-17496 0...2 717514988us : 0: u1501854464 [ 935.061196] syz-exec-17496 0...2 717514994us : 0: u1501854464 [ 935.067247] syz-exec-17496 0...2 717515000us : 0: u1501854464 [ 935.073297] syz-exec-17496 0...2 717515006us : 0: u1501854464 [ 935.079349] syz-exec-17496 0...2 717515012us : 0: u1501854464 [ 935.085398] syz-exec-17496 0...2 717515018us : 0: u1501854464 [ 935.091450] syz-exec-17496 0...2 717515022us : 0: u1501854464 [ 935.097503] syz-exec-17496 0...2 717515028us : 0: u1501854464 [ 935.103586] syz-exec-17496 0...2 717515032us : 0: u1501854464 [ 935.109642] syz-exec-17496 0...2 717515038us : 0: u1501854464 [ 935.115693] syz-exec-17496 0...2 717515043us : 0: u1501854464 [ 935.121762] syz-exec-17496 0...2 717515049us : 0: u1501854464 [ 935.127811] syz-exec-17496 0...2 717515053us : 0: u1501854464 [ 935.133864] syz-exec-17496 0...2 717515059us : 0: u1501854464 [ 935.139913] syz-exec-17496 0...2 717515063us : 0: u1501854464 [ 935.145967] syz-exec-17496 0...2 717515068us : 0: u1501854464 [ 935.152016] syz-exec-17496 0...2 717515073us : 0: u1501854464 [ 935.158066] syz-exec-17496 0...2 717515077us : 0: u1501854464 [ 935.164116] syz-exec-17496 0...2 717515082us : 0: u1501854464 [ 935.170167] syz-exec-17496 0...2 717515086us : 0: u1501854464 [ 935.176220] syz-exec-17496 0...2 717515091us : 0: u1501854464 [ 935.182317] syz-exec-17496 0...2 717515095us : 0: u1501854464 [ 935.188389] syz-exec-17496 0...2 717515100us : 0: u1501854464 [ 935.194459] syz-exec-17496 0...2 717515104us : 0: u1501854464 [ 935.200511] syz-exec-17496 0...2 717515108us : 0: u1501854464 [ 935.206565] syz-exec-17496 0...2 717515113us : 0: u1501854464 [ 935.212615] syz-exec-17496 0...2 717515117us : 0: u1501854464 [ 935.218674] syz-exec-17496 0...2 717515122us : 0: u1501854464 [ 935.224725] syz-exec-17496 0...2 717515127us : 0: u1501854464 [ 935.230793] syz-exec-17496 0...2 717515131us : 0: u1501854464 [ 935.236845] syz-exec-17496 0...2 717515136us : 0: u1501854464 [ 935.242915] syz-exec-17496 0...2 717515140us : 0: u1501854464 [ 935.248977] syz-exec-17496 0...2 717515145us : 0: u1501854464 [ 935.255027] syz-exec-17496 0...2 717515149us : 0: u1501854464 [ 935.261079] syz-exec-17496 0...2 717515154us : 0: u1501854464 [ 935.267130] syz-exec-17496 0...2 717515158us : 0: u1501854464 [ 935.273183] syz-exec-17496 0...2 717515163us : 0: u1501854464 [ 935.279231] syz-exec-17496 0...2 717515167us : 0: u1501854464 [ 935.285284] syz-exec-17496 0...2 717515171us : 0: u1501854464 [ 935.291351] syz-exec-17496 0...2 717515176us : 0: u1501854464 [ 935.297434] syz-exec-17496 0...2 717515180us : 0: u1501854464 [ 935.303487] syz-exec-17496 0...2 717515185us : 0: u1501854464 [ 935.309537] syz-exec-17496 0...2 717515189us : 0: u1501854464 [ 935.315588] syz-exec-17496 0...2 717515194us : 0: u1501854464 [ 935.321665] syz-exec-17496 0...2 717515198us : 0: u1501854464 [ 935.327720] syz-exec-17496 0...2 717515203us : 0: u1501854464 [ 935.333774] syz-exec-17496 0...2 717515207us : 0: u1501854464 [ 935.339824] syz-exec-17496 0...2 717515211us : 0: u1501854464 [ 935.345878] syz-exec-17496 0...2 717515215us : 0: u1501854464 [ 935.351934] syz-exec-17496 0...2 717515220us : 0: u1501854464 [ 935.358002] syz-exec-17496 0...2 717515224us : 0: u1501854464 [ 935.364055] syz-exec-17496 0...2 717515229us : 0: u1501854464 [ 935.370109] syz-exec-17496 0...2 717515235us : 0: u1501854464 [ 935.376164] syz-exec-17496 0...2 717515239us : 0: u1501854464 [ 935.382217] syz-exec-17496 0...2 717515246us : 0: u1501854464 [ 935.388283] syz-exec-17496 0...2 717515250us : 0: u1501854464 [ 935.394366] syz-exec-17496 0...2 717515258us : 0: u1501854464 [ 935.400455] syz-exec-17496 0...2 717515263us : 0: u1501854464 [ 935.406509] syz-exec-17496 0...2 717515271us : 0: u1501854464 [ 935.412580] syz-exec-17496 0...2 717515276us : 0: u1501854464 [ 935.418658] syz-exec-17496 0...2 717515281us : 0: u1501854464 [ 935.424746] syz-exec-17496 0...2 717515287us : 0: u1501854464 [ 935.430813] syz-exec-17496 0...2 717515294us : 0: u1501854464 [ 935.436868] syz-exec-17496 0...2 717515301us : 0: u1501854464 [ 935.442946] syz-exec-17496 0.N.2 717515343us : 0: u1501854464 [ 935.449030] syz-exec-17496 0...2 717515443us : 0: u1501854464 [ 935.455181] syz-exec-17496 0...2 717515450us : 0: u1501854464 [ 935.461238] syz-exec-17496 0...2 717515455us : 0: u1501854464 [ 935.467293] syz-exec-17496 0...2 717515461us : 0: u1501854464 [ 935.473348] syz-exec-17496 0...2 717515465us : 0: u1501854464 [ 935.479403] syz-exec-17496 0...2 717515471us : 0: u1501854464 [ 935.485462] syz-exec-17496 0...2 717515475us : 0: u1501854464 [ 935.491518] syz-exec-17496 0...2 717515481us : 0: u1501854464 [ 935.497576] syz-exec-17496 0...2 717515486us : 0: u1501854464 [ 935.503644] syz-exec-17496 0...2 717515491us : 0: u1501854464 [ 935.509701] syz-exec-17496 0...2 717515496us : 0: u1501854464 [ 935.515756] syz-exec-17496 0...2 717515501us : 0: u1501854464 [ 935.521811] syz-exec-17496 0...2 717515507us : 0: u1501854464 [ 935.527905] syz-exec-17496 0...2 717515522us : 0: u1501854464 [ 935.533996] syz-exec-17496 0...2 717515529us : 0: u1501854464 [ 935.540081] syz-exec-17496 0...2 717515533us : 0: u1501854464 [ 935.546142] syz-exec-17496 0...2 717515539us : 0: u1501854464 [ 935.552198] syz-exec-17496 0...2 717515543us : 0: u1501854464 [ 935.558256] syz-exec-17496 0...2 717515549us : 0: u1501854464 [ 935.564312] syz-exec-17496 0...2 717515554us : 0: u1501854464 [ 935.570378] syz-exec-17496 0...2 717515560us : 0: u1501854464 [ 935.576446] syz-exec-17496 0...2 717515564us : 0: u1501854464 [ 935.582504] syz-exec-17496 0...2 717515570us : 0: u1501854464 [ 935.588576] syz-exec-17496 0...2 717515575us : 0: u1501854464 [ 935.594652] syz-exec-17496 0...2 717515580us : 0: u1501854464 [ 935.600711] syz-exec-17496 0...2 717515585us : 0: u1501854464 [ 935.606769] syz-exec-17496 0...2 717515590us : 0: u1501854464 [ 935.612851] syz-exec-17496 0...2 717515595us : 0: u1501854464 [ 935.618914] syz-exec-17496 0...2 717515600us : 0: u1501854464 [ 935.624986] syz-exec-17496 0...2 717515606us : 0: u1501854464 [ 935.631054] syz-exec-17496 0...2 717515610us : 0: u1501854464 [ 935.637122] syz-exec-17496 0...2 717515617us : 0: u1501854464 [ 935.643207] syz-exec-17496 0...2 717515621us : 0: u1501854464 [ 935.649273] syz-exec-17496 0...2 717515627us : 0: u1501854464 [ 935.655351] syz-exec-17496 0...2 717515631us : 0: u1501854464 [ 935.661434] syz-exec-17496 0...2 717515637us : 0: u1501854464 [ 935.667518] syz-exec-17496 0...2 717515642us : 0: u1501854464 [ 935.673595] syz-exec-17496 0...2 717515648us : 0: u1501854464 [ 935.679705] syz-exec-17496 0...2 717515652us : 0: u1501854464 [ 935.685828] syz-exec-17496 0...2 717515657us : 0: u1501854464 [ 935.691893] syz-exec-17496 0...2 717515661us : 0: u1501854464 [ 935.697968] syz-exec-17496 0...2 717515666us : 0: u1501854464 [ 935.704075] syz-exec-17496 0...2 717515670us : 0: u1501854464 [ 935.710187] syz-exec-17496 0...2 717515675us : 0: u1501854464 [ 935.716259] syz-exec-17496 0...2 717515679us : 0: u1501854464 [ 935.722326] syz-exec-17496 0...2 717515684us : 0: u1501854464 [ 935.728385] syz-exec-17496 0...2 717515688us : 0: u1501854464 [ 935.734447] syz-exec-17496 0...2 717515693us : 0: u1501854464 [ 935.740505] syz-exec-17496 0...2 717515697us : 0: u1501854464 [ 935.746579] syz-exec-17496 0...2 717515702us : 0: u1501854464 [ 935.752671] syz-exec-17496 0...2 717515706us : 0: u1501854464 [ 935.758729] syz-exec-17496 0...2 717515711us : 0: u1501854464 [ 935.764825] syz-exec-17496 0...2 717515715us : 0: u1501854464 [ 935.770906] syz-exec-17496 0...2 717515720us : 0: u1501854464 [ 935.776995] syz-exec-17496 0...2 717515724us : 0: u1501854464 [ 935.783056] syz-exec-17496 0...2 717515729us : 0: u1501854464 [ 935.789121] syz-exec-17496 0...2 717515733us : 0: u1501854464 [ 935.795202] syz-exec-17496 0...2 717515738us : 0: u1501854464 [ 935.801250] syz-exec-17496 0...2 717515742us : 0: u1501854464 [ 935.807297] syz-exec-17496 0...2 717515747us : 0: u1501854464 [ 935.813549] syz-exec-17496 0...2 717515751us : 0: u1501854464 [ 935.819595] syz-exec-17496 0...2 717515756us : 0: u1501854464 [ 935.825644] syz-exec-17496 0...2 717515760us : 0: u1501854464 [ 935.831687] syz-exec-17496 0...2 717515765us : 0: u1501854464 [ 935.837733] syz-exec-17496 0...2 717515769us : 0: u1501854464 [ 935.843782] syz-exec-17496 0...2 717515774us : 0: u1501854464 [ 935.849829] syz-exec-17496 0...2 717515778us : 0: u1501854464 [ 935.855871] syz-exec-17496 0...2 717515783us : 0: u1501854464 [ 935.861914] syz-exec-17496 0...2 717515787us : 0: u1501854464 [ 935.867965] syz-exec-17496 0...2 717515792us : 0: u1501854464 [ 935.874007] syz-exec-17496 0...2 717515805us : 0: u1501854464 [ 935.880066] syz-exec-17496 0...2 717515812us : 0: u1501854464 [ 935.886112] syz-exec-17496 0...2 717515817us : 0: u1501854464 [ 935.892172] syz-exec-17496 0...2 717515823us : 0: u1501854464 [ 935.898216] syz-exec-17496 0...2 717515827us : 0: u1501854464 [ 935.904261] syz-exec-17496 0...2 717515833us : 0: u1501854464 [ 935.910303] syz-exec-17496 0...2 717515837us : 0: u1501854464 [ 935.916346] syz-exec-17496 0...2 717515843us : 0: u1501854464 [ 935.922389] syz-exec-17496 0...2 717515848us : 0: u1501854464 [ 935.928434] syz-exec-17496 0...2 717515853us : 0: u1501854464 [ 935.934479] syz-exec-17496 0...2 717515858us : 0: u1501854464 [ 935.940521] syz-exec-17496 0...2 717515863us : 0: u1501854464 [ 935.946567] syz-exec-17496 0...2 717515869us : 0: u1501854464 [ 935.952613] syz-exec-17496 0...2 717515873us : 0: u1501854464 [ 935.958662] syz-exec-17496 0...2 717515879us : 0: u1501854464 [ 935.964706] syz-exec-17496 0...2 717515883us : 0: u1501854464 [ 935.970749] syz-exec-17496 0...2 717515889us : 0: u1501854464 [ 935.976793] syz-exec-17496 0...2 717515894us : 0: u1501854464 [ 935.982835] syz-exec-17496 0...2 717515898us : 0: u1501854464 [ 935.988880] syz-exec-17496 0...2 717515903us : 0: u1501854464 [ 935.994928] syz-exec-17496 0...2 717515907us : 0: u1501854464 [ 936.000975] syz-exec-17496 0...2 717515912us : 0: u1501854464 [ 936.007019] syz-exec-17496 0...2 717515916us : 0: u1501854464 [ 936.013078] syz-exec-17496 0...2 717515921us : 0: u1501854464 [ 936.019126] syz-exec-17496 0...2 717515925us : 0: u1501854464 [ 936.025257] syz-exec-17496 0...2 717515930us : 0: u1501854464 [ 936.031299] syz-exec-17496 0...2 717515934us : 0: u1501854464 [ 936.037341] syz-exec-17496 0...2 717515939us : 0: u1501854464 [ 936.043383] syz-exec-17496 0...2 717515943us : 0: u1501854464 [ 936.049428] syz-exec-17496 0...2 717515948us : 0: u1501854464 [ 936.055470] syz-exec-17496 0...2 717515952us : 0: u1501854464 [ 936.061515] syz-exec-17496 0...2 717515957us : 0: u1501854464 [ 936.067561] syz-exec-17496 0...2 717515961us : 0: u1501854464 [ 936.073603] syz-exec-17496 0...2 717515966us : 0: u1501854464 [ 936.079654] syz-exec-17496 0...2 717515970us : 0: u1501854464 [ 936.085700] syz-exec-17496 0...2 717515974us : 0: u1501854464 [ 936.091759] syz-exec-17496 0...2 717515979us : 0: u1501854464 [ 936.097804] syz-exec-17496 0...2 717515983us : 0: u1501854464 [ 936.103851] syz-exec-17496 0...2 717515987us : 0: u1501854464 [ 936.109894] syz-exec-17496 0...2 717515994us : 0: u1501854464 [ 936.115956] syz-exec-17496 0...2 717515998us : 0: u1501854464 [ 936.122001] syz-exec-17496 0...2 717516005us : 0: u1501854464 [ 936.128043] syz-exec-17496 0...2 717516009us : 0: u1501854464 [ 936.134101] syz-exec-17496 0...2 717516015us : 0: u1501854464 [ 936.140144] syz-exec-17496 0...2 717516022us : 0: u1501854464 [ 936.146201] syz-exec-17496 0...2 717516026us : 0: u1501854464 [ 936.152246] syz-exec-17496 0...2 717516032us : 0: u1501854464 [ 936.158291] syz-exec-17496 0...2 717516037us : 0: u1501854464 [ 936.164340] syz-exec-17496 0...2 717516045us : 0: u1501854464 [ 936.170398] syz-exec-17496 0...2 717516051us : 0: u1501854464 [ 936.176448] syz-exec-17496 0...2 717516057us : 0: u1501854464 [ 936.182492] syz-exec-17496 0...2 717516061us : 0: u1501854464 [ 936.188535] syz-exec-17496 0...2 717516068us : 0: u1501854464 [ 936.194575] syz-exec-17496 0...2 717516072us : 0: u1501854464 [ 936.200620] syz-exec-17496 0...2 717516078us : 0: u1501854464 [ 936.206670] syz-exec-17496 0...2 717516082us : 0: u1501854464 [ 936.212712] syz-exec-17496 0...2 717516088us : 0: u1501854464 [ 936.218758] syz-exec-17496 0...2 717516093us : 0: u1501854464 [ 936.224800] syz-exec-17496 0...2 717516100us : 0: u1501854464 [ 936.230845] syz-exec-17496 0...2 717516104us : 0: u1501854464 [ 936.236924] syz-exec-17496 0...2 717516109us : 0: u1501854464 [ 936.242983] syz-exec-17496 0...2 717516114us : 0: u1501854464 [ 936.249027] syz-exec-17496 0...2 717516119us : 0: u1501854464 [ 936.255071] syz-exec-17496 0...2 717516125us : 0: u1501854464 [ 936.261115] syz-exec-17496 0...2 717516129us : 0: u1501854464 [ 936.267176] syz-exec-17496 0...2 717516135us : 0: u1501854464 [ 936.273219] syz-exec-17496 0...2 717516139us : 0: u1501854464 [ 936.279277] syz-exec-17496 0...2 717516144us : 0: u1501854464 [ 936.285351] syz-exec-17496 0...2 717516148us : 0: u1501854464 [ 936.291400] syz-exec-17496 0...2 717516153us : 0: u1501854464 [ 936.297502] syz-exec-17496 0...2 717516157us : 0: u1501854464 [ 936.303558] syz-exec-17496 0...2 717516162us : 0: u1501854464 [ 936.309617] syz-exec-17496 0...2 717516166us : 0: u1501854464 [ 936.315680] syz-exec-17496 0...2 717516171us : 0: u1501854464 [ 936.321737] syz-exec-17496 0...2 717516176us : 0: u1501854464 [ 936.327814] syz-exec-17496 0...2 717516180us : 0: u1501854464 [ 936.333876] syz-exec-17496 0...2 717516184us : 0: u1501854464 [ 936.339941] syz-exec-17496 0...2 717516189us : 0: u1501854464 [ 936.346002] syz-exec-17496 0...2 717516193us : 0: u1501854464 [ 936.352062] syz-exec-17496 0...2 717516198us : 0: u1501854464 [ 936.358149] syz-exec-17496 0...2 717516202us : 0: u1501854464 [ 936.364212] syz-exec-17496 0...2 717516207us : 0: u1501854464 [ 936.370276] syz-exec-17496 0...2 717516211us : 0: u1501854464 [ 936.376336] syz-exec-17496 0...2 717516216us : 0: u1501854464 [ 936.382411] syz-exec-17496 0...2 717516220us : 0: u1501854464 [ 936.388487] syz-exec-17496 0...2 717516225us : 0: u1501854464 [ 936.394546] syz-exec-17496 0...2 717516229us : 0: u1501854464 [ 936.400622] syz-exec-17496 0...2 717516234us : 0: u1501854464 [ 936.406704] syz-exec-17496 0...2 717516238us : 0: u1501854464 [ 936.412765] syz-exec-17496 0...2 717516243us : 0: u1501854464 [ 936.418839] syz-exec-17496 0...2 717516247us : 0: u1501854464 [ 936.424900] syz-exec-17496 0...2 717516252us : 0: u1501854464 [ 936.430964] syz-exec-17496 0...2 717516256us : 0: u1501854464 [ 936.437023] syz-exec-17496 0...2 717516261us : 0: u1501854464 [ 936.443099] syz-exec-17496 0...2 717516265us : 0: u1501854464 [ 936.449173] syz-exec-17496 0...2 717516270us : 0: u1501854464 [ 936.455241] syz-exec-17496 0...2 717516274us : 0: u1501854464 [ 936.461303] syz-exec-17496 0...2 717516279us : 0: u1501854464 [ 936.467363] syz-exec-17496 0...2 717516283us : 0: u1501854464 [ 936.473450] syz-exec-17496 0...2 717516288us : 0: u1501854464 [ 936.479533] syz-exec-17496 0...2 717516293us : 0: u1501854464 [ 936.485611] syz-exec-17496 0...2 717516297us : 0: u1501854464 [ 936.491678] syz-exec-17496 0...2 717516303us : 0: u1501854464 [ 936.497755] syz-exec-17496 0...2 717516374us : 0: u1501854464 [ 936.503816] syz-exec-17496 0...2 717516382us : 0: u1501854464 [ 936.509875] syz-exec-17496 0...2 717516387us : 0: u1501854464 [ 936.515938] syz-exec-17496 0...2 717516393us : 0: u1501854464 [ 936.521998] syz-exec-17496 0...2 717516414us : 0: u1501854464 [ 936.528054] syz-exec-17496 0...2 717516421us : 0: u1501854464 [ 936.534132] syz-exec-17496 0.N.2 717516457us : 0: u1501854464 [ 936.540191] syz-exec-17496 0...2 717516499us : 0: u1501854464 [ 936.546248] syz-exec-17496 0...2 717516505us : 0: u1501854464 [ 936.552306] syz-exec-17496 0...2 717516522us : 0: u1501854464 [ 936.558357] syz-exec-17496 0...2 717516530us : 0: u1501854464 [ 936.564403] syz-exec-17496 0...2 717516536us : 0: u1501854464 [ 936.570448] syz-exec-17496 0...2 717516540us : 0: u1501854464 [ 936.576510] syz-exec-17496 0...2 717516546us : 0: u1501854464 [ 936.582553] syz-exec-17496 0...2 717516551us : 0: u1501854464 [ 936.588597] syz-exec-17496 0...2 717516556us : 0: u1501854464 [ 936.594646] syz-exec-17496 0...2 717516577us : 0: u1501854464 [ 936.600689] syz-exec-17496 0...2 717516584us : 0: u1501854464 [ 936.606732] syz-exec-17496 0...2 717516590us : 0: u1501854464 [ 936.612777] syz-exec-17496 0...2 717516596us : 0: u1501854464 [ 936.618822] syz-exec-17496 0...2 717516602us : 0: u1501854464 [ 936.624883] syz-exec-17496 0...2 717516607us : 0: u1501854464 [ 936.630948] syz-exec-17496 0...2 717516611us : 0: u1501854464 [ 936.636992] syz-exec-17496 0...2 717516617us : 0: u1501854464 [ 936.643037] syz-exec-17496 0...2 717516621us : 0: u1501854464 [ 936.649079] syz-exec-17496 0...2 717516627us : 0: u1501854464 [ 936.655122] syz-exec-17496 0...2 717516631us : 0: u1501854464 [ 936.661167] syz-exec-17496 0...2 717516637us : 0: u1501854464 [ 936.667224] syz-exec-17496 0...2 717516641us : 0: u1501854464 [ 936.673269] syz-exec-17496 0...2 717516647us : 0: u1501854464 [ 936.679585] syz-exec-17496 0...2 717516651us : 0: u1501854464 [ 936.685631] syz-exec-17496 0...2 717516656us : 0: u1501854464 [ 936.691683] syz-exec-17496 0...2 717516661us : 0: u1501854464 [ 936.697729] syz-exec-17496 0...2 717516666us : 0: u1501854464 [ 936.703784] syz-exec-17496 0...2 717516671us : 0: u1501854464 [ 936.709846] syz-exec-17496 0...2 717516676us : 0: u1501854464 [ 936.715893] syz-exec-17496 0...2 717516681us : 0: u1501854464 [ 936.721962] syz-exec-17496 0...2 717516686us : 0: u1501854464 [ 936.728061] syz-exec-17496 0...2 717516690us : 0: u1501854464 [ 936.734118] syz-exec-17496 0...2 717516694us : 0: u1501854464 [ 936.740170] syz-exec-17496 0...2 717516699us : 0: u1501854464 [ 936.746224] syz-exec-17496 0...2 717516703us : 0: u1501854464 [ 936.752272] syz-exec-17496 0...2 717516707us : 0: u1501854464 [ 936.758325] syz-exec-17496 0...2 717516712us : 0: u1501854464 [ 936.764372] syz-exec-17496 0...2 717516716us : 0: u1501854464 [ 936.770423] syz-exec-17496 0...2 717516720us : 0: u1501854464 [ 936.776479] syz-exec-17496 0...2 717516725us : 0: u1501854464 [ 936.782548] syz-exec-17496 0...2 717516729us : 0: u1501854464 [ 936.788615] syz-exec-17496 0...2 717516734us : 0: u1501854464 [ 936.794676] syz-exec-17496 0...2 717516738us : 0: u1501854464 [ 936.800722] syz-exec-17496 0...2 717516742us : 0: u1501854464 [ 936.806766] syz-exec-17496 0...2 717516747us : 0: u1501854464 [ 936.812814] syz-exec-17496 0...2 717516751us : 0: u1501854464 [ 936.818858] syz-exec-17496 0...2 717516756us : 0: u1501854464 [ 936.824904] syz-exec-17496 0...2 717516760us : 0: u1501854464 [ 936.830954] syz-exec-17496 0...2 717516764us : 0: u1501854464 [ 936.837004] syz-exec-17496 0...2 717516769us : 0: u1501854464 [ 936.843049] syz-exec-17496 0...2 717516773us : 0: u1501854464 [ 936.849110] syz-exec-17496 0...2 717516777us : 0: u1501854464 [ 936.855163] syz-exec-17496 0...2 717516781us : 0: u1501854464 [ 936.861226] syz-exec-17496 0...2 717516786us : 0: u1501854464 [ 936.867287] syz-exec-17496 0...2 717516790us : 0: u1501854464 [ 936.873347] syz-exec-17496 0...2 717516820us : 0: u1501854464 [ 936.879441] syz-exec-17496 0...2 717516826us : 0: u1501854464 [ 936.885506] syz-exec-17496 0...2 717516830us : 0: u1501854464 [ 936.891564] syz-exec-17496 0...2 717516835us : 0: u1501854464 [ 936.897615] syz-exec-17496 0...2 717516840us : 0: u1501854464 [ 936.903684] syz-exec-17496 0...2 717516845us : 0: u1501854464 [ 936.909747] syz-exec-17496 0...2 717516850us : 0: u1501854464 [ 936.915793] syz-exec-17496 0...2 717516855us : 0: u1501854464 [ 936.921835] syz-exec-17496 0...2 717516860us : 0: u1501854464 [ 936.927891] syz-exec-17496 0...2 717516864us : 0: u1501854464 [ 936.933957] syz-exec-17496 0...2 717516872us : 0: u1501854464 [ 936.940011] syz-exec-17496 0...2 717516877us : 0: u1501854464 [ 936.946144] syz-exec-17496 0...2 717516882us : 0: u1501854464 [ 936.952194] syz-exec-17496 0...2 717516886us : 0: u1501854464 [ 936.958240] syz-exec-17496 0...2 717516892us : 0: u1501854464 [ 936.964287] syz-exec-17496 0...2 717516897us : 0: u1501854464 [ 936.970332] syz-exec-17496 0...2 717516901us : 0: u1501854464 [ 936.976393] syz-exec-17496 0...2 717516906us : 0: u1501854464 [ 936.982440] syz-exec-17496 0...2 717516910us : 0: u1501854464 [ 936.988484] syz-exec-17496 0...2 717516915us : 0: u1501854464 [ 936.994532] syz-exec-17496 0...2 717516919us : 0: u1501854464 [ 937.000594] syz-exec-17496 0...2 717516924us : 0: u1501854464 [ 937.006647] syz-exec-17496 0...2 717516929us : 0: u1501854464 [ 937.012696] syz-exec-17496 0...2 717516934us : 0: u1501854464 [ 937.018741] syz-exec-17496 0...2 717516938us : 0: u1501854464 [ 937.024788] syz-exec-17496 0...2 717516944us : 0: u1501854464 [ 937.030830] syz-exec-17496 0...2 717516948us : 0: u1501854464 [ 937.036874] syz-exec-17496 0...2 717516954us : 0: u1501854464 [ 937.042916] syz-exec-17496 0...2 717516958us : 0: u1501854464 [ 937.048969] syz-exec-17496 0...2 717516963us : 0: u1501854464 [ 937.055018] syz-exec-17496 0...2 717516968us : 0: u1501854464 [ 937.061061] syz-exec-17496 0...2 717516973us : 0: u1501854464 [ 937.067105] syz-exec-17496 0...2 717516978us : 0: u1501854464 [ 937.073166] syz-exec-17496 0...2 717516983us : 0: u1501854464 [ 937.079210] syz-exec-17496 0...2 717516987us : 0: u1501854464 [ 937.085255] syz-exec-17496 0...2 717516993us : 0: u1501854464 [ 937.091298] syz-exec-17496 0...2 717516998us : 0: u1501854464 [ 937.097343] syz-exec-17496 0...2 717517002us : 0: u1501854464 [ 937.103386] syz-exec-17496 0...2 717517007us : 0: u1501854464 [ 937.109429] syz-exec-17496 0...2 717517011us : 0: u1501854464 [ 937.115474] syz-exec-17496 0...2 717517016us : 0: u1501854464 [ 937.121519] syz-exec-17496 0...2 717517020us : 0: u1501854464 [ 937.127564] syz-exec-17496 0...2 717517025us : 0: u1501854464 [ 937.133610] syz-exec-17496 0...2 717517029us : 0: u1501854464 [ 937.139669] syz-exec-17496 0...2 717517033us : 0: u1501854464 [ 937.145713] syz-exec-17496 0...2 717517037us : 0: u1501854464 [ 937.151756] syz-exec-17496 0...2 717517042us : 0: u1501854464 [ 937.157832] syz-exec-17496 0...2 717517047us : 0: u1501854464 [ 937.163875] syz-exec-17496 0...2 717517051us : 0: u1501854464 [ 937.169929] syz-exec-17496 0...2 717517055us : 0: u1501854464 [ 937.175976] syz-exec-17496 0...2 717517060us : 0: u1501854464 [ 937.182021] syz-exec-17496 0...2 717517065us : 0: u1501854464 [ 937.188067] syz-exec-17496 0...2 717517072us : 0: u1501854464 [ 937.194113] syz-exec-17496 0...2 717517077us : 0: u1501854464 [ 937.200159] syz-exec-17496 0...2 717517083us : 0: u1501854464 [ 937.206204] syz-exec-17496 0...2 717517088us : 0: u1501854464 [ 937.212249] syz-exec-17496 0...2 717517094us : 0: u1501854464 [ 937.218295] syz-exec-17496 0...2 717517099us : 0: u1501854464 [ 937.224340] syz-exec-17496 0...2 717517103us : 0: u1501854464 [ 937.230385] syz-exec-17496 0...2 717517109us : 0: u1501854464 [ 937.236429] syz-exec-17496 0...2 717517113us : 0: u1501854464 [ 937.242473] syz-exec-17496 0...2 717517119us : 0: u1501854464 [ 937.248516] syz-exec-17496 0...2 717517123us : 0: u1501854464 [ 937.254573] syz-exec-17496 0...2 717517129us : 0: u1501854464 [ 937.260617] syz-exec-17496 0...2 717517133us : 0: u1501854464 [ 937.266667] syz-exec-17496 0...2 717517139us : 0: u1501854464 [ 937.272711] syz-exec-17496 0...2 717517144us : 0: u1501854464 [ 937.278759] syz-exec-17496 0...2 717517150us : 0: u1501854464 [ 937.284805] syz-exec-17496 0...2 717517154us : 0: u1501854464 [ 937.290851] syz-exec-17496 0...2 717517160us : 0: u1501854464 [ 937.296896] syz-exec-17496 0...2 717517165us : 0: u1501854464 [ 937.302960] syz-exec-17496 0...2 717517171us : 0: u1501854464 [ 937.309005] syz-exec-17496 0...2 717517175us : 0: u1501854464 [ 937.315064] syz-exec-17496 0...2 717517180us : 0: u1501854464 [ 937.321108] syz-exec-17496 0...2 717517185us : 0: u1501854464 [ 937.327172] syz-exec-17496 0...2 717517189us : 0: u1501854464 [ 937.333218] syz-exec-17496 0...2 717517194us : 0: u1501854464 [ 937.339263] syz-exec-17496 0...2 717517198us : 0: u1501854464 [ 937.345322] syz-exec-17496 0...2 717517203us : 0: u1501854464 [ 937.351369] syz-exec-17496 0...2 717517207us : 0: u1501854464 [ 937.357413] syz-exec-17496 0...2 717517212us : 0: u1501854464 [ 937.363457] syz-exec-17496 0...2 717517216us : 0: u1501854464 [ 937.369502] syz-exec-17496 0...2 717517221us : 0: u1501854464 [ 937.375547] syz-exec-17496 0...2 717517225us : 0: u1501854464 [ 937.381590] syz-exec-17496 0...2 717517230us : 0: u1501854464 [ 937.387642] syz-exec-17496 0...2 717517234us : 0: u1501854464 [ 937.393688] syz-exec-17496 0...2 717517239us : 0: u1501854464 [ 937.399733] syz-exec-17496 0...2 717517243us : 0: u1501854464 [ 937.405779] syz-exec-17496 0...2 717517247us : 0: u1501854464 [ 937.411821] syz-exec-17496 0...2 717517252us : 0: u1501854464 [ 937.417867] syz-exec-17496 0...2 717517257us : 0: u1501854464 [ 937.423922] syz-exec-17496 0...2 717517261us : 0: u1501854464 [ 937.429967] syz-exec-17496 0...2 717517266us : 0: u1501854464 [ 937.436012] syz-exec-17496 0...2 717517270us : 0: u1501854464 [ 937.442066] syz-exec-17496 0...2 717517274us : 0: u1501854464 [ 937.448134] syz-exec-17496 0...2 717517279us : 0: u1501854464 [ 937.454182] syz-exec-17496 0...2 717517283us : 0: u1501854464 [ 937.460225] syz-exec-17496 0...2 717517288us : 0: u1501854464 [ 937.466272] syz-exec-17496 0...2 717517292us : 0: u1501854464 [ 937.472315] syz-exec-17496 0...2 717517296us : 0: u1501854464 [ 937.478358] syz-exec-17496 0...2 717517302us : 0: u1501854464 [ 937.484402] syz-exec-17496 0...2 717517348us : 0: u1501854464 [ 937.490447] syz-exec-17496 0...2 717517356us : 0: u1501854464 [ 937.496493] syz-exec-17496 0...2 717517362us : 0: u1501854464 [ 937.502538] syz-exec-17496 0...2 717517366us : 0: u1501854464 [ 937.508593] syz-exec-17496 0...2 717517373us : 0: u1501854464 [ 937.514659] syz-exec-17496 0...2 717517379us : 0: u1501854464 [ 937.520719] syz-exec-17496 0...2 717517384us : 0: u1501854464 [ 937.526770] syz-exec-17496 0...2 717517389us : 0: u1501854464 [ 937.532824] syz-exec-17496 0...2 717517395us : 0: u1501854464 [ 937.538877] syz-exec-17496 0...2 717517400us : 0: u1501854464 [ 937.544936] syz-exec-17496 0...2 717517405us : 0: u1501854464 [ 937.550990] syz-exec-17496 0...2 717517412us : 0: u1501854464 [ 937.557058] syz-exec-17496 0...2 717517416us : 0: u1501854464 [ 937.563114] syz-exec-17496 0...2 717517422us : 0: u1501854464 [ 937.569177] syz-exec-17496 0...2 717517426us : 0: u1501854464 [ 937.575259] syz-exec-17496 0...2 717517432us : 0: u1501854464 [ 937.581337] syz-exec-17496 0...2 717517437us : 0: u1501854464 [ 937.587398] syz-exec-17496 0...2 717517443us : 0: u1501854464 [ 937.593477] syz-exec-17496 0...2 717517447us : 0: u1501854464 [ 937.599539] syz-exec-17496 0...2 717517453us : 0: u1501854464 [ 937.605597] syz-exec-17496 0...2 717517457us : 0: u1501854464 [ 937.611671] syz-exec-17496 0...2 717517463us : 0: u1501854464 [ 937.617728] syz-exec-17496 0...2 717517467us : 0: u1501854464 [ 937.623781] syz-exec-17496 0...2 717517472us : 0: u1501854464 [ 937.629850] syz-exec-17496 0...2 717517477us : 0: u1501854464 [ 937.635905] syz-exec-17496 0...2 717517482us : 0: u1501854464 [ 937.641967] syz-exec-17496 0...2 717517487us : 0: u1501854464 [ 937.648020] syz-exec-17496 0...2 717517491us : 0: u1501854464 [ 937.654075] syz-exec-17496 0...2 717517496us : 0: u1501854464 [ 937.660132] syz-exec-17496 0...2 717517500us : 0: u1501854464 [ 937.666189] syz-exec-17496 0...2 717517505us : 0: u1501854464 [ 937.672244] syz-exec-17496 0...2 717517520us : 0: u1501854464 [ 937.678298] syz-exec-17496 0...2 717517527us : 0: u1501854464 [ 937.684368] syz-exec-17496 0...2 717517532us : 0: u1501854464 [ 937.690425] syz-exec-17496 0.N.2 717517561us : 0: u1501854464 [ 937.696486] syz-exec-17496 0...2 717517630us : 0: u1501854464 [ 937.702551] syz-exec-17496 0...2 717517638us : 0: u1501854464 [ 937.708612] syz-exec-17496 0...2 717517644us : 0: u1501854464 [ 937.714682] syz-exec-17496 0...2 717517650us : 0: u1501854464 [ 937.720744] syz-exec-17496 0...2 717517654us : 0: u1501854464 [ 937.726801] syz-exec-17496 0...2 717517662us : 0: u1501854464 [ 937.732857] syz-exec-17496 0...2 717517666us : 0: u1501854464 [ 937.738916] syz-exec-17496 0...2 717517673us : 0: u1501854464 [ 937.744978] syz-exec-17496 0...2 717517677us : 0: u1501854464 [ 937.751038] syz-exec-17496 0...2 717517683us : 0: u1501854464 [ 937.757096] syz-exec-17496 0...2 717517687us : 0: u1501854464 [ 937.763159] syz-exec-17496 0...2 717517694us : 0: u1501854464 [ 937.769222] syz-exec-17496 0...2 717517699us : 0: u1501854464 [ 937.775325] syz-exec-17496 0...2 717517704us : 0: u1501854464 [ 937.781382] syz-exec-17496 0...2 717517709us : 0: u1501854464 [ 937.787439] syz-exec-17496 0...2 717517714us : 0: u1501854464 [ 937.793507] syz-exec-17496 0...2 717517720us : 0: u1501854464 [ 937.799567] syz-exec-17496 0...2 717517724us : 0: u1501854464 [ 937.805627] syz-exec-17496 0...2 717517730us : 0: u1501854464 [ 937.811882] syz-exec-17496 0...2 717517735us : 0: u1501854464 [ 937.818054] syz-exec-17496 0...2 717517740us : 0: u1501854464 [ 937.824106] syz-exec-17496 0...2 717517745us : 0: u1501854464 [ 937.830155] syz-exec-17496 0...2 717517750us : 0: u1501854464 [ 937.836206] syz-exec-17496 0...2 717517755us : 0: u1501854464 [ 937.842254] syz-exec-17496 0...2 717517760us : 0: u1501854464 [ 937.848328] syz-exec-17496 0...2 717517765us : 0: u1501854464 [ 937.854408] syz-exec-17496 0...2 717517770us : 0: u1501854464 [ 937.860473] syz-exec-17496 0...2 717517774us : 0: u1501854464 [ 937.866527] syz-exec-17496 0...2 717517779us : 0: u1501854464 [ 937.872571] syz-exec-17496 0...2 717517783us : 0: u1501854464 [ 937.878616] syz-exec-17496 0...2 717517788us : 0: u1501854464 [ 937.884670] syz-exec-17496 0...2 717517792us : 0: u1501854464 [ 937.890715] syz-exec-17496 0...2 717517806us : 0: u1501854464 [ 937.896761] syz-exec-17496 0...2 717517812us : 0: u1501854464 [ 937.902812] syz-exec-17496 0...2 717517816us : 0: u1501854464 [ 937.908855] syz-exec-17496 0...2 717517821us : 0: u1501854464 [ 937.914897] syz-exec-17496 0...2 717517826us : 0: u1501854464 [ 937.920956] syz-exec-17496 0...2 717517832us : 0: u1501854464 [ 937.927007] syz-exec-17496 0...2 717517836us : 0: u1501854464 [ 937.933059] syz-exec-17496 0...2 717517842us : 0: u1501854464 [ 937.939154] syz-exec-17496 0...2 717517847us : 0: u1501854464 [ 937.945206] syz-exec-17496 0...2 717517853us : 0: u1501854464 [ 937.951264] syz-exec-17496 0...2 717517857us : 0: u1501854464 [ 937.957316] syz-exec-17496 0...2 717517863us : 0: u1501854464 [ 937.963360] syz-exec-17496 0...2 717517867us : 0: u1501854464 [ 937.969406] syz-exec-17496 0...2 717517873us : 0: u1501854464 [ 937.975451] syz-exec-17496 0...2 717517878us : 0: u1501854464 [ 937.981509] syz-exec-17496 0...2 717517883us : 0: u1501854464 [ 937.987554] syz-exec-17496 0...2 717517888us : 0: u1501854464 [ 937.993599] syz-exec-17496 0...2 717517893us : 0: u1501854464 [ 937.999652] syz-exec-17496 0...2 717517899us : 0: u1501854464 [ 938.005698] syz-exec-17496 0...2 717517903us : 0: u1501854464 [ 938.011743] syz-exec-17496 0...2 717517909us : 0: u1501854464 [ 938.017786] syz-exec-17496 0...2 717517913us : 0: u1501854464 [ 938.023834] syz-exec-17496 0...2 717517919us : 0: u1501854464 [ 938.029933] syz-exec-17496 0...2 717517924us : 0: u1501854464 [ 938.035980] syz-exec-17496 0...2 717517930us : 0: u1501854464 [ 938.042024] syz-exec-17496 0...2 717517934us : 0: u1501854464 [ 938.048068] syz-exec-17496 0...2 717517939us : 0: u1501854464 [ 938.054121] syz-exec-17496 0...2 717517943us : 0: u1501854464 [ 938.060164] syz-exec-17496 0...2 717517948us : 0: u1501854464 [ 938.066208] syz-exec-17496 0...2 717517952us : 0: u1501854464 [ 938.072252] syz-exec-17496 0...2 717517957us : 0: u1501854464 [ 938.078314] syz-exec-17496 0...2 717517961us : 0: u1501854464 [ 938.084362] syz-exec-17496 0...2 717517966us : 0: u1501854464 [ 938.090425] syz-exec-17496 0...2 717517970us : 0: u1501854464 [ 938.096471] syz-exec-17496 0...2 717517975us : 0: u1501854464 [ 938.102528] syz-exec-17496 0...2 717517979us : 0: u1501854464 [ 938.108571] syz-exec-17496 0...2 717517984us : 0: u1501854464 [ 938.114632] syz-exec-17496 0...2 717517988us : 0: u1501854464 [ 938.120684] syz-exec-17496 0...2 717517993us : 0: u1501854464 [ 938.126728] syz-exec-17496 0...2 717517997us : 0: u1501854464 [ 938.132770] syz-exec-17496 0...2 717518002us : 0: u1501854464 [ 938.138813] syz-exec-17496 0...2 717518006us : 0: u1501854464 [ 938.144858] syz-exec-17496 0...2 717518011us : 0: u1501854464 [ 938.150904] syz-exec-17496 0...2 717518015us : 0: u1501854464 [ 938.156959] syz-exec-17496 0...2 717518020us : 0: u1501854464 [ 938.163017] syz-exec-17496 0...2 717518024us : 0: u1501854464 [ 938.169061] syz-exec-17496 0...2 717518029us : 0: u1501854464 [ 938.175107] syz-exec-17496 0...2 717518034us : 0: u1501854464 [ 938.181152] syz-exec-17496 0...2 717518038us : 0: u1501854464 [ 938.187197] syz-exec-17496 0...2 717518043us : 0: u1501854464 [ 938.193243] syz-exec-17496 0...2 717518047us : 0: u1501854464 [ 938.199315] syz-exec-17496 0...2 717518052us : 0: u1501854464 [ 938.205358] syz-exec-17496 0...2 717518056us : 0: u1501854464 [ 938.211405] syz-exec-17496 0...2 717518061us : 0: u1501854464 [ 938.217451] syz-exec-17496 0...2 717518065us : 0: u1501854464 [ 938.223494] syz-exec-17496 0...2 717518070us : 0: u1501854464 [ 938.229569] syz-exec-17496 0...2 717518074us : 0: u1501854464 [ 938.235610] syz-exec-17496 0...2 717518078us : 0: u1501854464 [ 938.241659] syz-exec-17496 0...2 717518083us : 0: u1501854464 [ 938.247703] syz-exec-17496 0...2 717518087us : 0: u1501854464 [ 938.253747] syz-exec-17496 0...2 717518095us : 0: u1501854464 [ 938.259793] syz-exec-17496 0...2 717518099us : 0: u1501854464 [ 938.265840] syz-exec-17496 0...2 717518105us : 0: u1501854464 [ 938.271897] syz-exec-17496 0...2 717518110us : 0: u1501854464 [ 938.277958] syz-exec-17496 0...2 717518116us : 0: u1501854464 [ 938.284017] syz-exec-17496 0...2 717518122us : 0: u1501854464 [ 938.290073] syz-exec-17496 0...2 717518128us : 0: u1501854464 [ 938.296130] syz-exec-17496 0...2 717518133us : 0: u1501854464 [ 938.302187] syz-exec-17496 0...2 717518139us : 0: u1501854464 [ 938.308247] syz-exec-17496 0...2 717518144us : 0: u1501854464 [ 938.314312] syz-exec-17496 0...2 717518150us : 0: u1501854464 [ 938.320368] syz-exec-17496 0...2 717518155us : 0: u1501854464 [ 938.326443] syz-exec-17496 0...2 717518160us : 0: u1501854464 [ 938.332518] syz-exec-17496 0...2 717518167us : 0: u1501854464 [ 938.338577] syz-exec-17496 0...2 717518171us : 0: u1501854464 [ 938.344643] syz-exec-17496 0...2 717518178us : 0: u1501854464 [ 938.350706] syz-exec-17496 0...2 717518183us : 0: u1501854464 [ 938.356768] syz-exec-17496 0...2 717518189us : 0: u1501854464 [ 938.362831] syz-exec-17496 0...2 717518193us : 0: u1501854464 [ 938.368907] syz-exec-17496 0...2 717518199us : 0: u1501854464 [ 938.374994] syz-exec-17496 0...2 717518204us : 0: u1501854464 [ 938.381054] syz-exec-17496 0...2 717518209us : 0: u1501854464 [ 938.387117] syz-exec-17496 0...2 717518214us : 0: u1501854464 [ 938.393177] syz-exec-17496 0...2 717518219us : 0: u1501854464 [ 938.399236] syz-exec-17496 0...2 717518225us : 0: u1501854464 [ 938.405296] syz-exec-17496 0...2 717518229us : 0: u1501854464 [ 938.411354] syz-exec-17496 0...2 717518234us : 0: u1501854464 [ 938.417411] syz-exec-17496 0...2 717518238us : 0: u1501854464 [ 938.423468] syz-exec-17496 0...2 717518243us : 0: u1501854464 [ 938.429526] syz-exec-17496 0...2 717518247us : 0: u1501854464 [ 938.435582] syz-exec-17496 0...2 717518252us : 0: u1501854464 [ 938.441678] syz-exec-17496 0...2 717518256us : 0: u1501854464 [ 938.447757] syz-exec-17496 0...2 717518261us : 0: u1501854464 [ 938.453815] syz-exec-17496 0...2 717518265us : 0: u1501854464 [ 938.459871] syz-exec-17496 0...2 717518270us : 0: u1501854464 [ 938.465934] syz-exec-17496 0...2 717518274us : 0: u1501854464 [ 938.471996] syz-exec-17496 0...2 717518281us : 0: u1501854464 [ 938.478060] syz-exec-17496 0...2 717518285us : 0: u1501854464 [ 938.484135] syz-exec-17496 0...2 717518290us : 0: u1501854464 [ 938.490194] syz-exec-17496 0...2 717518294us : 0: u1501854464 [ 938.496253] syz-exec-17496 0...2 717518299us : 0: u1501854464 [ 938.502308] syz-exec-17496 0...2 717518307us : 0: u1501854464 [ 938.508365] syz-exec-17496 0...2 717518349us : 0: u1501854464 [ 938.514459] syz-exec-17496 0...2 717518356us : 0: u1501854464 [ 938.520514] syz-exec-17496 0...2 717518360us : 0: u1501854464 [ 938.526571] syz-exec-17496 0...2 717518366us : 0: u1501854464 [ 938.532648] syz-exec-17496 0...2 717518371us : 0: u1501854464 [ 938.538709] syz-exec-17496 0...2 717518378us : 0: u1501854464 [ 938.544764] syz-exec-17496 0...2 717518384us : 0: u1501854464 [ 938.550810] syz-exec-17496 0...2 717518390us : 0: u1501854464 [ 938.556870] syz-exec-17496 0...2 717518394us : 0: u1501854464 [ 938.562915] syz-exec-17496 0...2 717518401us : 0: u1501854464 [ 938.568963] syz-exec-17496 0...2 717518405us : 0: u1501854464 [ 938.575006] syz-exec-17496 0...2 717518413us : 0: u1501854464 [ 938.581050] syz-exec-17496 0...2 717518417us : 0: u1501854464 [ 938.587096] syz-exec-17496 0...2 717518423us : 0: u1501854464 [ 938.593148] syz-exec-17496 0...2 717518428us : 0: u1501854464 [ 938.599195] syz-exec-17496 0...2 717518434us : 0: u1501854464 [ 938.605239] syz-exec-17496 0...2 717518439us : 0: u1501854464 [ 938.611285] syz-exec-17496 0...2 717518443us : 0: u1501854464 [ 938.617328] syz-exec-17496 0...2 717518449us : 0: u1501854464 [ 938.623373] syz-exec-17496 0...2 717518453us : 0: u1501854464 [ 938.629413] syz-exec-17496 0...2 717518459us : 0: u1501854464 [ 938.635452] syz-exec-17496 0...2 717518464us : 0: u1501854464 [ 938.641495] syz-exec-17496 0...2 717518470us : 0: u1501854464 [ 938.647538] syz-exec-17496 0...2 717518474us : 0: u1501854464 [ 938.653583] syz-exec-17496 0...2 717518480us : 0: u1501854464 [ 938.659628] syz-exec-17496 0...2 717518484us : 0: u1501854464 [ 938.665681] syz-exec-17496 0...2 717518490us : 0: u1501854464 [ 938.671727] syz-exec-17496 0...2 717518495us : 0: u1501854464 [ 938.677995] syz-exec-17496 0...2 717518501us : 0: u1501854464 [ 938.684058] syz-exec-17496 0...2 717518505us : 0: u1501854464 [ 938.690100] syz-exec-17496 0...2 717518523us : 0: u1501854464 [ 938.696144] syz-exec-17496 0...2 717518530us : 0: u1501854464 [ 938.702199] syz-exec-17496 0...2 717518536us : 0: u1501854464 [ 938.708245] syz-exec-17496 0...2 717518541us : 0: u1501854464 [ 938.714307] syz-exec-17496 0...2 717518546us : 0: u1501854464 [ 938.720366] syz-exec-17496 0...2 717518551us : 0: u1501854464 [ 938.726411] syz-exec-17496 0...2 717518556us : 0: u1501854464 [ 938.732461] syz-exec-17496 0...2 717518562us : 0: u1501854464 [ 938.738504] syz-exec-17496 0...2 717518566us : 0: u1501854464 [ 938.744553] syz-exec-17496 0...2 717518572us : 0: u1501854464 [ 938.750598] syz-exec-17496 0...2 717518577us : 0: u1501854464 [ 938.756650] syz-exec-17496 0...2 717518583us : 0: u1501854464 [ 938.762694] syz-exec-17496 0...2 717518587us : 0: u1501854464 [ 938.768738] syz-exec-17496 0...2 717518593us : 0: u1501854464 [ 938.774800] syz-exec-17496 0...2 717518597us : 0: u1501854464 [ 938.780845] syz-exec-17496 0...2 717518603us : 0: u1501854464 [ 938.786888] syz-exec-17496 0...2 717518608us : 0: u1501854464 [ 938.792936] syz-exec-17496 0...2 717518614us : 0: u1501854464 [ 938.798981] syz-exec-17496 0...2 717518618us : 0: u1501854464 [ 938.805022] syz-exec-17496 0...2 717518623us : 0: u1501854464 [ 938.811065] syz-exec-17496 0...2 717518628us : 0: u1501854464 [ 938.817108] syz-exec-17496 0...2 717518632us : 0: u1501854464 [ 938.823153] syz-exec-17496 0...2 717518636us : 0: u1501854464 [ 938.829201] syz-exec-17496 0.N.2 717518676us : 0: u1501854464 [ 938.835246] syz-exec-17496 0...2 717518891us : 0: u1501854464 [ 938.841290] syz-exec-17496 0...2 717518898us : 0: u1501854464 [ 938.847334] syz-exec-17496 0...2 717518904us : 0: u1501854464 [ 938.853380] syz-exec-17496 0...2 717518909us : 0: u1501854464 [ 938.859445] syz-exec-17496 0...2 717518915us : 0: u1501854464 [ 938.865496] syz-exec-17496 0...2 717518919us : 0: u1501854464 [ 938.871542] syz-exec-17496 0...2 717518925us : 0: u1501854464 [ 938.877596] syz-exec-17496 0...2 717518929us : 0: u1501854464 [ 938.883658] syz-exec-17496 0...2 717518935us : 0: u1501854464 [ 938.889713] syz-exec-17496 0...2 717518940us : 0: u1501854464 [ 938.895772] syz-exec-17496 0...2 717518946us : 0: u1501854464 [ 938.901822] syz-exec-17496 0...2 717518950us : 0: u1501854464 [ 938.907874] syz-exec-17496 0...2 717518956us : 0: u1501854464 [ 938.913928] syz-exec-17496 0...2 717518961us : 0: u1501854464 [ 938.919996] syz-exec-17496 0...2 717518966us : 0: u1501854464 [ 938.926048] syz-exec-17496 0...2 717518971us : 0: u1501854464 [ 938.932103] syz-exec-17496 0...2 717518976us : 0: u1501854464 [ 938.938166] syz-exec-17496 0...2 717518981us : 0: u1501854464 [ 938.944221] syz-exec-17496 0...2 717518986us : 0: u1501854464 [ 938.950328] syz-exec-17496 0...2 717518991us : 0: u1501854464 [ 938.956410] syz-exec-17496 0...2 717518996us : 0: u1501854464 [ 938.962467] syz-exec-17496 0...2 717519002us : 0: u1501854464 [ 938.968556] syz-exec-17496 0...2 717519006us : 0: u1501854464 [ 938.974632] syz-exec-17496 0...2 717519012us : 0: u1501854464 [ 938.980702] syz-exec-17496 0...2 717519017us : 0: u1501854464 [ 938.986759] syz-exec-17496 0...2 717519022us : 0: u1501854464 [ 938.992818] syz-exec-17496 0...2 717519026us : 0: u1501854464 [ 938.998891] syz-exec-17496 0...2 717519030us : 0: u1501854464 [ 939.004973] syz-exec-17496 0...2 717519035us : 0: u1501854464 [ 939.011036] syz-exec-17496 0...2 717519039us : 0: u1501854464 [ 939.017103] syz-exec-17496 0...2 717519044us : 0: u1501854464 [ 939.023190] syz-exec-17496 0...2 717519049us : 0: u1501854464 [ 939.029274] syz-exec-17496 0...2 717519053us : 0: u1501854464 [ 939.035360] syz-exec-17496 0...2 717519057us : 0: u1501854464 [ 939.041431] syz-exec-17496 0...2 717519062us : 0: u1501854464 [ 939.047498] syz-exec-17496 0...2 717519066us : 0: u1501854464 [ 939.053581] syz-exec-17496 0...2 717519071us : 0: u1501854464 [ 939.059652] syz-exec-17496 0...2 717519076us : 0: u1501854464 [ 939.065716] syz-exec-17496 0...2 717519080us : 0: u1501854464 [ 939.071778] syz-exec-17496 0...2 717519085us : 0: u1501854464 [ 939.077842] syz-exec-17496 0...2 717519089us : 0: u1501854464 [ 939.083905] syz-exec-17496 0...2 717519094us : 0: u1501854464 [ 939.089982] syz-exec-17496 0...2 717519098us : 0: u1501854464 [ 939.096051] syz-exec-17496 0...2 717519103us : 0: u1501854464 [ 939.102120] syz-exec-17496 0...2 717519108us : 0: u1501854464 [ 939.108211] syz-exec-17496 0...2 717519112us : 0: u1501854464 [ 939.114279] syz-exec-17496 0...2 717519117us : 0: u1501854464 [ 939.120353] syz-exec-17496 0...2 717519121us : 0: u1501854464 [ 939.126431] syz-exec-17496 0...2 717519125us : 0: u1501854464 [ 939.132502] syz-exec-17496 0...2 717519130us : 0: u1501854464 [ 939.138564] syz-exec-17496 0...2 717519134us : 0: u1501854464 [ 939.144626] syz-exec-17496 0...2 717519138us : 0: u1501854464 [ 939.150694] syz-exec-17496 0...2 717519143us : 0: u1501854464 [ 939.156756] syz-exec-17496 0...2 717519147us : 0: u1501854464 [ 939.162819] syz-exec-17496 0...2 717519151us : 0: u1501854464 [ 939.168879] syz-exec-17496 0...2 717519155us : 0: u1501854464 [ 939.174941] syz-exec-17496 0...2 717519161us : 0: u1501854464 [ 939.181004] syz-exec-17496 0...2 717519167us : 0: u1501854464 [ 939.187066] syz-exec-17496 0...2 717519172us : 0: u1501854464 [ 939.193219] syz-exec-17496 0...2 717519179us : 0: u1501854464 [ 939.199278] syz-exec-17496 0...2 717519184us : 0: u1501854464 [ 939.205338] syz-exec-17496 0...2 717519190us : 0: u1501854464 [ 939.211396] syz-exec-17496 0...2 717519195us : 0: u1501854464 [ 939.217502] syz-exec-17496 0...2 717519202us : 0: u1501854464 [ 939.223565] syz-exec-17496 0...2 717519208us : 0: u1501854464 [ 939.229622] syz-exec-17496 0...2 717519213us : 0: u1501854464 [ 939.235688] syz-exec-17496 0...2 717519218us : 0: u1501854464 [ 939.241750] syz-exec-17496 0...2 717519226us : 0: u1501854464 [ 939.247812] syz-exec-17496 0...2 717519231us : 0: u1501854464 [ 939.253871] syz-exec-17496 0...2 717519236us : 0: u1501854464 [ 939.259936] syz-exec-17496 0...2 717519241us : 0: u1501854464 [ 939.266013] syz-exec-17496 0...2 717519246us : 0: u1501854464 [ 939.272096] syz-exec-17496 0...2 717519252us : 0: u1501854464 [ 939.278160] syz-exec-17496 0...2 717519257us : 0: u1501854464 [ 939.284222] syz-exec-17496 0...2 717519262us : 0: u1501854464 [ 939.290303] syz-exec-17496 0...2 717519267us : 0: u1501854464 [ 939.296365] syz-exec-17496 0...2 717519273us : 0: u1501854464 [ 939.302437] syz-exec-17496 0...2 717519277us : 0: u1501854464 [ 939.308486] syz-exec-17496 0...2 717519283us : 0: u1501854464 [ 939.314542] syz-exec-17496 0...2 717519288us : 0: u1501854464 [ 939.320588] syz-exec-17496 0...2 717519293us : 0: u1501854464 [ 939.326634] syz-exec-17496 0...2 717519297us : 0: u1501854464 [ 939.332684] syz-exec-17496 0...2 717519303us : 0: u1501854464 [ 939.338728] syz-exec-17496 0...2 717519343us : 0: u1501854464 [ 939.344773] syz-exec-17496 0...2 717519352us : 0: u1501854464 [ 939.350815] syz-exec-17496 0...2 717519357us : 0: u1501854464 [ 939.356859] syz-exec-17496 0...2 717519362us : 0: u1501854464 [ 939.362901] syz-exec-17496 0...2 717519367us : 0: u1501854464 [ 939.368954] syz-exec-17496 0...2 717519372us : 0: u1501854464 [ 939.375005] syz-exec-17496 0...2 717519377us : 0: u1501854464 [ 939.381049] syz-exec-17496 0...2 717519384us : 0: u1501854464 [ 939.387117] syz-exec-17496 0...2 717519390us : 0: u1501854464 [ 939.393164] syz-exec-17496 0...2 717519395us : 0: u1501854464 [ 939.399226] syz-exec-17496 0...2 717519401us : 0: u1501854464 [ 939.405276] syz-exec-17496 0...2 717519406us : 0: u1501854464 [ 939.411322] syz-exec-17496 0...2 717519413us : 0: u1501854464 [ 939.417368] syz-exec-17496 0...2 717519419us : 0: u1501854464 [ 939.423412] syz-exec-17496 0...2 717519425us : 0: u1501854464 [ 939.429458] syz-exec-17496 0...2 717519429us : 0: u1501854464 [ 939.435526] syz-exec-17496 0...2 717519435us : 0: u1501854464 [ 939.441575] syz-exec-17496 0...2 717519440us : 0: u1501854464 [ 939.447628] syz-exec-17496 0...2 717519447us : 0: u1501854464 [ 939.453682] syz-exec-17496 0...2 717519451us : 0: u1501854464 [ 939.459731] syz-exec-17496 0...2 717519457us : 0: u1501854464 [ 939.465776] syz-exec-17496 0...2 717519462us : 0: u1501854464 [ 939.471824] syz-exec-17496 0...2 717519467us : 0: u1501854464 [ 939.477884] syz-exec-17496 0...2 717519472us : 0: u1501854464 [ 939.483932] syz-exec-17496 0...2 717519477us : 0: u1501854464 [ 939.489976] syz-exec-17496 0...2 717519482us : 0: u1501854464 [ 939.496023] syz-exec-17496 0...2 717519487us : 0: u1501854464 [ 939.502069] syz-exec-17496 0...2 717519493us : 0: u1501854464 [ 939.508114] syz-exec-17496 0...2 717519498us : 0: u1501854464 [ 939.514160] syz-exec-17496 0...2 717519503us : 0: u1501854464 [ 939.520204] syz-exec-17496 0...2 717519508us : 0: u1501854464 [ 939.526248] syz-exec-17496 0...2 717519527us : 0: u1501854464 [ 939.532291] syz-exec-17496 0...2 717519532us : 0: u1501854464 [ 939.538322] --------------------------------- [ 939.548833] Kernel Offset: disabled [ 939.552444] Rebooting in 86400 seconds..