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", 0xff54}, 0x1006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000140), 0x5, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000480)) accept$inet(r0, 0x0, &(0x7f0000000840)) [ 695.585826] overlayfs: './file0' not a directory 11:01:46 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc0000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) flistxattr(0xffffffffffffffff, &(0x7f0000000140)=""/19, 0x13) r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x6, 0x10000) socket$key(0xf, 0x3, 0x2) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000380)=0x8) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fstat(r2, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xf, 0x7fff, 0xd9d4, 0x4, 0x0, r2}, 0x2c) exit(0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000001c0)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000003c0)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0xffff, 0x1000, 0x76, &(0x7f0000000240)="c03884138872821211e6511c71b42177190204f8e2d20a9e8da6cdee2baf2a12e2c1ce52b5ed07dc32d35a276ab94e22147a8d0092b158d47809fae0330b5465af28f31ea380e8e312384f07ba49f93b9f4e95d1080f09ba635779e2bf76a7ecfe6cbb66085e5612476478038bf837437d0afc893346"}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$HDIO_GETGEO(r4, 0x2, &(0x7f0000000040)) 11:01:47 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)="5cf7a0cc16482d6f0037e6b31a8e697add303650d4880073ef75df610179dec236aa04e9468779ba0700000000000000359855b49b889bb5e49b358e793a6f7af52766d6fe93ca0672ac1b8a87ca6677d5220fb77cb613b3db9104d16aa1ca6cc76a74e7bd4bdc5226757b03f85b010324576c40c1c8655c739fc1a68df5e2bcb6e5ed46c8289e48ea75e785eb5d6497cd233b10b91832cf5e31767c1c419d4646cd883f25", 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f0000356000)) 11:01:47 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)="5cf7a0cc16482d6f0037e6b31a8e697add303650d4880073ef75df610179dec236aa04e9468779ba0700000000000000359855b49b889bb5e49b358e793a6f7af52766d6fe93ca0672ac1b8a87ca6677d5220fb77cb613b3db9104d16aa1ca6cc76a74e7bd4bdc5226757b03f85b010324576c40c1c8655c739fc1a68df5e2bcb6e5ed46c8289e48ea75e785eb5d6497cd233b10b91832cf5e31767c1c419d4646cd883f25", 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f0000356000)) 11:01:47 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)="5cf7a0cc16482d6f0037e6b31a8e697add303650d4880073ef75df610179dec236aa04e9468779ba0700000000000000359855b49b889bb5e49b358e793a6f7af52766d6fe93ca0672ac1b8a87ca6677d5220fb77cb613b3db9104d16aa1ca6cc76a74e7bd4bdc5226757b03f85b010324576c40c1c8655c739fc1a68df5e2bcb6e5ed46c8289e48ea75e785eb5d6497cd233b10b91832cf5e31767c1c419d4646cd883f25", 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f0000356000)) 11:01:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffff}) 11:01:47 executing program 5: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 11:01:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x80000001, 0x100, 0xce, 0x0, 0xc46}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000300)=0x8) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x0) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x200000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x10000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000200)=""/112) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) mremap(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$unix(0x1, 0x0, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/54, 0x36}, {&(0x7f0000001400)=""/21, 0x15}, {&(0x7f0000001440)=""/72, 0x48}], 0x6) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x200000000000000f, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) 11:01:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffff}) 11:01:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000480)={'syz'}, &(0x7f00000004c0)='l', 0x1, 0xffffffffffffffff) 11:01:47 executing program 1: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x13) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11:01:47 executing program 4: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x18, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x532b40aac2b24edb) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xff54}, 0x1006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000140), 0x5, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000480)) accept$inet(r0, 0x0, &(0x7f0000000840)) 11:01:48 executing program 1: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x13) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11:01:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffff}) 11:01:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000480)={'syz'}, &(0x7f00000004c0)='l', 0x1, 0xffffffffffffffff) 11:01:48 executing program 1: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x13) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11:01:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffff}) 11:01:48 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) [ 696.919582] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:01:48 executing program 5: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) [ 697.498846] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 697.513597] FAT-fs (loop4): Filesystem has been set read-only [ 697.532939] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) 11:01:49 executing program 1: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x13) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11:01:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000480)={'syz'}, &(0x7f00000004c0)='l', 0x1, 0xffffffffffffffff) 11:01:49 executing program 4: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 11:01:49 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:49 executing program 5: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 11:01:49 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:49 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000480)={'syz'}, &(0x7f00000004c0)='l', 0x1, 0xffffffffffffffff) 11:01:49 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:49 executing program 5: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 11:01:49 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) [ 698.323584] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 698.457030] IPVS: ftp: loaded support on port[0] = 21 11:01:49 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:49 executing program 4: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 11:01:50 executing program 5: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 11:01:50 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:50 executing program 5: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) [ 700.795347] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.801760] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.808723] device bridge_slave_0 entered promiscuous mode [ 700.943364] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.949773] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.956953] device bridge_slave_1 entered promiscuous mode [ 700.985192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 701.011736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 701.107170] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 701.158473] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 701.386414] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 701.393882] team0: Port device team_slave_0 added [ 701.419579] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 701.427106] team0: Port device team_slave_1 added [ 701.486285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 701.494204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 701.502032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 701.566496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 701.573519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 701.582450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 701.604628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 701.611667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 701.620678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 701.667114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 701.674199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 701.682081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 702.167411] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.173883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.180583] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.187000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.194189] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 702.435411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 703.404614] device bridge_slave_1 left promiscuous mode [ 703.410119] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.453726] device bridge_slave_0 left promiscuous mode [ 703.459232] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.516512] team0 (unregistering): Port device team_slave_1 removed [ 705.526920] team0 (unregistering): Port device team_slave_0 removed [ 705.537491] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 705.596121] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 705.682135] bond0 (unregistering): Released all slaves [ 706.014084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.100529] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 706.186735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 706.193130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 706.200796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 706.289507] 8021q: adding VLAN 0 to HW filter on device team0 11:01:58 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:58 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:58 executing program 4: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 11:01:58 executing program 5: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 11:01:58 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:58 executing program 0: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) [ 707.222002] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:01:58 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000083, 0xc0012015, 0x40000084], [0xc1]}) r3 = socket$inet6(0xa, 0x3, 0xb) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") 11:01:58 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x8000000000000012}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffff001}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x13) 11:01:58 executing program 0: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) [ 707.569311] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.591508] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.601968] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:01:59 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x8000000000000012}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffff001}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x13) [ 707.683732] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.702909] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.717719] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:01:59 executing program 1: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x8000000000000012}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffff001}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x13) [ 707.783959] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.852810] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.870177] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.891976] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.900720] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.908725] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.916746] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.924957] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.933121] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 707.941084] kvm [27070]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:01:59 executing program 0: socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000040)="47504c244062646576b36d696d655f7479706500", 0x1) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000000600000000000000008089000000080000000200000000000000000000000700020000005af4000004000000018000000000000000000000000000000000"]) r1 = socket$inet6(0xa, 0x80000, 0xfffffffd) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000480)={0x9654, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x1000000000004, 0xfffb) ioctl(r4, 0x20008, &(0x7f0000000180)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x0, &(0x7f00000004c0), 0x10808410, &(0x7f0000000340)=ANY=[]) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=@random={'os2.', 'keyring:]trustedkeyring\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0xfffffffffffffd52, &(0x7f0000000440)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0x800000ca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x80, 0x1}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) [ 707.949112] kvm [27069]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 707.976436] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.041272] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.071186] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.087446] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:01:59 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f720000000000000000000000000000090000000000000000000000004000000000003abf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000000000000000dc00"], 0x78) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 11:01:59 executing program 1: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x8000000000000012}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffff001}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x13) 11:01:59 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x8000000000000012}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffff001}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x13) [ 708.134706] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:01:59 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x8000000000000012}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffff001}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x13) [ 708.231923] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:01:59 executing program 1: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x8000000000000012}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffff001}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x13) [ 708.292289] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.372430] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.382823] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.415374] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:01:59 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='minix\x00', 0x0, 0x0) [ 708.488968] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.501032] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.509269] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.616969] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.638363] block nbd0: Attempted send on invalid socket [ 708.644493] print_req_error: 12 callbacks suppressed [ 708.644502] print_req_error: I/O error, dev nbd0, sector 2 [ 708.660519] MINIX-fs: unable to read superblock [ 708.671979] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.706092] kvm [27075]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 708.753024] kvm [27069]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 11:02:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000083, 0xc0012015, 0x40000084], [0xc1]}) r3 = socket$inet6(0xa, 0x3, 0xb) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") 11:02:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa000000300000000203000000e6ffc5a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008ff0002000000"], 0x80}}, 0x0) 11:02:00 executing program 3: r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000005c0)="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", 0x4c1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 11:02:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x177) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:02:00 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='minix\x00', 0x0, 0x0) [ 709.025234] block nbd0: Attempted send on invalid socket [ 709.030754] print_req_error: I/O error, dev nbd0, sector 2 [ 709.040275] MINIX-fs: unable to read superblock 11:02:00 executing program 3: r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000005c0)="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", 0x4c1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) [ 709.106762] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.122774] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.136877] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:02:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x731, 0x0, 0x91}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 709.157794] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.176379] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:02:00 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='minix\x00', 0x0, 0x0) 11:02:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa000000300000000203000000e6ffc5a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008ff0002000000"], 0x80}}, 0x0) [ 709.213968] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.275678] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.318904] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.342221] block nbd0: Attempted send on invalid socket [ 709.346096] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.347813] print_req_error: I/O error, dev nbd0, sector 2 11:02:00 executing program 3: r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000005c0)="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", 0x4c1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) [ 709.370572] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.372951] MINIX-fs: unable to read superblock [ 709.391941] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.406631] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:02:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x731, 0x0, 0x91}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 709.415539] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.423477] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.431270] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.439180] kvm [27130]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.455507] kvm [27127]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 11:02:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa000000300000000203000000e6ffc5a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008ff0002000000"], 0x80}}, 0x0) 11:02:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000083, 0xc0012015, 0x40000084], [0xc1]}) r3 = socket$inet6(0xa, 0x3, 0xb) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") 11:02:01 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='minix\x00', 0x0, 0x0) 11:02:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x177) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:02:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x731, 0x0, 0x91}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 11:02:01 executing program 3: r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000005c0)="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", 0x4c1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 11:02:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa000000300000000203000000e6ffc5a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008ff0002000000"], 0x80}}, 0x0) [ 709.745893] block nbd0: Attempted send on invalid socket [ 709.751415] print_req_error: I/O error, dev nbd0, sector 2 [ 709.783174] MINIX-fs: unable to read superblock 11:02:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x731, 0x0, 0x91}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 709.850389] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:02:01 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 709.918890] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 709.971657] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.009445] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:02:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x40, 0x0, 0x0, [{}, {0x4, 0x0, 0x0, 0xac}]}, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) 11:02:01 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 710.043413] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:02:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x14}]}, &(0x7f0000000000)="4750473830e41e05c149e8e1b0bd865ba24a6a4e5870334bd5498413d0ce8c9693d2586d4f7ee4ddb17e244655df83741bbb47e47ede01e159df408af688866aee47510761142ca220ad433ebc9b2fbd6b9800412f955f525fc46364fde732a47869cad6c8414b301f642a3a1c563bc550e87f0c493e78785d4d955d13f83dae83", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 11:02:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x177) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 710.110144] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.142408] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.178414] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.217602] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.257719] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.272793] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.306413] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.322993] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.348714] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.392992] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.414372] kvm [27173]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.443201] kvm [27171]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 11:02:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000083, 0xc0012015, 0x40000084], [0xc1]}) r3 = socket$inet6(0xa, 0x3, 0xb) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") 11:02:01 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 11:02:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x14}]}, &(0x7f0000000000)="4750473830e41e05c149e8e1b0bd865ba24a6a4e5870334bd5498413d0ce8c9693d2586d4f7ee4ddb17e244655df83741bbb47e47ede01e159df408af688866aee47510761142ca220ad433ebc9b2fbd6b9800412f955f525fc46364fde732a47869cad6c8414b301f642a3a1c563bc550e87f0c493e78785d4d955d13f83dae83", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 11:02:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x40, 0x0, 0x0, [{}, {0x4, 0x0, 0x0, 0xac}]}, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) 11:02:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x177) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:02:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x14}]}, &(0x7f0000000000)="4750473830e41e05c149e8e1b0bd865ba24a6a4e5870334bd5498413d0ce8c9693d2586d4f7ee4ddb17e244655df83741bbb47e47ede01e159df408af688866aee47510761142ca220ad433ebc9b2fbd6b9800412f955f525fc46364fde732a47869cad6c8414b301f642a3a1c563bc550e87f0c493e78785d4d955d13f83dae83", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 11:02:02 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 710.806268] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.893075] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.905387] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.931814] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.950962] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 710.976193] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.002783] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.022052] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.046907] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.092986] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.124431] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.132146] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.152611] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.173147] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.180785] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 [ 711.191554] kvm [27217]: vcpu0 Hyper-V SynIC can't get msg page, gpa 0xc0012000 11:02:02 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:02:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x40, 0x0, 0x0, [{}, {0x4, 0x0, 0x0, 0xac}]}, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) 11:02:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x14}]}, &(0x7f0000000000)="4750473830e41e05c149e8e1b0bd865ba24a6a4e5870334bd5498413d0ce8c9693d2586d4f7ee4ddb17e244655df83741bbb47e47ede01e159df408af688866aee47510761142ca220ad433ebc9b2fbd6b9800412f955f525fc46364fde732a47869cad6c8414b301f642a3a1c563bc550e87f0c493e78785d4d955d13f83dae83", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 11:02:02 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 11:02:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x40, 0x0, 0x0, [{}, {0x4, 0x0, 0x0, 0xac}]}, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) [ 711.199401] kvm [27214]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 11:02:02 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:02:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x40, 0x0, 0x0, [{}, {0x4, 0x0, 0x0, 0xac}]}, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) 11:02:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7a) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:02:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x40, 0x0, 0x0, [{}, {0x4, 0x0, 0x0, 0xac}]}, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) 11:02:02 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000040)={{0x3}}) 11:02:03 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000040)={{0x3}}) 11:02:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$FUSE_DIRENT(r0, &(0x7f0000000280)={0x40, 0x0, 0x0, [{}, {0x4, 0x0, 0x0, 0xac}]}, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3800) 11:02:03 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:02:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='stack\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bfe2566c845a0c58b400", "ee52c10d1e72a9432c222985fcedff747a3131991a00000000000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 11:02:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7a) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:02:03 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000040)={{0x3}}) 11:02:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000001a4) 11:02:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:02:03 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x6) 11:02:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7a) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:02:03 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000040)={{0x3}}) 11:02:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7a) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:02:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000340)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@shortname_mixed='shortname=mixed'}]}) 11:02:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:02:04 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:02:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x30}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x37c, &(0x7f0000000000)=""/251}, 0x48) 11:02:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) [ 712.822979] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:02:04 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000002ff5)='/dev/vcsa#\x00', 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000022000)="a74f9540ff07520c5a9ec05a2c8013d5", 0x10) 11:02:04 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:02:04 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000280)={0x100000000000000}) 11:02:06 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x6) 11:02:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:02:06 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/249, &(0x7f0000000100)=0xf9) connect$packet(0xffffffffffffffff, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="236431c87213337a48ffb352177f46e5f53e460b1db4b032a5cc6e6797d618d601681625e7c07d04ece46c7953743afea5718ef127333bb7d0f99e01c932d775da6be6f4e19ff84bcd00bf4f3a7697c1a216a7680e8af8a2910c3b15b1004c6909c83d726d01bdb6a64c104db9236057e94d74f63de0ca0f9e8fd022eab13f0379692815c7ade0e0352a48a6be33e16ee3045f446df21c747da50b9c613aeb9d48fee62c7f3faf2c9c8731c783917dd1038e68dc8771795f"]) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000ac0)={&(0x7f0000004100)=""/4096, 0x1000}) ppoll(&(0x7f0000000080), 0x97, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) 11:02:06 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000280)={0x100000000000000}) 11:02:06 executing program 3: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @tick=0x7, {}, {}, @control}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x312, @tick=0x9}) 11:02:06 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x4000000000000002) 11:02:06 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000280)={0x100000000000000}) 11:02:06 executing program 3: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @tick=0x7, {}, {}, @control}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x312, @tick=0x9}) 11:02:06 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x6) 11:02:06 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/249, &(0x7f0000000100)=0xf9) connect$packet(0xffffffffffffffff, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="236431c87213337a48ffb352177f46e5f53e460b1db4b032a5cc6e6797d618d601681625e7c07d04ece46c7953743afea5718ef127333bb7d0f99e01c932d775da6be6f4e19ff84bcd00bf4f3a7697c1a216a7680e8af8a2910c3b15b1004c6909c83d726d01bdb6a64c104db9236057e94d74f63de0ca0f9e8fd022eab13f0379692815c7ade0e0352a48a6be33e16ee3045f446df21c747da50b9c613aeb9d48fee62c7f3faf2c9c8731c783917dd1038e68dc8771795f"]) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000ac0)={&(0x7f0000004100)=""/4096, 0x1000}) ppoll(&(0x7f0000000080), 0x97, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) 11:02:06 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000280)={0x100000000000000}) 11:02:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:02:06 executing program 3: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @tick=0x7, {}, {}, @control}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x312, @tick=0x9}) 11:02:06 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x4000000000000002) 11:02:06 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/249, &(0x7f0000000100)=0xf9) connect$packet(0xffffffffffffffff, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="236431c87213337a48ffb352177f46e5f53e460b1db4b032a5cc6e6797d618d601681625e7c07d04ece46c7953743afea5718ef127333bb7d0f99e01c932d775da6be6f4e19ff84bcd00bf4f3a7697c1a216a7680e8af8a2910c3b15b1004c6909c83d726d01bdb6a64c104db9236057e94d74f63de0ca0f9e8fd022eab13f0379692815c7ade0e0352a48a6be33e16ee3045f446df21c747da50b9c613aeb9d48fee62c7f3faf2c9c8731c783917dd1038e68dc8771795f"]) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000ac0)={&(0x7f0000004100)=""/4096, 0x1000}) ppoll(&(0x7f0000000080), 0x97, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) 11:02:06 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/249, &(0x7f0000000100)=0xf9) connect$packet(0xffffffffffffffff, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="236431c87213337a48ffb352177f46e5f53e460b1db4b032a5cc6e6797d618d601681625e7c07d04ece46c7953743afea5718ef127333bb7d0f99e01c932d775da6be6f4e19ff84bcd00bf4f3a7697c1a216a7680e8af8a2910c3b15b1004c6909c83d726d01bdb6a64c104db9236057e94d74f63de0ca0f9e8fd022eab13f0379692815c7ade0e0352a48a6be33e16ee3045f446df21c747da50b9c613aeb9d48fee62c7f3faf2c9c8731c783917dd1038e68dc8771795f"]) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000ac0)={&(0x7f0000004100)=""/4096, 0x1000}) ppoll(&(0x7f0000000080), 0x97, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) 11:02:07 executing program 3: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @tick=0x7, {}, {}, @control}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x312, @tick=0x9}) 11:02:07 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x4000000000000002) 11:02:07 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/249, &(0x7f0000000100)=0xf9) connect$packet(0xffffffffffffffff, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="236431c87213337a48ffb352177f46e5f53e460b1db4b032a5cc6e6797d618d601681625e7c07d04ece46c7953743afea5718ef127333bb7d0f99e01c932d775da6be6f4e19ff84bcd00bf4f3a7697c1a216a7680e8af8a2910c3b15b1004c6909c83d726d01bdb6a64c104db9236057e94d74f63de0ca0f9e8fd022eab13f0379692815c7ade0e0352a48a6be33e16ee3045f446df21c747da50b9c613aeb9d48fee62c7f3faf2c9c8731c783917dd1038e68dc8771795f"]) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000ac0)={&(0x7f0000004100)=""/4096, 0x1000}) ppoll(&(0x7f0000000080), 0x97, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) 11:02:07 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/249, &(0x7f0000000100)=0xf9) connect$packet(0xffffffffffffffff, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="236431c87213337a48ffb352177f46e5f53e460b1db4b032a5cc6e6797d618d601681625e7c07d04ece46c7953743afea5718ef127333bb7d0f99e01c932d775da6be6f4e19ff84bcd00bf4f3a7697c1a216a7680e8af8a2910c3b15b1004c6909c83d726d01bdb6a64c104db9236057e94d74f63de0ca0f9e8fd022eab13f0379692815c7ade0e0352a48a6be33e16ee3045f446df21c747da50b9c613aeb9d48fee62c7f3faf2c9c8731c783917dd1038e68dc8771795f"]) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000ac0)={&(0x7f0000004100)=""/4096, 0x1000}) ppoll(&(0x7f0000000080), 0x97, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) 11:02:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 11:02:09 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x4000000000000002) 11:02:09 executing program 3: r0 = socket$kcm(0x10, 0x14000000003, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b0000001e0081aee4050c00000f0000008bc36f7d79ce3263dac3", 0x1b}], 0x1}, 0x0) 11:02:09 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x6) 11:02:09 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/249, &(0x7f0000000100)=0xf9) connect$packet(0xffffffffffffffff, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="236431c87213337a48ffb352177f46e5f53e460b1db4b032a5cc6e6797d618d601681625e7c07d04ece46c7953743afea5718ef127333bb7d0f99e01c932d775da6be6f4e19ff84bcd00bf4f3a7697c1a216a7680e8af8a2910c3b15b1004c6909c83d726d01bdb6a64c104db9236057e94d74f63de0ca0f9e8fd022eab13f0379692815c7ade0e0352a48a6be33e16ee3045f446df21c747da50b9c613aeb9d48fee62c7f3faf2c9c8731c783917dd1038e68dc8771795f"]) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000ac0)={&(0x7f0000004100)=""/4096, 0x1000}) ppoll(&(0x7f0000000080), 0x97, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) 11:02:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_pid(r0, &(0x7f00000002c0), 0xfea2) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4000, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) mount(&(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) 11:02:09 executing program 3: r0 = socket$kcm(0x10, 0x14000000003, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b0000001e0081aee4050c00000f0000008bc36f7d79ce3263dac3", 0x1b}], 0x1}, 0x0) 11:02:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) [ 718.558007] kauditd_printk_skb: 2 callbacks suppressed [ 718.558024] audit: type=1804 audit(1543748529.837:379): pid=27433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir267888474/syzkaller.GiJdbG/212/bus" dev="sda1" ino=17184 res=1 11:02:10 executing program 4: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d01, 0x0, 0xfffffffd]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./file2\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7}, 0xfea8) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc028660f, &(0x7f0000000040)) 11:02:10 executing program 3: r0 = socket$kcm(0x10, 0x14000000003, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b0000001e0081aee4050c00000f0000008bc36f7d79ce3263dac3", 0x1b}], 0x1}, 0x0) 11:02:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 11:02:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_pid(r0, &(0x7f00000002c0), 0xfea2) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4000, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) mount(&(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 718.754144] audit: type=1800 audit(1543748529.837:380): pid=27433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=17184 res=0 [ 718.827186] audit: type=1804 audit(1543748529.937:381): pid=27433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir267888474/syzkaller.GiJdbG/212/bus" dev="sda1" ino=17184 res=1 11:02:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) syz_open_pts(r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:02:10 executing program 4: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d01, 0x0, 0xfffffffd]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./file2\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7}, 0xfea8) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc028660f, &(0x7f0000000040)) [ 718.873492] audit: type=1804 audit(1543748530.147:382): pid=27455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir267888474/syzkaller.GiJdbG/213/bus" dev="sda1" ino=16609 res=1 11:02:10 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000001840)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x0, 0x0, @dev, @local, {[], @dccp={{0x0, 0x2904, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) 11:02:10 executing program 3: r0 = socket$kcm(0x10, 0x14000000003, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b0000001e0081aee4050c00000f0000008bc36f7d79ce3263dac3", 0x1b}], 0x1}, 0x0) 11:02:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 11:02:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_pid(r0, &(0x7f00000002c0), 0xfea2) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4000, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) mount(&(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 719.058263] audit: type=1800 audit(1543748530.147:383): pid=27455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=16609 res=0 11:02:10 executing program 4: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d01, 0x0, 0xfffffffd]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./file2\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7}, 0xfea8) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc028660f, &(0x7f0000000040)) 11:02:10 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0x77, &(0x7f0000000180), 0xb) 11:02:10 executing program 3: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:10 executing program 4: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d01, 0x0, 0xfffffffd]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./file2\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40002, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7}, 0xfea8) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc028660f, &(0x7f0000000040)) [ 719.255979] audit: type=1804 audit(1543748530.537:384): pid=27494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir267888474/syzkaller.GiJdbG/214/bus" dev="sda1" ino=16609 res=1 11:02:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_pid(r0, &(0x7f00000002c0), 0xfea2) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4000, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) mount(&(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 719.332444] audit: type=1800 audit(1543748530.537:385): pid=27494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=16609 res=0 11:02:10 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0x77, &(0x7f0000000180), 0xb) [ 719.472652] audit: type=1804 audit(1543748530.717:386): pid=27499 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir484985585/syzkaller.aJQNcY/130/file0" dev="sda1" ino=16529 res=1 [ 719.566020] audit: type=1804 audit(1543748530.747:387): pid=27506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir484985585/syzkaller.aJQNcY/130/file0" dev="sda1" ino=16529 res=1 [ 719.620746] audit: type=1804 audit(1543748530.797:388): pid=27507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir267888474/syzkaller.GiJdbG/215/bus" dev="sda1" ino=16593 res=1 11:02:11 executing program 4: syz_read_part_table(0x7fff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="020081ffffff01000000ff07480000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 11:02:11 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000001840)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x0, 0x0, @dev, @local, {[], @dccp={{0x0, 0x2904, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) 11:02:11 executing program 3: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0x77, &(0x7f0000000180), 0xb) 11:02:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) syz_open_pts(r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:02:11 executing program 5: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:11 executing program 4: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:11 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0x77, &(0x7f0000000180), 0xb) 11:02:11 executing program 5: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:11 executing program 3: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:11 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000001840)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x0, 0x0, @dev, @local, {[], @dccp={{0x0, 0x2904, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) 11:02:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x2, 0x0) 11:02:11 executing program 4: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:11 executing program 3: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x2, 0x0) 11:02:12 executing program 4: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) syz_open_pts(r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:02:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x2, 0x0) 11:02:12 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x2d1, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @remote}, &(0x7f00000002c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:02:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0xc0000084]}) 11:02:12 executing program 5: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 11:02:12 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000001840)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x0, 0x0, @dev, @local, {[], @dccp={{0x0, 0x2904, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) 11:02:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x2, 0x0) 11:02:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0xc0000084]}) 11:02:12 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(cmac(camellia-generic),ecb-camellia-aesni)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) 11:02:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0xc0000084]}) 11:02:13 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x2d1, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @remote}, &(0x7f00000002c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:02:13 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x2d1, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @remote}, &(0x7f00000002c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:02:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) syz_open_pts(r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:02:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0xc0000084]}) 11:02:13 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(cmac(camellia-generic),ecb-camellia-aesni)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) 11:02:13 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x2d1, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @remote}, &(0x7f00000002c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:02:13 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x2d1, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @remote}, &(0x7f00000002c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:02:13 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(cmac(camellia-generic),ecb-camellia-aesni)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) 11:02:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000031001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) 11:02:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:02:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000031001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) 11:02:13 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(cmac(camellia-generic),ecb-camellia-aesni)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) 11:02:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000031001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) 11:02:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000013e95), 0x4) close(r1) 11:02:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:02:14 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x2d1, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @remote}, &(0x7f00000002c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:02:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000031001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) 11:02:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000013e95), 0x4) close(r1) 11:02:14 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x2d1, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @remote}, &(0x7f00000002c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:02:14 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000409000/0x3000)=nil, 0x3000, 0xe) 11:02:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000013e95), 0x4) close(r1) 11:02:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000280)}) 11:02:14 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000409000/0x3000)=nil, 0x3000, 0xe) [ 723.377018] *** Guest State *** [ 723.411526] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 11:02:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000013e95), 0x4) close(r1) [ 723.473264] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 723.482166] CR3 = 0x0000000000000000 [ 723.534942] binder: 27737:27741 transaction failed 29201/-22, size 0-0 line 2973 [ 723.553904] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 11:02:14 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000409000/0x3000)=nil, 0x3000, 0xe) [ 723.584833] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 723.598601] binder_alloc: binder_alloc_mmap_handler: 27737 20001000-20004000 already mapped failed -16 [ 723.630042] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 723.661682] binder: BINDER_SET_CONTEXT_MGR already set [ 723.671249] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 11:02:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8001, 0x27, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5) [ 723.687434] binder: 27737:27741 ioctl 40046207 0 returned -16 [ 723.756512] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 723.773946] binder_alloc: 27737: binder_alloc_buf, no vma [ 723.787673] binder: 27737:27757 transaction failed 29189/-3, size 0-0 line 2973 [ 723.800831] binder: undelivered TRANSACTION_ERROR: 29201 [ 723.807330] binder: undelivered TRANSACTION_ERROR: 29189 [ 723.822760] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 723.832089] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 723.848159] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 723.853317] ion_buffer_destroy: buffer still mapped in the kernel [ 723.857760] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 723.870805] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 723.879375] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 723.888245] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 723.896560] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 723.905783] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 723.937832] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 723.952963] Interruptibility = 00000000 ActivityState = 00000000 [ 723.971356] *** Host State *** [ 723.976314] RIP = 0xffffffff8120262c RSP = 0xffff8801806df390 [ 723.982335] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 723.989221] FSBase=00007f831f723700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 723.997172] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 724.003261] CR0=0000000080050033 CR3=00000001b0929000 CR4=00000000001426f0 [ 724.010280] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 724.016996] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 724.023113] *** Control State *** [ 724.026570] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 724.033303] EntryControls=0000d1ff ExitControls=002fefff [ 724.038756] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 724.045736] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 724.052400] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 724.059075] reason=80000021 qualification=0000000000000000 [ 724.065452] IDTVectoring: info=00000000 errcode=00000000 [ 724.070917] TSC Offset = 0xfffffe7a7e03f473 [ 724.075343] EPT pointer = 0x00000001d249b01e 11:02:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:02:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:15 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000409000/0x3000)=nil, 0x3000, 0xe) 11:02:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000280)}) 11:02:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8001, 0x27, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5) 11:02:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8001, 0x27, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5) 11:02:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8001, 0x27, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5) [ 724.197724] binder: 27773:27776 transaction failed 29201/-22, size 0-0 line 2973 11:02:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8001, 0x27, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5) 11:02:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0x30) [ 724.270499] binder: undelivered TRANSACTION_ERROR: 29201 11:02:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8001, 0x27, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5) [ 724.360672] kvm: emulating exchange as write 11:02:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000280)}) 11:02:15 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r0, 0x0, 0x40000000000003f, 0x2) 11:02:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:02:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8001, 0x27, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5) 11:02:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0x30) [ 724.531945] binder: 27795:27800 transaction failed 29201/-22, size 0-0 line 2973 11:02:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0x30) 11:02:15 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) [ 724.610781] binder: undelivered TRANSACTION_ERROR: 29201 11:02:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000280)}) 11:02:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0x30) 11:02:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) [ 724.799961] binder: 27821:27823 transaction failed 29201/-22, size 0-0 line 2973 11:02:16 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) [ 724.844099] binder: undelivered TRANSACTION_ERROR: 29201 11:02:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:16 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r0, 0x0, 0x40000000000003f, 0x2) 11:02:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:17 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r0, 0x0, 0x40000000000003f, 0x2) 11:02:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0xffffffffffffff70, &(0x7f00000002c0)}}], 0x388, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000001c0)='-mime_typeselinux,@em0!\x00'}, 0x30) fstat(0xffffffffffffffff, &(0x7f0000000780)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) io_setup(0x0, &(0x7f0000000140)) dup2(r0, r1) 11:02:18 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote, 0x0, 0x3, [@empty, @loopback, @loopback]}, 0x1c) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback}, 0x10) 11:02:18 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r0, 0x0, 0x40000000000003f, 0x2) 11:02:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) 11:02:18 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote, 0x0, 0x3, [@empty, @loopback, @loopback]}, 0x1c) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback}, 0x10) 11:02:18 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) [ 727.370223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 727.396805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 11:02:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0xffffffffffffff70, &(0x7f00000002c0)}}], 0x388, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000001c0)='-mime_typeselinux,@em0!\x00'}, 0x30) fstat(0xffffffffffffffff, &(0x7f0000000780)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) io_setup(0x0, &(0x7f0000000140)) dup2(r0, r1) 11:02:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) [ 727.462746] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:02:18 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote, 0x0, 0x3, [@empty, @loopback, @loopback]}, 0x1c) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback}, 0x10) 11:02:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) [ 727.558736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 11:02:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) [ 727.643979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 727.720395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 11:02:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:19 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote, 0x0, 0x3, [@empty, @loopback, @loopback]}, 0x1c) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback}, 0x10) 11:02:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0xffffffffffffff70, &(0x7f00000002c0)}}], 0x388, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000001c0)='-mime_typeselinux,@em0!\x00'}, 0x30) fstat(0xffffffffffffffff, &(0x7f0000000780)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) io_setup(0x0, &(0x7f0000000140)) dup2(r0, r1) 11:02:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0xffffffffffffff70, &(0x7f00000002c0)}}], 0x388, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000001c0)='-mime_typeselinux,@em0!\x00'}, 0x30) fstat(0xffffffffffffffff, &(0x7f0000000780)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) io_setup(0x0, &(0x7f0000000140)) dup2(r0, r1) 11:02:19 executing program 2: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x5e, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x10, 0x2, 0x4a}, {@multicast2, 0x4e24, 0x2003, 0x8001}}, 0x44) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x720000, 0xffffffff7ff0bdbe}) r4 = dup3(r1, r2, 0x80000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)="17fb4619a4af7a3c08271a0bd7286f7ecee94dcf73ff054630e4a8b9a8a27713fb1e74ff2362ab", 0x27) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev, 0x0, 0x0, 'wrr\x00', 0x20}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x400, 0x5ce6, {0x0, 0x2710}, {}, {0x0, 0x401, 0x0, 0x20}, 0x1, @can={{0x3, 0x800, 0x7, 0x4}, 0x8, 0x1, 0x0, 0x0, "cef159b440fee88d"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) unshare(0x0) pipe(&(0x7f0000000100)) 11:02:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) [ 728.204808] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 728.234624] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 728.297647] IPVS: ftp: loaded support on port[0] = 21 11:02:19 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) 11:02:19 executing program 2: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x5e, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x10, 0x2, 0x4a}, {@multicast2, 0x4e24, 0x2003, 0x8001}}, 0x44) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x720000, 0xffffffff7ff0bdbe}) r4 = dup3(r1, r2, 0x80000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)="17fb4619a4af7a3c08271a0bd7286f7ecee94dcf73ff054630e4a8b9a8a27713fb1e74ff2362ab", 0x27) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev, 0x0, 0x0, 'wrr\x00', 0x20}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x400, 0x5ce6, {0x0, 0x2710}, {}, {0x0, 0x401, 0x0, 0x20}, 0x1, @can={{0x3, 0x800, 0x7, 0x4}, 0x8, 0x1, 0x0, 0x0, "cef159b440fee88d"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) unshare(0x0) pipe(&(0x7f0000000100)) 11:02:19 executing program 5: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x5e, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x10, 0x2, 0x4a}, {@multicast2, 0x4e24, 0x2003, 0x8001}}, 0x44) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x720000, 0xffffffff7ff0bdbe}) r4 = dup3(r1, r2, 0x80000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)="17fb4619a4af7a3c08271a0bd7286f7ecee94dcf73ff054630e4a8b9a8a27713fb1e74ff2362ab", 0x27) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev, 0x0, 0x0, 'wrr\x00', 0x20}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x400, 0x5ce6, {0x0, 0x2710}, {}, {0x0, 0x401, 0x0, 0x20}, 0x1, @can={{0x3, 0x800, 0x7, 0x4}, 0x8, 0x1, 0x0, 0x0, "cef159b440fee88d"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) unshare(0x0) pipe(&(0x7f0000000100)) [ 728.673456] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 728.769095] IPVS: ftp: loaded support on port[0] = 21 11:02:20 executing program 2: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x5e, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x10, 0x2, 0x4a}, {@multicast2, 0x4e24, 0x2003, 0x8001}}, 0x44) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x720000, 0xffffffff7ff0bdbe}) r4 = dup3(r1, r2, 0x80000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)="17fb4619a4af7a3c08271a0bd7286f7ecee94dcf73ff054630e4a8b9a8a27713fb1e74ff2362ab", 0x27) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev, 0x0, 0x0, 'wrr\x00', 0x20}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x400, 0x5ce6, {0x0, 0x2710}, {}, {0x0, 0x401, 0x0, 0x20}, 0x1, @can={{0x3, 0x800, 0x7, 0x4}, 0x8, 0x1, 0x0, 0x0, "cef159b440fee88d"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) unshare(0x0) pipe(&(0x7f0000000100)) 11:02:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x3ff, 0x8, 0x2, 0x279, 0x2}, &(0x7f0000000040)={0x2, 0x9, 0x8001, 0x29a6a51f, 0xb4, 0xf8, 0xfffffffffffff6c0, 0x4}, &(0x7f0000000080)={0x9, 0x7, 0x372, 0x4, 0x7fff, 0x13, 0x20, 0xeb}, &(0x7f0000000180)) 11:02:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) [ 728.978739] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 729.097783] IPVS: ftp: loaded support on port[0] = 21 11:02:20 executing program 2: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x5e, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x10, 0x2, 0x4a}, {@multicast2, 0x4e24, 0x2003, 0x8001}}, 0x44) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x720000, 0xffffffff7ff0bdbe}) r4 = dup3(r1, r2, 0x80000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)="17fb4619a4af7a3c08271a0bd7286f7ecee94dcf73ff054630e4a8b9a8a27713fb1e74ff2362ab", 0x27) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev, 0x0, 0x0, 'wrr\x00', 0x20}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x400, 0x5ce6, {0x0, 0x2710}, {}, {0x0, 0x401, 0x0, 0x20}, 0x1, @can={{0x3, 0x800, 0x7, 0x4}, 0x8, 0x1, 0x0, 0x0, "cef159b440fee88d"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) unshare(0x0) pipe(&(0x7f0000000100)) 11:02:20 executing program 5: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x5e, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x10, 0x2, 0x4a}, {@multicast2, 0x4e24, 0x2003, 0x8001}}, 0x44) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x720000, 0xffffffff7ff0bdbe}) r4 = dup3(r1, r2, 0x80000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)="17fb4619a4af7a3c08271a0bd7286f7ecee94dcf73ff054630e4a8b9a8a27713fb1e74ff2362ab", 0x27) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev, 0x0, 0x0, 'wrr\x00', 0x20}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x400, 0x5ce6, {0x0, 0x2710}, {}, {0x0, 0x401, 0x0, 0x20}, 0x1, @can={{0x3, 0x800, 0x7, 0x4}, 0x8, 0x1, 0x0, 0x0, "cef159b440fee88d"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) unshare(0x0) pipe(&(0x7f0000000100)) 11:02:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 11:02:20 executing program 5: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x5e, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x10, 0x2, 0x4a}, {@multicast2, 0x4e24, 0x2003, 0x8001}}, 0x44) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x720000, 0xffffffff7ff0bdbe}) r4 = dup3(r1, r2, 0x80000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)="17fb4619a4af7a3c08271a0bd7286f7ecee94dcf73ff054630e4a8b9a8a27713fb1e74ff2362ab", 0x27) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev, 0x0, 0x0, 'wrr\x00', 0x20}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x400, 0x5ce6, {0x0, 0x2710}, {}, {0x0, 0x401, 0x0, 0x20}, 0x1, @can={{0x3, 0x800, 0x7, 0x4}, 0x8, 0x1, 0x0, 0x0, "cef159b440fee88d"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) unshare(0x0) pipe(&(0x7f0000000100)) [ 729.581959] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:02:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) [ 729.757649] IPVS: ftp: loaded support on port[0] = 21 11:02:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) [ 729.819434] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 11:02:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) 11:02:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) [ 730.107130] IPVS: ftp: loaded support on port[0] = 21 11:02:21 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) [ 730.310839] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 730.692552] IPVS: ftp: loaded support on port[0] = 21 11:02:22 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) [ 731.001061] IPVS: ftp: loaded support on port[0] = 21 11:02:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) 11:02:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 11:02:22 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 11:02:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) [ 731.787190] IPVS: ftp: loaded support on port[0] = 21 [ 731.816466] IPVS: ftp: loaded support on port[0] = 21 11:02:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) 11:02:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 11:02:23 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) [ 732.662816] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 732.854778] IPVS: ftp: loaded support on port[0] = 21 11:02:24 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt$packet_buf(r0, 0x107, 0x12, &(0x7f0000000100), 0x0) [ 733.004036] IPVS: ftp: loaded support on port[0] = 21 11:02:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'ifb0\x00', 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00'}) 11:02:24 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x207f, 0x0) [ 733.650027] device ifb0 entered promiscuous mode 11:02:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) 11:02:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) [ 733.676623] device ifb0 left promiscuous mode 11:02:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) 11:02:25 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x207f, 0x0) 11:02:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x303500, 0x0) 11:02:25 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x207f, 0x0) 11:02:25 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x207f, 0x0) 11:02:25 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="24000000260007101dfffd946fa283df8fc4390009000000069effff000000000d00ff7e", 0x24}], 0x1}, 0x0) [ 734.735625] device ifb0 entered promiscuous mode 11:02:26 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000280)='./file1\x00') [ 734.773622] device ifb0 left promiscuous mode 11:02:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) timer_create(0x0, &(0x7f0000000540)={0x0, 0x0, 0x7, @thr={&(0x7f0000000380), &(0x7f0000000440)}}, &(0x7f0000000580)) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1f, 0x3}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000005c0)) sendfile(r1, r2, &(0x7f0000000080)=0xf, 0x7ffff00e) 11:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0x0, 0xe00000000000000}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x0, 0x0, 0x0, '\x00', 0x6}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000340)}) 11:02:26 executing program 2: mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x200000000004, 0x231, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000000040), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000000480), 0x8}) 11:02:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4c, &(0x7f0000000080)={@remote}, 0x20) 11:02:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) timer_create(0x0, &(0x7f0000000540)={0x0, 0x0, 0x7, @thr={&(0x7f0000000380), &(0x7f0000000440)}}, &(0x7f0000000580)) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1f, 0x3}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000005c0)) sendfile(r1, r2, &(0x7f0000000080)=0xf, 0x7ffff00e) 11:02:26 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000280)='./file1\x00') 11:02:26 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="24000000260007101dfffd946fa283df8fc4390009000000069effff000000000d00ff7e", 0x24}], 0x1}, 0x0) 11:02:26 executing program 2: mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x200000000004, 0x231, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000000040), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000000480), 0x8}) 11:02:27 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="24000000260007101dfffd946fa283df8fc4390009000000069effff000000000d00ff7e", 0x24}], 0x1}, 0x0) 11:02:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4c, &(0x7f0000000080)={@remote}, 0x20) 11:02:27 executing program 2: mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x200000000004, 0x231, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000000040), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000000480), 0x8}) 11:02:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) timer_create(0x0, &(0x7f0000000540)={0x0, 0x0, 0x7, @thr={&(0x7f0000000380), &(0x7f0000000440)}}, &(0x7f0000000580)) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1f, 0x3}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000005c0)) sendfile(r1, r2, &(0x7f0000000080)=0xf, 0x7ffff00e) 11:02:27 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="24000000260007101dfffd946fa283df8fc4390009000000069effff000000000d00ff7e", 0x24}], 0x1}, 0x0) 11:02:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4c, &(0x7f0000000080)={@remote}, 0x20) 11:02:27 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 11:02:27 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4141, 0x0) 11:02:27 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000280)='./file1\x00') 11:02:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) timer_create(0x0, &(0x7f0000000540)={0x0, 0x0, 0x7, @thr={&(0x7f0000000380), &(0x7f0000000440)}}, &(0x7f0000000580)) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1f, 0x3}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000005c0)) sendfile(r1, r2, &(0x7f0000000080)=0xf, 0x7ffff00e) 11:02:27 executing program 2: mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x200000000004, 0x231, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000000040), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000000480), 0x8}) 11:02:28 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4141, 0x0) 11:02:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4c, &(0x7f0000000080)={@remote}, 0x20) 11:02:28 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4141, 0x0) 11:02:28 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) 11:02:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000000)=0x1) 11:02:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 11:02:28 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 11:02:28 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4141, 0x0) 11:02:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000000)=0x1) 11:02:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 11:02:28 executing program 3: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 11:02:28 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000280)='./file1\x00') 11:02:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000000)=0x1) 11:02:28 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) 11:02:28 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 11:02:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) [ 737.491522] *** Guest State *** [ 737.495424] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 737.520305] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:02:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000000)=0x1) [ 737.587345] CR3 = 0x0000000000000000 [ 737.591646] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 737.599887] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 737.610531] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 737.663395] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 737.678235] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 737.699182] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 11:02:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) [ 737.720139] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 737.739230] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 737.752699] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 737.761254] GDTR: limit=0x0000ffff, base=0x0000000000000000 11:02:29 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) [ 737.786234] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 737.813150] IDTR: limit=0x0000ffff, base=0x0000000000000000 11:02:29 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) [ 737.865773] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 11:02:29 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) [ 737.915478] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 737.943316] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 737.966975] Interruptibility = 00000000 ActivityState = 00000000 [ 737.987266] *** Host State *** [ 737.997800] RIP = 0xffffffff8120262c RSP = 0xffff88019462f390 11:02:29 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) [ 738.028128] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 738.085321] FSBase=00007fd86b39e700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 738.127699] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 738.188436] CR0=0000000080050033 CR3=000000018d9ca000 CR4=00000000001426e0 [ 738.228777] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 738.245258] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 738.251682] *** Control State *** [ 738.255890] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 738.264165] EntryControls=0000d1ff ExitControls=002fefff [ 738.271036] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 738.292791] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 738.307010] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 738.316943] reason=80000021 qualification=0000000000000000 [ 738.323662] IDTVectoring: info=00000000 errcode=00000000 [ 738.329379] TSC Offset = 0xfffffe72ea43015c [ 738.386486] TPR Threshold = 0x00 [ 738.419484] EPT pointer = 0x00000001b9cee01e 11:02:29 executing program 3: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 11:02:29 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) 11:02:29 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) 11:02:29 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) 11:02:29 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) 11:02:29 executing program 0: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 11:02:30 executing program 3: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 11:02:30 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) 11:02:30 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) [ 739.051928] *** Guest State *** 11:02:30 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x40) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x5}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000680)={&(0x7f0000000640), 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@usrjquota='usrjquota='}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock='dioread_nolock'}]}) 11:02:30 executing program 2: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 739.083754] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 739.154724] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 739.199581] CR3 = 0x0000000000000000 [ 739.219425] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 739.222816] *** Guest State *** [ 739.237560] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 739.257403] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 739.259932] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 739.278237] CR3 = 0x0000000000000000 [ 739.303147] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 739.330338] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 739.339456] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:02:30 executing program 4: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"bf83ac7d9743d3c96ed28a1c32fcb2884aeffb75a800c24b881eb07b7b9b8ae47af1b4ddf2ba9338d83407ff460dee3a6e36306f74166f028182542253e78c79ce18d81247d7426375b3c79fc1fe83011dddbf5ceaa6eebe23aac240ddd3ac244ee8d5d44433f6b0cdd51d0280e035516c5fed4229c51596aafc5a15b6589d583bd16bd450db993c42476f0b81be5428d7f56d5508bf647c7fae77e0e727213cd6ddf23520f6941cb573648917d7bb67fe3c04cd7ed006a8602dd4cb28ebe03be077eeff355e42d6b47c0d01c36c2249e51dba9844a846e51ead8fc37abc7373b4d255bc8f0a32502b2c4cbe3f647bc6cd4537d219206e71cbcbaf78b4e0f5106f219b70215969054281e2c15cdf262471ba4726dfaa29435a36743d8b4a631d1bbc25136d457616e0ae6e0068c458026cd1aef7c49ec0c9324205545e8498e1dd4d4b596b265465ab490f16e5017723cfae96f2c34de10a82555a9fc2c7935bafd7698c56fd20b0e03da645cf275b5d611f9af9b570bbf7867a96f891b1c6df9e791de4beb2c71b7d1f10590db62a9acffe86b7aba38145632346abe6c098c15ddd54b99cfb03d6f9013572c9fcb8c8182604305f8e95d712d5bf94959d629b4e433894970ff241ce28315f0cf4742652512e5380cf85cc70dc1de3c9ab67e2bd3fca0b585ad2a67f9ce96ab960432ba852055a9adee1dadf5605693940d1ac974180b452d44f5a0acb7316e46e842a48c10f15131c45156942d8ea880463444b9cc87b48e1e71fc5b93acb8565c54a41d9c60e8955cd42512cc6d6686aa73da192d6a397aa47ce2137d7eb36d2435e6ba94352f75b16c4d2c0831777ef7e36a77c2b2d3697174fdc0c728d9b7450de4baa4c118c1848a9ce91b822e0590bd64f16fd8db449a9942c8e7add057fec3416cee992fb2eb4499dd24163419a30f8b2a811cd8fee06f6f92ac308aa69c2b59e1c3a3e5f8bb92781bb411245752107b1edfa4863563f63ac2fd84075caeecffa3b866259ada69c3e293de7b7aa4caff8be267f2f1a0cc814e0e79fa11ed33fd72a95d2cabdd65255f67cd192da9c1a089b8826502efb964d43e01c40f5a7d0e89c0ffe85597cb087de979b01c5a965a136c0457456f3fa9177449b57ab4e496105350d238ec605cc557db487f8d9791d97955619bca6f86e9eeb063ae4307482d865f0c3061b1299d1af8bcc2be2b280071a65ab60605946b482e0f69d13eff0eea20ad85fdb72865149fdd8ff926b9b70beba57022f29573d9121e7395c78a7fd0dc12b7413dbd631e2d8619e61ca82622754b84f935f92ade92665b8be00a6489bd51b70f9884c53c986d03dc4728c07a8903b7f3c9a642701113aa1d382264ce7b0b91f4ec5de432869f23baa8d491820441421c823bc4e824b9ee1451cae7e76d122b1606fec5a8bce603adf30"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 739.354103] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 739.379870] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 739.397538] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 739.439564] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.449038] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 11:02:30 executing program 2: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 739.503069] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.508539] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 11:02:30 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind(r0, &(0x7f0000000240)=@xdp, 0x80) [ 739.553216] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.580305] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 11:02:30 executing program 5: syz_mount_image$hfsplus(&(0x7f00000002c0)='hfsplus\x00', &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@creator={'creator', 0x3d, "85c7cc81"}, 0x22}]}) [ 739.610598] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.633163] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.641166] *** Guest State *** [ 739.641252] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 11:02:30 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind(r0, &(0x7f0000000240)=@xdp, 0x80) [ 739.641307] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 739.669696] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.680949] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 739.706347] CR3 = 0x0000000000000000 11:02:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getegid() getresgid(&(0x7f0000006b00), &(0x7f0000006b40), &(0x7f0000006b80)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="6881d20becc266c4972e81d4b433f328070e556ee9b5aeaea9eff8154893d3a139ee74aa4e30e985d0ad3cfa6fa4cb6a4b721f0b169c3eeeb7ae36205eae018428dbfc520d20fcca7cf5bcbd6c7f590cf4599353b7abbe67c49294b9fb1359d3691cc02edfdc19a224c536f4f038710f64", 0x71) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007740)={{}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000007840)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000007880)) getegid() getuid() getegid() lstat(&(0x7f0000007f40)='./file0\x00', &(0x7f0000007f80)) getgid() setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x19, &(0x7f0000002bc0)={0x0, 'bond_slave_1\x00'}, 0x18) add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0), &(0x7f0000002800), 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000001c0)) [ 739.712152] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 739.726980] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 739.730760] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 739.763137] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 739.771197] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.771212] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 739.771232] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 739.771245] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 739.771266] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 739.812424] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 739.824483] *** Guest State *** [ 739.827790] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 739.842709] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 739.858933] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.866382] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 739.867820] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 739.883852] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 739.883866] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 739.883880] Interruptibility = 00000000 ActivityState = 00000000 [ 739.911752] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 739.913244] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.923059] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 739.931253] CR3 = 0x0000000000000000 [ 739.937771] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.946263] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 739.952320] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 739.952403] *** Host State *** [ 739.958646] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 739.963080] Interruptibility = 00000000 ActivityState = 00000000 [ 739.976013] RIP = 0xffffffff8120262c RSP = 0xffff88019228f390 [ 739.976037] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 739.976049] FSBase=00007f009b07a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 739.976062] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 739.976082] CR0=0000000080050033 CR3=00000001d7103000 CR4=00000000001426e0 [ 739.976097] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 739.976111] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 739.976116] *** Control State *** [ 739.976125] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 739.976133] EntryControls=0000d1ff ExitControls=002fefff [ 739.976148] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 739.984726] *** Host State *** [ 739.999525] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 740.003087] RIP = 0xffffffff8120262c RSP = 0xffff88018c747390 [ 740.009969] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 740.016615] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 740.024931] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 740.027386] FSBase=00007fd86b39e700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 740.033038] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 740.038473] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 740.046136] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.048837] CR0=0000000080050033 CR3=000000019a013000 CR4=00000000001426e0 [ 740.055387] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 740.061627] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 740.069383] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 740.077139] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 740.084281] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 740.105928] *** Control State *** [ 740.112732] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 740.120052] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.128141] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 740.137929] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 740.142913] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 740.157126] EntryControls=0000d1ff ExitControls=002fefff [ 740.160614] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 740.172628] reason=80000021 qualification=0000000000000000 [ 740.183795] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 740.203744] IDTVectoring: info=00000000 errcode=00000000 [ 740.203966] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 740.216809] TSC Offset = 0xfffffe721e2f1083 [ 740.225058] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 740.242617] TPR Threshold = 0x00 [ 740.249595] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 740.259558] EPT pointer = 0x0000000180b2601e [ 740.260858] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 740.282672] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 740.290799] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.297742] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 740.306936] Interruptibility = 00000000 ActivityState = 00000000 11:02:31 executing program 0: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"bf83ac7d9743d3c96ed28a1c32fcb2884aeffb75a800c24b881eb07b7b9b8ae47af1b4ddf2ba9338d83407ff460dee3a6e36306f74166f028182542253e78c79ce18d81247d7426375b3c79fc1fe83011dddbf5ceaa6eebe23aac240ddd3ac244ee8d5d44433f6b0cdd51d0280e035516c5fed4229c51596aafc5a15b6589d583bd16bd450db993c42476f0b81be5428d7f56d5508bf647c7fae77e0e727213cd6ddf23520f6941cb573648917d7bb67fe3c04cd7ed006a8602dd4cb28ebe03be077eeff355e42d6b47c0d01c36c2249e51dba9844a846e51ead8fc37abc7373b4d255bc8f0a32502b2c4cbe3f647bc6cd4537d219206e71cbcbaf78b4e0f5106f219b70215969054281e2c15cdf262471ba4726dfaa29435a36743d8b4a631d1bbc25136d457616e0ae6e0068c458026cd1aef7c49ec0c9324205545e8498e1dd4d4b596b265465ab490f16e5017723cfae96f2c34de10a82555a9fc2c7935bafd7698c56fd20b0e03da645cf275b5d611f9af9b570bbf7867a96f891b1c6df9e791de4beb2c71b7d1f10590db62a9acffe86b7aba38145632346abe6c098c15ddd54b99cfb03d6f9013572c9fcb8c8182604305f8e95d712d5bf94959d629b4e433894970ff241ce28315f0cf4742652512e5380cf85cc70dc1de3c9ab67e2bd3fca0b585ad2a67f9ce96ab960432ba852055a9adee1dadf5605693940d1ac974180b452d44f5a0acb7316e46e842a48c10f15131c45156942d8ea880463444b9cc87b48e1e71fc5b93acb8565c54a41d9c60e8955cd42512cc6d6686aa73da192d6a397aa47ce2137d7eb36d2435e6ba94352f75b16c4d2c0831777ef7e36a77c2b2d3697174fdc0c728d9b7450de4baa4c118c1848a9ce91b822e0590bd64f16fd8db449a9942c8e7add057fec3416cee992fb2eb4499dd24163419a30f8b2a811cd8fee06f6f92ac308aa69c2b59e1c3a3e5f8bb92781bb411245752107b1edfa4863563f63ac2fd84075caeecffa3b866259ada69c3e293de7b7aa4caff8be267f2f1a0cc814e0e79fa11ed33fd72a95d2cabdd65255f67cd192da9c1a089b8826502efb964d43e01c40f5a7d0e89c0ffe85597cb087de979b01c5a965a136c0457456f3fa9177449b57ab4e496105350d238ec605cc557db487f8d9791d97955619bca6f86e9eeb063ae4307482d865f0c3061b1299d1af8bcc2be2b280071a65ab60605946b482e0f69d13eff0eea20ad85fdb72865149fdd8ff926b9b70beba57022f29573d9121e7395c78a7fd0dc12b7413dbd631e2d8619e61ca82622754b84f935f92ade92665b8be00a6489bd51b70f9884c53c986d03dc4728c07a8903b7f3c9a642701113aa1d382264ce7b0b91f4ec5de432869f23baa8d491820441421c823bc4e824b9ee1451cae7e76d122b1606fec5a8bce603adf30"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 740.313460] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.320040] reason=80000021 qualification=0000000000000000 [ 740.326505] *** Host State *** [ 740.329829] RIP = 0xffffffff8120262c RSP = 0xffff88018c74f390 [ 740.336923] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 740.345266] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 740.351815] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 740.358410] FSBase=00007f831f723700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 740.366385] IDTVectoring: info=00000000 errcode=00000000 [ 740.382844] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 740.401765] Interruptibility = 00000000 ActivityState = 00000000 [ 740.408501] TSC Offset = 0xfffffe71fe202de7 [ 740.413045] TPR Threshold = 0x00 [ 740.416488] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 740.416503] CR0=0000000080050033 CR3=00000001c2e89000 CR4=00000000001426e0 [ 740.422538] *** Host State *** [ 740.433079] EPT pointer = 0x00000001b058f01e [ 740.437937] RIP = 0xffffffff8120262c RSP = 0xffff88019a2b7390 [ 740.457661] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 11:02:31 executing program 3: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"bf83ac7d9743d3c96ed28a1c32fcb2884aeffb75a800c24b881eb07b7b9b8ae47af1b4ddf2ba9338d83407ff460dee3a6e36306f74166f028182542253e78c79ce18d81247d7426375b3c79fc1fe83011dddbf5ceaa6eebe23aac240ddd3ac244ee8d5d44433f6b0cdd51d0280e035516c5fed4229c51596aafc5a15b6589d583bd16bd450db993c42476f0b81be5428d7f56d5508bf647c7fae77e0e727213cd6ddf23520f6941cb573648917d7bb67fe3c04cd7ed006a8602dd4cb28ebe03be077eeff355e42d6b47c0d01c36c2249e51dba9844a846e51ead8fc37abc7373b4d255bc8f0a32502b2c4cbe3f647bc6cd4537d219206e71cbcbaf78b4e0f5106f219b70215969054281e2c15cdf262471ba4726dfaa29435a36743d8b4a631d1bbc25136d457616e0ae6e0068c458026cd1aef7c49ec0c9324205545e8498e1dd4d4b596b265465ab490f16e5017723cfae96f2c34de10a82555a9fc2c7935bafd7698c56fd20b0e03da645cf275b5d611f9af9b570bbf7867a96f891b1c6df9e791de4beb2c71b7d1f10590db62a9acffe86b7aba38145632346abe6c098c15ddd54b99cfb03d6f9013572c9fcb8c8182604305f8e95d712d5bf94959d629b4e433894970ff241ce28315f0cf4742652512e5380cf85cc70dc1de3c9ab67e2bd3fca0b585ad2a67f9ce96ab960432ba852055a9adee1dadf5605693940d1ac974180b452d44f5a0acb7316e46e842a48c10f15131c45156942d8ea880463444b9cc87b48e1e71fc5b93acb8565c54a41d9c60e8955cd42512cc6d6686aa73da192d6a397aa47ce2137d7eb36d2435e6ba94352f75b16c4d2c0831777ef7e36a77c2b2d3697174fdc0c728d9b7450de4baa4c118c1848a9ce91b822e0590bd64f16fd8db449a9942c8e7add057fec3416cee992fb2eb4499dd24163419a30f8b2a811cd8fee06f6f92ac308aa69c2b59e1c3a3e5f8bb92781bb411245752107b1edfa4863563f63ac2fd84075caeecffa3b866259ada69c3e293de7b7aa4caff8be267f2f1a0cc814e0e79fa11ed33fd72a95d2cabdd65255f67cd192da9c1a089b8826502efb964d43e01c40f5a7d0e89c0ffe85597cb087de979b01c5a965a136c0457456f3fa9177449b57ab4e496105350d238ec605cc557db487f8d9791d97955619bca6f86e9eeb063ae4307482d865f0c3061b1299d1af8bcc2be2b280071a65ab60605946b482e0f69d13eff0eea20ad85fdb72865149fdd8ff926b9b70beba57022f29573d9121e7395c78a7fd0dc12b7413dbd631e2d8619e61ca82622754b84f935f92ade92665b8be00a6489bd51b70f9884c53c986d03dc4728c07a8903b7f3c9a642701113aa1d382264ce7b0b91f4ec5de432869f23baa8d491820441421c823bc4e824b9ee1451cae7e76d122b1606fec5a8bce603adf30"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 11:02:31 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind(r0, &(0x7f0000000240)=@xdp, 0x80) 11:02:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getegid() getresgid(&(0x7f0000006b00), &(0x7f0000006b40), &(0x7f0000006b80)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="6881d20becc266c4972e81d4b433f328070e556ee9b5aeaea9eff8154893d3a139ee74aa4e30e985d0ad3cfa6fa4cb6a4b721f0b169c3eeeb7ae36205eae018428dbfc520d20fcca7cf5bcbd6c7f590cf4599353b7abbe67c49294b9fb1359d3691cc02edfdc19a224c536f4f038710f64", 0x71) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007740)={{}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000007840)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000007880)) getegid() getuid() getegid() lstat(&(0x7f0000007f40)='./file0\x00', &(0x7f0000007f80)) getgid() setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x19, &(0x7f0000002bc0)={0x0, 'bond_slave_1\x00'}, 0x18) add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0), &(0x7f0000002800), 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000001c0)) [ 740.486562] FSBase=00007f247b22c700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 740.512673] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 740.532612] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 740.546349] *** Control State *** [ 740.556685] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 11:02:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getegid() getresgid(&(0x7f0000006b00), &(0x7f0000006b40), &(0x7f0000006b80)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="6881d20becc266c4972e81d4b433f328070e556ee9b5aeaea9eff8154893d3a139ee74aa4e30e985d0ad3cfa6fa4cb6a4b721f0b169c3eeeb7ae36205eae018428dbfc520d20fcca7cf5bcbd6c7f590cf4599353b7abbe67c49294b9fb1359d3691cc02edfdc19a224c536f4f038710f64", 0x71) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007740)={{}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000007840)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000007880)) getegid() getuid() getegid() lstat(&(0x7f0000007f40)='./file0\x00', &(0x7f0000007f80)) getgid() setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x19, &(0x7f0000002bc0)={0x0, 'bond_slave_1\x00'}, 0x18) add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0), &(0x7f0000002800), 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000001c0)) [ 740.583073] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 740.607222] CR0=0000000080050033 CR3=000000018fecb000 CR4=00000000001426e0 [ 740.614614] EntryControls=0000d1ff ExitControls=002fefff 11:02:31 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind(r0, &(0x7f0000000240)=@xdp, 0x80) [ 740.662599] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 740.669734] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 740.692679] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.712736] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 740.743614] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.750525] *** Control State *** [ 740.761928] *** Guest State *** [ 740.768722] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 740.770194] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 740.780932] reason=80000021 qualification=0000000000000000 [ 740.803169] IDTVectoring: info=00000000 errcode=00000000 [ 740.808780] EntryControls=0000d1ff ExitControls=002fefff [ 740.816794] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 740.838302] TSC Offset = 0xfffffe71c438f07f [ 740.843130] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 740.853887] CR3 = 0x0000000000000000 [ 740.861486] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 740.867903] TPR Threshold = 0x00 [ 740.873885] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.882756] EPT pointer = 0x000000019a01701e [ 740.883025] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 740.898876] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 740.906521] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:02:32 executing program 4: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"bf83ac7d9743d3c96ed28a1c32fcb2884aeffb75a800c24b881eb07b7b9b8ae47af1b4ddf2ba9338d83407ff460dee3a6e36306f74166f028182542253e78c79ce18d81247d7426375b3c79fc1fe83011dddbf5ceaa6eebe23aac240ddd3ac244ee8d5d44433f6b0cdd51d0280e035516c5fed4229c51596aafc5a15b6589d583bd16bd450db993c42476f0b81be5428d7f56d5508bf647c7fae77e0e727213cd6ddf23520f6941cb573648917d7bb67fe3c04cd7ed006a8602dd4cb28ebe03be077eeff355e42d6b47c0d01c36c2249e51dba9844a846e51ead8fc37abc7373b4d255bc8f0a32502b2c4cbe3f647bc6cd4537d219206e71cbcbaf78b4e0f5106f219b70215969054281e2c15cdf262471ba4726dfaa29435a36743d8b4a631d1bbc25136d457616e0ae6e0068c458026cd1aef7c49ec0c9324205545e8498e1dd4d4b596b265465ab490f16e5017723cfae96f2c34de10a82555a9fc2c7935bafd7698c56fd20b0e03da645cf275b5d611f9af9b570bbf7867a96f891b1c6df9e791de4beb2c71b7d1f10590db62a9acffe86b7aba38145632346abe6c098c15ddd54b99cfb03d6f9013572c9fcb8c8182604305f8e95d712d5bf94959d629b4e433894970ff241ce28315f0cf4742652512e5380cf85cc70dc1de3c9ab67e2bd3fca0b585ad2a67f9ce96ab960432ba852055a9adee1dadf5605693940d1ac974180b452d44f5a0acb7316e46e842a48c10f15131c45156942d8ea880463444b9cc87b48e1e71fc5b93acb8565c54a41d9c60e8955cd42512cc6d6686aa73da192d6a397aa47ce2137d7eb36d2435e6ba94352f75b16c4d2c0831777ef7e36a77c2b2d3697174fdc0c728d9b7450de4baa4c118c1848a9ce91b822e0590bd64f16fd8db449a9942c8e7add057fec3416cee992fb2eb4499dd24163419a30f8b2a811cd8fee06f6f92ac308aa69c2b59e1c3a3e5f8bb92781bb411245752107b1edfa4863563f63ac2fd84075caeecffa3b866259ada69c3e293de7b7aa4caff8be267f2f1a0cc814e0e79fa11ed33fd72a95d2cabdd65255f67cd192da9c1a089b8826502efb964d43e01c40f5a7d0e89c0ffe85597cb087de979b01c5a965a136c0457456f3fa9177449b57ab4e496105350d238ec605cc557db487f8d9791d97955619bca6f86e9eeb063ae4307482d865f0c3061b1299d1af8bcc2be2b280071a65ab60605946b482e0f69d13eff0eea20ad85fdb72865149fdd8ff926b9b70beba57022f29573d9121e7395c78a7fd0dc12b7413dbd631e2d8619e61ca82622754b84f935f92ade92665b8be00a6489bd51b70f9884c53c986d03dc4728c07a8903b7f3c9a642701113aa1d382264ce7b0b91f4ec5de432869f23baa8d491820441421c823bc4e824b9ee1451cae7e76d122b1606fec5a8bce603adf30"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 740.932705] reason=80000021 qualification=0000000000000000 [ 740.942666] IDTVectoring: info=00000000 errcode=00000000 [ 740.948695] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 740.959386] TSC Offset = 0xfffffe71ae3c5502 [ 740.964567] TPR Threshold = 0x00 [ 740.969399] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 740.972805] EPT pointer = 0x00000001c20fd01e 11:02:32 executing program 2: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 11:02:32 executing program 0: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 11:02:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getegid() getresgid(&(0x7f0000006b00), &(0x7f0000006b40), &(0x7f0000006b80)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="6881d20becc266c4972e81d4b433f328070e556ee9b5aeaea9eff8154893d3a139ee74aa4e30e985d0ad3cfa6fa4cb6a4b721f0b169c3eeeb7ae36205eae018428dbfc520d20fcca7cf5bcbd6c7f590cf4599353b7abbe67c49294b9fb1359d3691cc02edfdc19a224c536f4f038710f64", 0x71) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007740)={{}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000007840)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000007880)) getegid() getuid() getegid() lstat(&(0x7f0000007f40)='./file0\x00', &(0x7f0000007f80)) getgid() setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x19, &(0x7f0000002bc0)={0x0, 'bond_slave_1\x00'}, 0x18) add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0), &(0x7f0000002800), 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000001c0)) 11:02:32 executing program 1: syz_mount_image$gfs2(&(0x7f0000000240)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@noloccookie='noloccookie'}]}) [ 740.992777] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.022712] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.055532] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.104285] gfs2: not a GFS2 filesystem [ 741.130201] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.168123] GDTR: limit=0x0000ffff, base=0x0000000000000000 11:02:32 executing program 5: r0 = socket$inet6(0xa, 0x200000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x4e, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) [ 741.219094] gfs2: not a GFS2 filesystem [ 741.227050] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 11:02:32 executing program 1: syz_mount_image$gfs2(&(0x7f0000000240)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@noloccookie='noloccookie'}]}) [ 741.276737] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 741.308957] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 741.368790] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 741.388573] *** Guest State *** [ 741.395890] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 741.417046] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 741.441885] gfs2: not a GFS2 filesystem [ 741.443621] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 741.471855] CR3 = 0x0000000000000000 [ 741.482041] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 741.489396] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 741.500502] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 741.504513] Interruptibility = 00000000 ActivityState = 00000000 [ 741.531925] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 741.541186] *** Host State *** [ 741.551999] RIP = 0xffffffff8120262c RSP = 0xffff88018c747390 [ 741.564840] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.579341] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 741.588868] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.600807] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.609473] FSBase=00007fd86b39e700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 741.619056] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.634412] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 741.652308] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 741.659043] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 741.671162] CR0=0000000080050033 CR3=0000000192a74000 CR4=00000000001426f0 [ 741.678734] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 741.688266] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 741.695935] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 741.704681] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 741.710739] *** Control State *** [ 741.714786] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 741.723242] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 741.729912] EntryControls=0000d1ff ExitControls=002fefff [ 741.735855] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 741.742648] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 741.742951] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 741.749776] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 741.757687] Interruptibility = 00000000 ActivityState = 00000000 [ 741.770831] *** Host State *** [ 741.774933] RIP = 0xffffffff8120262c RSP = 0xffff880199307390 [ 741.781411] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 741.782602] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 741.788402] FSBase=00007f247b24d700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 741.802720] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 741.809416] CR0=0000000080050033 CR3=00000001934d8000 CR4=00000000001426e0 [ 741.812608] reason=80000021 qualification=0000000000000000 [ 741.817296] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 741.830177] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 741.832592] IDTVectoring: info=00000000 errcode=00000000 [ 741.837115] *** Control State *** [ 741.841786] TSC Offset = 0xfffffe712b1dcd7e [ 741.841794] TPR Threshold = 0x00 [ 741.841804] EPT pointer = 0x00000001be41b01e [ 741.846142] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 741.870118] EntryControls=0000d1ff ExitControls=002fefff [ 741.876586] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 11:02:33 executing program 1: syz_mount_image$gfs2(&(0x7f0000000240)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@noloccookie='noloccookie'}]}) 11:02:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c0003003a006a007d0a00010c000200170022ff02f10000"], 0x2c}}, 0x0) 11:02:33 executing program 5: r0 = socket$inet6(0xa, 0x200000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x4e, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 11:02:33 executing program 4: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x0, 0x0, 0x0, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x0, 0x1f, 0x0, 0x9e, 0x3, 0x40, 0x6]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) timer_delete(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={"bf83ac7d9743d3c96ed28a1c32fcb2884aeffb75a800c24b881eb07b7b9b8ae47af1b4ddf2ba9338d83407ff460dee3a6e36306f74166f028182542253e78c79ce18d81247d7426375b3c79fc1fe83011dddbf5ceaa6eebe23aac240ddd3ac244ee8d5d44433f6b0cdd51d0280e035516c5fed4229c51596aafc5a15b6589d583bd16bd450db993c42476f0b81be5428d7f56d5508bf647c7fae77e0e727213cd6ddf23520f6941cb573648917d7bb67fe3c04cd7ed006a8602dd4cb28ebe03be077eeff355e42d6b47c0d01c36c2249e51dba9844a846e51ead8fc37abc7373b4d255bc8f0a32502b2c4cbe3f647bc6cd4537d219206e71cbcbaf78b4e0f5106f219b70215969054281e2c15cdf262471ba4726dfaa29435a36743d8b4a631d1bbc25136d457616e0ae6e0068c458026cd1aef7c49ec0c9324205545e8498e1dd4d4b596b265465ab490f16e5017723cfae96f2c34de10a82555a9fc2c7935bafd7698c56fd20b0e03da645cf275b5d611f9af9b570bbf7867a96f891b1c6df9e791de4beb2c71b7d1f10590db62a9acffe86b7aba38145632346abe6c098c15ddd54b99cfb03d6f9013572c9fcb8c8182604305f8e95d712d5bf94959d629b4e433894970ff241ce28315f0cf4742652512e5380cf85cc70dc1de3c9ab67e2bd3fca0b585ad2a67f9ce96ab960432ba852055a9adee1dadf5605693940d1ac974180b452d44f5a0acb7316e46e842a48c10f15131c45156942d8ea880463444b9cc87b48e1e71fc5b93acb8565c54a41d9c60e8955cd42512cc6d6686aa73da192d6a397aa47ce2137d7eb36d2435e6ba94352f75b16c4d2c0831777ef7e36a77c2b2d3697174fdc0c728d9b7450de4baa4c118c1848a9ce91b822e0590bd64f16fd8db449a9942c8e7add057fec3416cee992fb2eb4499dd24163419a30f8b2a811cd8fee06f6f92ac308aa69c2b59e1c3a3e5f8bb92781bb411245752107b1edfa4863563f63ac2fd84075caeecffa3b866259ada69c3e293de7b7aa4caff8be267f2f1a0cc814e0e79fa11ed33fd72a95d2cabdd65255f67cd192da9c1a089b8826502efb964d43e01c40f5a7d0e89c0ffe85597cb087de979b01c5a965a136c0457456f3fa9177449b57ab4e496105350d238ec605cc557db487f8d9791d97955619bca6f86e9eeb063ae4307482d865f0c3061b1299d1af8bcc2be2b280071a65ab60605946b482e0f69d13eff0eea20ad85fdb72865149fdd8ff926b9b70beba57022f29573d9121e7395c78a7fd0dc12b7413dbd631e2d8619e61ca82622754b84f935f92ade92665b8be00a6489bd51b70f9884c53c986d03dc4728c07a8903b7f3c9a642701113aa1d382264ce7b0b91f4ec5de432869f23baa8d491820441421c823bc4e824b9ee1451cae7e76d122b1606fec5a8bce603adf30"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 741.884217] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 741.891176] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 741.898474] reason=80000021 qualification=0000000000000000 [ 741.906378] IDTVectoring: info=00000000 errcode=00000000 [ 741.912195] TSC Offset = 0xfffffe70dc07192b 11:02:33 executing program 3: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x400) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x730000, 0x0, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000280)}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) [ 741.942867] TPR Threshold = 0x00 [ 741.946465] EPT pointer = 0x00000001b308d01e 11:02:33 executing program 5: r0 = socket$inet6(0xa, 0x200000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x4e, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) [ 741.992069] gfs2: not a GFS2 filesystem [ 742.011028] netlink: 'syz-executor0': attribute type 3 has an invalid length. 11:02:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x1d}) [ 742.089600] netlink: 'syz-executor0': attribute type 2 has an invalid length. 11:02:33 executing program 3: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x400) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x730000, 0x0, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000280)}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) 11:02:33 executing program 1: syz_mount_image$gfs2(&(0x7f0000000240)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@noloccookie='noloccookie'}]}) [ 742.138468] netlink: 'syz-executor0': attribute type 3 has an invalid length. 11:02:33 executing program 5: r0 = socket$inet6(0xa, 0x200000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x4e, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) [ 742.221143] *** Guest State *** [ 742.227085] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 742.237516] netlink: 'syz-executor0': attribute type 2 has an invalid length. 11:02:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x1d}) [ 742.271826] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 742.281365] gfs2: not a GFS2 filesystem 11:02:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c0003003a006a007d0a00010c000200170022ff02f10000"], 0x2c}}, 0x0) [ 742.314373] CR3 = 0x0000000000000000 [ 742.326159] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 742.359744] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 742.388807] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:02:33 executing program 3: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x400) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x730000, 0x0, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000280)}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) 11:02:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x1d}) [ 742.438522] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 742.467864] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 11:02:33 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="01000000000000007f") [ 742.506697] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 742.534229] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 742.564387] autofs4:pid:28464:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 742.606121] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 742.648199] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 742.670005] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 742.706667] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 742.720804] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 742.729750] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 742.738252] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 742.747971] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 742.756323] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 742.765894] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 742.773864] Interruptibility = 00000000 ActivityState = 00000000 [ 742.780273] *** Host State *** [ 742.783765] RIP = 0xffffffff8120262c RSP = 0xffff8801ba837390 [ 742.789971] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 742.796750] FSBase=00007f831f723700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 742.806263] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 742.812344] CR0=0000000080050033 CR3=00000001b3236000 CR4=00000000001426f0 [ 742.820657] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 742.827870] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 742.834281] *** Control State *** [ 742.837838] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 742.844946] EntryControls=0000d1ff ExitControls=002fefff [ 742.850509] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 742.858098] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 742.865099] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 742.871778] reason=80000021 qualification=0000000000000000 [ 742.878518] IDTVectoring: info=00000000 errcode=00000000 [ 742.884304] TSC Offset = 0xfffffe706cf46157 [ 742.888725] TPR Threshold = 0x00 [ 742.892183] EPT pointer = 0x000000018cc6a01e 11:02:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x1d}) 11:02:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000cadffc)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)='\a', 0x1}]) 11:02:34 executing program 3: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x400) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x730000, 0x0, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000280)}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) 11:02:34 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="01000000000000007f") 11:02:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c0003003a006a007d0a00010c000200170022ff02f10000"], 0x2c}}, 0x0) 11:02:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x23b, 0x18}}, &(0x7f0000000040), 0xfffffffffffffe70}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20) 11:02:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) [ 743.000489] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 743.014505] autofs4:pid:28485:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 743.023153] netlink: 'syz-executor0': attribute type 2 has an invalid length. 11:02:34 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f0000000280), 0xa1d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/138) 11:02:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c0003003a006a007d0a00010c000200170022ff02f10000"], 0x2c}}, 0x0) 11:02:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000cadffc)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)='\a', 0x1}]) 11:02:34 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="01000000000000007f") 11:02:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x23b, 0x18}}, &(0x7f0000000040), 0xfffffffffffffe70}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20) 11:02:34 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="01000000000000007f") [ 743.274593] autofs4:pid:28508:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 743.300899] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 743.328864] netlink: 'syz-executor0': attribute type 2 has an invalid length. 11:02:34 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f0000000280), 0xa1d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/138) 11:02:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x23b, 0x18}}, &(0x7f0000000040), 0xfffffffffffffe70}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20) 11:02:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000cadffc)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)='\a', 0x1}]) [ 743.465356] autofs4:pid:28514:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) 11:02:34 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f0000000280), 0xa1d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/138) 11:02:34 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f0000000280), 0xa1d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/138) 11:02:35 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 11:02:35 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x8e30, 0x0, &(0x7f00000001c0), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:02:35 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x23b, 0x18}}, &(0x7f0000000040), 0xfffffffffffffe70}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20) 11:02:35 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f0000000280), 0xa1d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/138) 11:02:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000cadffc)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)='\a', 0x1}]) 11:02:35 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400ff00080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 11:02:35 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f0000000280), 0xa1d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/138) 11:02:35 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f0000000280), 0xa1d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/138) 11:02:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffff1f, 0x0, 0x0, {0x1, 0xf000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x8001a0ffffffff}, 0x0) 11:02:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0x0, 0x0}) chdir(&(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x40000000000000b, 0x0) 11:02:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x41}}) 11:02:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0x0, 0x0}) chdir(&(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x40000000000000b, 0x0) 11:02:35 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 11:02:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffff1f, 0x0, 0x0, {0x1, 0xf000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x8001a0ffffffff}, 0x0) 11:02:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x41}}) 11:02:35 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x8e30, 0x0, &(0x7f00000001c0), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:02:35 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x8e30, 0x0, &(0x7f00000001c0), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:02:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0x0, 0x0}) chdir(&(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x40000000000000b, 0x0) 11:02:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x41}}) 11:02:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffff1f, 0x0, 0x0, {0x1, 0xf000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x8001a0ffffffff}, 0x0) 11:02:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0x0, 0x0}) chdir(&(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x40000000000000b, 0x0) 11:02:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x41}}) 11:02:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffff1f, 0x0, 0x0, {0x1, 0xf000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x8001a0ffffffff}, 0x0) 11:02:36 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000b96000), 0x0, &(0x7f00002d4000)}, 0x0) sendmsg$netlink(r0, &(0x7f000078dfc8)={0x0, 0x0, &(0x7f0000013fc0), 0x0, &(0x7f0000b8c000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000a27fc8)={0x0, 0x0, &(0x7f0000998fe0)=[{&(0x7f0000780000)=""/1, 0x1}], 0x1, &(0x7f00005edf5c)}, 0x0) 11:02:36 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 11:02:36 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x8e30, 0x0, &(0x7f00000001c0), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:02:36 executing program 3: r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) sendfile(r0, r0, &(0x7f0000000040), 0xff8) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000003400)='./bus\x00') 11:02:36 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet_msfilter(r1, 0x0, 0x14, 0x0, 0x0) 11:02:36 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x8e30, 0x0, &(0x7f00000001c0), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:02:36 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000b96000), 0x0, &(0x7f00002d4000)}, 0x0) sendmsg$netlink(r0, &(0x7f000078dfc8)={0x0, 0x0, &(0x7f0000013fc0), 0x0, &(0x7f0000b8c000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000a27fc8)={0x0, 0x0, &(0x7f0000998fe0)=[{&(0x7f0000780000)=""/1, 0x1}], 0x1, &(0x7f00005edf5c)}, 0x0) 11:02:36 executing program 3: r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) sendfile(r0, r0, &(0x7f0000000040), 0xff8) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000003400)='./bus\x00') 11:02:36 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet_msfilter(r1, 0x0, 0x14, 0x0, 0x0) 11:02:37 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000b96000), 0x0, &(0x7f00002d4000)}, 0x0) sendmsg$netlink(r0, &(0x7f000078dfc8)={0x0, 0x0, &(0x7f0000013fc0), 0x0, &(0x7f0000b8c000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000a27fc8)={0x0, 0x0, &(0x7f0000998fe0)=[{&(0x7f0000780000)=""/1, 0x1}], 0x1, &(0x7f00005edf5c)}, 0x0) 11:02:37 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet_msfilter(r1, 0x0, 0x14, 0x0, 0x0) 11:02:37 executing program 3: r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) sendfile(r0, r0, &(0x7f0000000040), 0xff8) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000003400)='./bus\x00') 11:02:37 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000b96000), 0x0, &(0x7f00002d4000)}, 0x0) sendmsg$netlink(r0, &(0x7f000078dfc8)={0x0, 0x0, &(0x7f0000013fc0), 0x0, &(0x7f0000b8c000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000a27fc8)={0x0, 0x0, &(0x7f0000998fe0)=[{&(0x7f0000780000)=""/1, 0x1}], 0x1, &(0x7f00005edf5c)}, 0x0) 11:02:37 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet_msfilter(r1, 0x0, 0x14, 0x0, 0x0) 11:02:37 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x8e30, 0x0, &(0x7f00000001c0), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:02:37 executing program 3: r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) sendfile(r0, r0, &(0x7f0000000040), 0xff8) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000003400)='./bus\x00') 11:02:37 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x8e30, 0x0, &(0x7f00000001c0), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:02:37 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000b96000), 0x0, &(0x7f00002d4000)}, 0x0) sendmsg$netlink(r0, &(0x7f000078dfc8)={0x0, 0x0, &(0x7f0000013fc0), 0x0, &(0x7f0000b8c000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000a27fc8)={0x0, 0x0, &(0x7f0000998fe0)=[{&(0x7f0000780000)=""/1, 0x1}], 0x1, &(0x7f00005edf5c)}, 0x0) 11:02:37 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) 11:02:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@quota_quantum={'quota_quantum', 0x3d, 0x200}}, {@lockproto_nolock='lockproto=lock_nolock'}, {@ignore_local_fs='ignore_local_fs'}, {@nosuiddir='nosuiddir'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]}) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'gre0\x00'}) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000100)) 11:02:37 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000b96000), 0x0, &(0x7f00002d4000)}, 0x0) sendmsg$netlink(r0, &(0x7f000078dfc8)={0x0, 0x0, &(0x7f0000013fc0), 0x0, &(0x7f0000b8c000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000a27fc8)={0x0, 0x0, &(0x7f0000998fe0)=[{&(0x7f0000780000)=""/1, 0x1}], 0x1, &(0x7f00005edf5c)}, 0x0) 11:02:37 executing program 3: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000240)=0x8) r0 = syz_open_dev$audion(0x0, 0x706, 0x301800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000640)={0x80000000, 0x0, 0x0, @discrete={0x32a, 0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rmdir(&(0x7f0000000000)='./file0/file0\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000443) socketpair$unix(0x1, 0x5, 0x0, 0x0) 11:02:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@quota_quantum={'quota_quantum', 0x3d, 0x200}}, {@lockproto_nolock='lockproto=lock_nolock'}, {@ignore_local_fs='ignore_local_fs'}, {@nosuiddir='nosuiddir'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]}) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'gre0\x00'}) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000100)) 11:02:38 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000b96000), 0x0, &(0x7f00002d4000)}, 0x0) sendmsg$netlink(r0, &(0x7f000078dfc8)={0x0, 0x0, &(0x7f0000013fc0), 0x0, &(0x7f0000b8c000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000a27fc8)={0x0, 0x0, &(0x7f0000998fe0)=[{&(0x7f0000780000)=""/1, 0x1}], 0x1, &(0x7f00005edf5c)}, 0x0) 11:02:38 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 747.014321] device nr0 entered promiscuous mode 11:02:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@quota_quantum={'quota_quantum', 0x3d, 0x200}}, {@lockproto_nolock='lockproto=lock_nolock'}, {@ignore_local_fs='ignore_local_fs'}, {@nosuiddir='nosuiddir'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]}) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'gre0\x00'}) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000100)) 11:02:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 11:02:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffc, 0x0) 11:02:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 11:02:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@quota_quantum={'quota_quantum', 0x3d, 0x200}}, {@lockproto_nolock='lockproto=lock_nolock'}, {@ignore_local_fs='ignore_local_fs'}, {@nosuiddir='nosuiddir'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]}) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'gre0\x00'}) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000100)) [ 747.378021] kauditd_printk_skb: 1 callbacks suppressed [ 747.378050] audit: type=1804 audit(1543748558.657:390): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir204806509/syzkaller.PNamp8/415/memory.events" dev="sda1" ino=17302 res=1 [ 747.403857] overlayfs: filesystem on './file0' not supported as upperdir [ 747.510092] audit: type=1800 audit(1543748558.687:391): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="memory.events" dev="sda1" ino=17302 res=0 [ 747.724761] audit: type=1804 audit(1543748559.007:392): pid=28727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir204806509/syzkaller.PNamp8/415/memory.events" dev="sda1" ino=17302 res=1 [ 747.797111] audit: type=1800 audit(1543748559.027:393): pid=28727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="memory.events" dev="sda1" ino=17302 res=0 11:02:39 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) 11:02:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffc, 0x0) 11:02:39 executing program 3: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000240)=0x8) r0 = syz_open_dev$audion(0x0, 0x706, 0x301800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000640)={0x80000000, 0x0, 0x0, @discrete={0x32a, 0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rmdir(&(0x7f0000000000)='./file0/file0\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000443) socketpair$unix(0x1, 0x5, 0x0, 0x0) 11:02:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 11:02:39 executing program 5: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000240)=0x8) r0 = syz_open_dev$audion(0x0, 0x706, 0x301800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000640)={0x80000000, 0x0, 0x0, @discrete={0x32a, 0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rmdir(&(0x7f0000000000)='./file0/file0\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000443) socketpair$unix(0x1, 0x5, 0x0, 0x0) 11:02:39 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 11:02:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffc, 0x0) 11:02:39 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) [ 748.362458] audit: type=1804 audit(1543748559.637:394): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir204806509/syzkaller.PNamp8/416/memory.events" dev="sda1" ino=16593 res=1 11:02:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0xfffffffffffffffc, 0x0) [ 748.510242] audit: type=1800 audit(1543748559.647:395): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="memory.events" dev="sda1" ino=16593 res=0 [ 748.556376] device nr0 entered promiscuous mode 11:02:39 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:40 executing program 5: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000240)=0x8) r0 = syz_open_dev$audion(0x0, 0x706, 0x301800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000640)={0x80000000, 0x0, 0x0, @discrete={0x32a, 0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rmdir(&(0x7f0000000000)='./file0/file0\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000443) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 748.972973] audit: type=1804 audit(1543748560.247:396): pid=28775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir204806509/syzkaller.PNamp8/417/memory.events" dev="sda1" ino=16961 res=1 [ 748.998566] audit: type=1800 audit(1543748560.247:397): pid=28775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="memory.events" dev="sda1" ino=16961 res=0 11:02:40 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) 11:02:40 executing program 4: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) 11:02:40 executing program 3: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000240)=0x8) r0 = syz_open_dev$audion(0x0, 0x706, 0x301800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000640)={0x80000000, 0x0, 0x0, @discrete={0x32a, 0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rmdir(&(0x7f0000000000)='./file0/file0\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000443) socketpair$unix(0x1, 0x5, 0x0, 0x0) 11:02:40 executing program 5: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000240)=0x8) r0 = syz_open_dev$audion(0x0, 0x706, 0x301800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000640)={0x80000000, 0x0, 0x0, @discrete={0x32a, 0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rmdir(&(0x7f0000000000)='./file0/file0\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000443) socketpair$unix(0x1, 0x5, 0x0, 0x0) 11:02:40 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:40 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) [ 749.556633] audit: type=1804 audit(1543748560.837:398): pid=28789 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir204806509/syzkaller.PNamp8/418/memory.events" dev="sda1" ino=16689 res=1 [ 749.686922] device nr0 entered promiscuous mode [ 749.698777] audit: type=1800 audit(1543748560.867:399): pid=28789 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="memory.events" dev="sda1" ino=16689 res=0 11:02:41 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:41 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:41 executing program 3: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000240)=0x8) r0 = syz_open_dev$audion(0x0, 0x706, 0x301800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000640)={0x80000000, 0x0, 0x0, @discrete={0x32a, 0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rmdir(&(0x7f0000000000)='./file0/file0\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000443) socketpair$unix(0x1, 0x5, 0x0, 0x0) 11:02:41 executing program 4: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) 11:02:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:41 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:42 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) 11:02:42 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 750.768883] device nr0 entered promiscuous mode 11:02:42 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) 11:02:42 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:42 executing program 1: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0xd, 0x0, 0x709000, 0x0, 0x0, 0x0, 0x2}}) 11:02:42 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x4, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) keyctl$negate(0xd, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) 11:02:43 executing program 1: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0xd, 0x0, 0x709000, 0x0, 0x0, 0x0, 0x2}}) 11:02:43 executing program 4: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r1) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000780)={r2, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r3, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r7}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r8}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r0, &(0x7f0000000100)=0x5, 0x12) 11:02:43 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) 11:02:43 executing program 1: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0xd, 0x0, 0x709000, 0x0, 0x0, 0x0, 0x2}}) 11:02:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/88, 0x58}, {&(0x7f0000000180)=""/206, 0xce}], 0x2}}], 0x1, 0x0, 0x0) 11:02:43 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) 11:02:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000480)) ioctl$sock_FIOSETOWN(r1, 0xb701, &(0x7f0000004b00)) 11:02:43 executing program 1: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0xd, 0x0, 0x709000, 0x0, 0x0, 0x0, 0x2}}) 11:02:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) 11:02:43 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) 11:02:43 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) [ 752.476534] device nr0 entered promiscuous mode 11:02:43 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) write$binfmt_elf64(r2, 0x0, 0x0) 11:02:43 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) 11:02:44 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) 11:02:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) write$binfmt_elf64(r2, 0x0, 0x0) 11:02:44 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getrlimit(0x2, &(0x7f0000000280)) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev={0xac, 0x14, 0x14, 0xa0e2cfff00000000}, [0x0, 0x300000000000000, 0x20000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)={0x0, 0x0, 0x2080}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0xf9ac, 0x0, 0x6, 0x2b, &(0x7f0000000000)=""/43, 0x68, &(0x7f00000001c0)=""/104, 0xba, &(0x7f0000000380)=""/186}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x1600}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={0xff}, 0x8) 11:02:44 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) 11:02:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) write$binfmt_elf64(r2, 0x0, 0x0) 11:02:44 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) 11:02:44 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) write$binfmt_elf64(r2, 0x0, 0x0) 11:02:44 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) dup3(r0, r1, 0x0) 11:02:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x27}}) close(r2) close(r1) 11:02:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getrlimit(0x2, &(0x7f0000000280)) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev={0xac, 0x14, 0x14, 0xa0e2cfff00000000}, [0x0, 0x300000000000000, 0x20000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)={0x0, 0x0, 0x2080}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0xf9ac, 0x0, 0x6, 0x2b, &(0x7f0000000000)=""/43, 0x68, &(0x7f00000001c0)=""/104, 0xba, &(0x7f0000000380)=""/186}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x1600}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={0xff}, 0x8) 11:02:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:45 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000000000)={0x14, 0x27, 0xb01, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 11:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x7f, 0x10001}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/48, 0xfffffea9}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000ac0)=""/221, 0xdd, 0xff}, 0x7fff}, {{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f00000008c0)=""/51, 0x27}], 0x3, &(0x7f0000000f40)=""/161, 0xa1, 0x9}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000e80)=""/17, 0x11}, {&(0x7f00000012c0)=""/185, 0xb9}, {&(0x7f00000013c0)=""/157, 0x9d}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001480)=""/111, 0x6f}], 0x6, &(0x7f0000001940)=""/185, 0xb9, 0x7fffffff}, 0x9}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d, 0x1000000}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:02:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1800060, &(0x7f0000000340)={[{@noquota='noquota'}]}) 11:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000000000)={0x14, 0x27, 0xb01, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 754.331331] EXT4-fs (sda1): re-mounted. Opts: noquota, [ 754.381134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000000000)={0x14, 0x27, 0xb01, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 754.442117] EXT4-fs (sda1): re-mounted. Opts: noquota, [ 754.475993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 11:02:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) [ 754.596434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 754.665404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 754.690127] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 754.702100] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 11:02:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000000000)={0x14, 0x27, 0xb01, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 11:02:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x7f, 0x10001}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/48, 0xfffffea9}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000ac0)=""/221, 0xdd, 0xff}, 0x7fff}, {{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f00000008c0)=""/51, 0x27}], 0x3, &(0x7f0000000f40)=""/161, 0xa1, 0x9}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000e80)=""/17, 0x11}, {&(0x7f00000012c0)=""/185, 0xb9}, {&(0x7f00000013c0)=""/157, 0x9d}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001480)=""/111, 0x6f}], 0x6, &(0x7f0000001940)=""/185, 0xb9, 0x7fffffff}, 0x9}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d, 0x1000000}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 754.712588] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready [ 754.720455] IPv6: ADDRCONF(NETDEV_UP): wlan3: link is not ready [ 754.731370] IPv6: ADDRCONF(NETDEV_UP): wlan4: link is not ready 11:02:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x7f, 0x10001}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/48, 0xfffffea9}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000ac0)=""/221, 0xdd, 0xff}, 0x7fff}, {{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f00000008c0)=""/51, 0x27}], 0x3, &(0x7f0000000f40)=""/161, 0xa1, 0x9}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000e80)=""/17, 0x11}, {&(0x7f00000012c0)=""/185, 0xb9}, {&(0x7f00000013c0)=""/157, 0x9d}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001480)=""/111, 0x6f}], 0x6, &(0x7f0000001940)=""/185, 0xb9, 0x7fffffff}, 0x9}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d, 0x1000000}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 754.857376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 754.904972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 755.035688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 755.105408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:02:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getrlimit(0x2, &(0x7f0000000280)) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev={0xac, 0x14, 0x14, 0xa0e2cfff00000000}, [0x0, 0x300000000000000, 0x20000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)={0x0, 0x0, 0x2080}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0xf9ac, 0x0, 0x6, 0x2b, &(0x7f0000000000)=""/43, 0x68, &(0x7f00000001c0)=""/104, 0xba, &(0x7f0000000380)=""/186}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x1600}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={0xff}, 0x8) 11:02:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:47 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x7f, 0x10001}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/48, 0xfffffea9}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000ac0)=""/221, 0xdd, 0xff}, 0x7fff}, {{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f00000008c0)=""/51, 0x27}], 0x3, &(0x7f0000000f40)=""/161, 0xa1, 0x9}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000e80)=""/17, 0x11}, {&(0x7f00000012c0)=""/185, 0xb9}, {&(0x7f00000013c0)=""/157, 0x9d}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001480)=""/111, 0x6f}], 0x6, &(0x7f0000001940)=""/185, 0xb9, 0x7fffffff}, 0x9}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d, 0x1000000}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:02:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 11:02:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x7f, 0x10001}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/48, 0xfffffea9}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000ac0)=""/221, 0xdd, 0xff}, 0x7fff}, {{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f00000008c0)=""/51, 0x27}], 0x3, &(0x7f0000000f40)=""/161, 0xa1, 0x9}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000e80)=""/17, 0x11}, {&(0x7f00000012c0)=""/185, 0xb9}, {&(0x7f00000013c0)=""/157, 0x9d}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001480)=""/111, 0x6f}], 0x6, &(0x7f0000001940)=""/185, 0xb9, 0x7fffffff}, 0x9}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d, 0x1000000}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:02:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:47 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getrlimit(0x2, &(0x7f0000000280)) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev={0xac, 0x14, 0x14, 0xa0e2cfff00000000}, [0x0, 0x300000000000000, 0x20000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)={0x0, 0x0, 0x2080}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000240)={0xf9ac, 0x0, 0x6, 0x2b, &(0x7f0000000000)=""/43, 0x68, &(0x7f00000001c0)=""/104, 0xba, &(0x7f0000000380)=""/186}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x1600}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={0xff}, 0x8) 11:02:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) [ 756.681979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) [ 756.856708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 757.006855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 757.014639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:02:48 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x7f, 0x10001}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/48, 0xfffffea9}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000ac0)=""/221, 0xdd, 0xff}, 0x7fff}, {{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f00000008c0)=""/51, 0x27}], 0x3, &(0x7f0000000f40)=""/161, 0xa1, 0x9}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000e80)=""/17, 0x11}, {&(0x7f00000012c0)=""/185, 0xb9}, {&(0x7f00000013c0)=""/157, 0x9d}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001480)=""/111, 0x6f}], 0x6, &(0x7f0000001940)=""/185, 0xb9, 0x7fffffff}, 0x9}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d, 0x1000000}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:02:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x7f, 0x10001}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/48, 0xfffffea9}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000ac0)=""/221, 0xdd, 0xff}, 0x7fff}, {{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f00000008c0)=""/51, 0x27}], 0x3, &(0x7f0000000f40)=""/161, 0xa1, 0x9}, 0x4}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000e80)=""/17, 0x11}, {&(0x7f00000012c0)=""/185, 0xb9}, {&(0x7f00000013c0)=""/157, 0x9d}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001480)=""/111, 0x6f}], 0x6, &(0x7f0000001940)=""/185, 0xb9, 0x7fffffff}, 0x9}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d, 0x1000000}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 758.019273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 758.030994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:49 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:49 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:49 executing program 1: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) [ 758.323172] print_req_error: I/O error, dev loop3, sector 0 [ 758.329146] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 758.360092] squashfs: SQUASHFS error: unable to read squashfs_super_block [ 758.620403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 758.627738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.637676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.646694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.664700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 758.673000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 758.681101] device team0 left promiscuous mode [ 758.686311] device team_slave_0 left promiscuous mode [ 758.691778] device team_slave_1 left promiscuous mode [ 758.697436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.704865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.717224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.725335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.733750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.740976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.751413] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 758.759103] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 11:02:50 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) [ 758.766844] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready [ 758.777148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 758.784353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.795005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.804124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:02:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) [ 759.043401] print_req_error: I/O error, dev loop3, sector 0 [ 759.049683] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 759.065977] squashfs: SQUASHFS error: unable to read squashfs_super_block [ 759.567516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:50 executing program 1: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:50 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:50 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) [ 760.221516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 760.240783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 760.252873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 760.260426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 760.277508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 760.284995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 760.295900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 760.304607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 760.321402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:51 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) [ 760.329289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 760.339737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 760.349156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:02:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) [ 760.777657] print_req_error: I/O error, dev loop3, sector 0 [ 760.783796] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 760.808573] squashfs: SQUASHFS error: unable to read squashfs_super_block 11:02:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:52 executing program 1: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) [ 761.118726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:52 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)=0xfffffffffffff801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) fremovexattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0, 0x8}, &(0x7f0000000380)=0x8) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) [ 761.645962] print_req_error: I/O error, dev loop3, sector 0 [ 761.651889] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 761.662792] squashfs: SQUASHFS error: unable to read squashfs_super_block [ 761.690629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 761.698115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 761.709175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 761.718307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:02:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) [ 761.797019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 761.812317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 761.899496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 761.917636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:02:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 11:02:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 11:02:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 11:02:53 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000003c0)=0x98) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000580), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz'}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) recvfrom(r0, &(0x7f0000000680)=""/60, 0x3c, 0x0, 0x0, 0x0) 11:02:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) [ 762.519343] print_req_error: I/O error, dev loop3, sector 0 [ 762.525520] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 762.535230] squashfs: SQUASHFS error: unable to read squashfs_super_block 11:02:53 executing program 0: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) [ 762.906264] 9pnet: Insufficient options for proto=fd [ 762.945309] 9pnet: Insufficient options for proto=fd 11:02:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0x0, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0x0, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c7200700851d0000006b8f31242ad4f3f3f00d006e83ce5dd41213a39dd2f4cb4db6cb0a04500c7c1f53"]) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0xffffffeb}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x376}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0, 0x8d02000000000000}, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000600)='squashfs\x00', 0xc0ed0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r2, &(0x7f0000000bc0)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x0) 11:02:54 executing program 0: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 11:02:54 executing program 4: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 11:02:54 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 11:02:54 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000003c0)=0x98) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000580), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz'}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) recvfrom(r0, &(0x7f0000000680)=""/60, 0x3c, 0x0, 0x0, 0x0) 11:02:54 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000003c0)=0x98) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000580), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz'}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) recvfrom(r0, &(0x7f0000000680)=""/60, 0x3c, 0x0, 0x0, 0x0) [ 763.284581] 9pnet: Insufficient options for proto=fd [ 763.292010] 9pnet: Insufficient options for proto=fd 11:02:54 executing program 0: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) [ 763.376080] 9pnet: Insufficient options for proto=fd 11:02:54 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 11:02:54 executing program 4: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) [ 763.662816] 9pnet: Insufficient options for proto=fd 11:02:55 executing program 0: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) [ 763.761094] 9pnet: Insufficient options for proto=fd [ 763.803038] 9pnet: Insufficient options for proto=fd 11:02:55 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 11:02:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 11:02:55 executing program 4: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) ioprio_get$uid(0x3, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)=""/177, 0xb1) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000004c0)=""/79) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000010, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@euid_lt={'euid<'}}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) [ 763.976729] 9pnet: Insufficient options for proto=fd 11:02:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 764.204334] 9pnet: Insufficient options for proto=fd 11:02:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000003c0)=0x98) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000580), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz'}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) recvfrom(r0, &(0x7f0000000680)=""/60, 0x3c, 0x0, 0x0, 0x0) 11:02:55 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) read$eventfd(r0, 0x0, 0x0) 11:02:55 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000003c0)=0x98) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000580), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz'}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) recvfrom(r0, &(0x7f0000000680)=""/60, 0x3c, 0x0, 0x0, 0x0) [ 764.313434] 9pnet: Insufficient options for proto=fd 11:02:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 11:02:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0099b2650d", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xffffffbf) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff34, &(0x7f0000000a00)=[{&(0x7f00000013c0)=""/4096, 0xffffff69}], 0x1}}], 0x3fffffffffffea5, 0x0, 0x0) 11:02:55 executing program 4: getpeername(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0x300, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) 11:02:55 executing program 4: getpeername(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0x300, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) 11:02:55 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) read$eventfd(r0, 0x0, 0x0) 11:02:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 11:02:56 executing program 4: getpeername(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0x300, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) 11:02:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000020058", 0x1f}], 0x1) 11:02:56 executing program 4: getpeername(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0x300, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) 11:02:56 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000003c0)=0x98) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000580), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz'}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) recvfrom(r0, &(0x7f0000000680)=""/60, 0x3c, 0x0, 0x0, 0x0) 11:02:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 11:02:56 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000003c0)=0x98) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000580), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz'}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) recvfrom(r0, &(0x7f0000000680)=""/60, 0x3c, 0x0, 0x0, 0x0) 11:02:56 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) read$eventfd(r0, 0x0, 0x0) 11:02:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000020058", 0x1f}], 0x1) 11:02:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 11:02:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0099b2650d", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xffffffbf) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff34, &(0x7f0000000a00)=[{&(0x7f00000013c0)=""/4096, 0xffffff69}], 0x1}}], 0x3fffffffffffea5, 0x0, 0x0) 11:02:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000020058", 0x1f}], 0x1) 11:02:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 11:02:56 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) read$eventfd(r0, 0x0, 0x0) 11:02:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 11:02:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000020058", 0x1f}], 0x1) 11:02:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1}, {@in6, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'lrw(cast6)\x00'}}}]}, 0x180}}, 0x0) 11:02:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=""/4096, 0x1000}}, {{&(0x7f0000006ec0)=@nfc, 0x80, &(0x7f0000007f40)=[{0xffffffffffffffff}], 0x1, &(0x7f0000007f80)=""/174, 0xae}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x2000000000000067, 0x0) 11:02:57 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000400)=""/163) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)={r4, r5+30000000}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r6 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="04ccf7b1fc0a0000000ea4c38200b82af76b0e30b8e31d4d552ace47cfc919dc9eaad09c26529f2364b09fadafc576119e294d177ec3c49c4c89918a00a4be47642acfa2056e9123", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r7, 0xffff}, &(0x7f0000000280)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f00000002c0)) ftruncate(r6, 0x8007ffc) sendfile(r1, r6, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) 11:02:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x14003d, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="817ac388b12f5258dcd9f0d1802d2d094bd0d0e7855bb65587033e35e4942bc9d0fb44b760ad4eb4f1c0e1b6b6018e46737c9f3ef43c0032446705d88e599dcf7b92381a"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) dup2(r7, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100000c81, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="445bdb64b9a96074"], 0x1}}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01010000000000000000030000001400010008000100000000000800040000000000"], 0x1}}, 0x0) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000880), 0x7144e2a) 11:02:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1}, {@in6, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'lrw(cast6)\x00'}}}]}, 0x180}}, 0x0) 11:02:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=""/4096, 0x1000}}, {{&(0x7f0000006ec0)=@nfc, 0x80, &(0x7f0000007f40)=[{0xffffffffffffffff}], 0x1, &(0x7f0000007f80)=""/174, 0xae}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x2000000000000067, 0x0) 11:02:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0099b2650d", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xffffffbf) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff34, &(0x7f0000000a00)=[{&(0x7f00000013c0)=""/4096, 0xffffff69}], 0x1}}], 0x3fffffffffffea5, 0x0, 0x0) 11:02:57 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=""/4096, 0x1000}}, {{&(0x7f0000006ec0)=@nfc, 0x80, &(0x7f0000007f40)=[{0xffffffffffffffff}], 0x1, &(0x7f0000007f80)=""/174, 0xae}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x2000000000000067, 0x0) 11:02:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1}, {@in6, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'lrw(cast6)\x00'}}}]}, 0x180}}, 0x0) [ 766.305004] QAT: Invalid ioctl [ 766.322909] bond0: Releasing backup interface bond_slave_1 11:02:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=""/4096, 0x1000}}, {{&(0x7f0000006ec0)=@nfc, 0x80, &(0x7f0000007f40)=[{0xffffffffffffffff}], 0x1, &(0x7f0000007f80)=""/174, 0xae}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x2000000000000067, 0x0) 11:02:57 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=""/4096, 0x1000}}, {{&(0x7f0000006ec0)=@nfc, 0x80, &(0x7f0000007f40)=[{0xffffffffffffffff}], 0x1, &(0x7f0000007f80)=""/174, 0xae}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x2000000000000067, 0x0) [ 766.416716] QAT: Invalid ioctl 11:02:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1}, {@in6, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'lrw(cast6)\x00'}}}]}, 0x180}}, 0x0) 11:02:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=""/4096, 0x1000}}, {{&(0x7f0000006ec0)=@nfc, 0x80, &(0x7f0000007f40)=[{0xffffffffffffffff}], 0x1, &(0x7f0000007f80)=""/174, 0xae}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x2000000000000067, 0x0) 11:02:57 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=""/4096, 0x1000}}, {{&(0x7f0000006ec0)=@nfc, 0x80, &(0x7f0000007f40)=[{0xffffffffffffffff}], 0x1, &(0x7f0000007f80)=""/174, 0xae}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x2000000000000067, 0x0) 11:02:58 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000400)=""/163) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)={r4, r5+30000000}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r6 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="04ccf7b1fc0a0000000ea4c38200b82af76b0e30b8e31d4d552ace47cfc919dc9eaad09c26529f2364b09fadafc576119e294d177ec3c49c4c89918a00a4be47642acfa2056e9123", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r7, 0xffff}, &(0x7f0000000280)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f00000002c0)) ftruncate(r6, 0x8007ffc) sendfile(r1, r6, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) 11:02:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:02:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xa47, 0x4) write(r0, &(0x7f0000000200)="f7d7317b1dc5f950f52d23e0786e4d329fc089b931aa8588fdc4f1ecba84b963618d21b85d49eea46ccc2874c2ef4eacef893059ec57bd8f35fe8101dd54566b2660919f84b02e624b3e3212e9bc887eb2c9a0956607a67787ef6f515c85734777a04f08bf43240edf83dfec4913b49777a35a39b975c04e137a8432689f64306c5e", 0x82) 11:02:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) [ 766.736115] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 2, id = 0 [ 766.747651] QAT: Invalid ioctl [ 766.758751] QAT: Invalid ioctl [ 766.892825] QAT: Invalid ioctl [ 766.955257] QAT: Invalid ioctl 11:02:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xa47, 0x4) write(r0, &(0x7f0000000200)="f7d7317b1dc5f950f52d23e0786e4d329fc089b931aa8588fdc4f1ecba84b963618d21b85d49eea46ccc2874c2ef4eacef893059ec57bd8f35fe8101dd54566b2660919f84b02e624b3e3212e9bc887eb2c9a0956607a67787ef6f515c85734777a04f08bf43240edf83dfec4913b49777a35a39b975c04e137a8432689f64306c5e", 0x82) 11:02:58 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000400)=""/163) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)={r4, r5+30000000}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r6 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="04ccf7b1fc0a0000000ea4c38200b82af76b0e30b8e31d4d552ace47cfc919dc9eaad09c26529f2364b09fadafc576119e294d177ec3c49c4c89918a00a4be47642acfa2056e9123", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r7, 0xffff}, &(0x7f0000000280)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f00000002c0)) ftruncate(r6, 0x8007ffc) sendfile(r1, r6, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) 11:02:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x14003d, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="817ac388b12f5258dcd9f0d1802d2d094bd0d0e7855bb65587033e35e4942bc9d0fb44b760ad4eb4f1c0e1b6b6018e46737c9f3ef43c0032446705d88e599dcf7b92381a"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) dup2(r7, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100000c81, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="445bdb64b9a96074"], 0x1}}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01010000000000000000030000001400010008000100000000000800040000000000"], 0x1}}, 0x0) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000880), 0x7144e2a) 11:02:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:02:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0099b2650d", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xffffffbf) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff34, &(0x7f0000000a00)=[{&(0x7f00000013c0)=""/4096, 0xffffff69}], 0x1}}], 0x3fffffffffffea5, 0x0, 0x0) 11:02:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) [ 767.131644] QAT: Invalid ioctl 11:02:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xa47, 0x4) write(r0, &(0x7f0000000200)="f7d7317b1dc5f950f52d23e0786e4d329fc089b931aa8588fdc4f1ecba84b963618d21b85d49eea46ccc2874c2ef4eacef893059ec57bd8f35fe8101dd54566b2660919f84b02e624b3e3212e9bc887eb2c9a0956607a67787ef6f515c85734777a04f08bf43240edf83dfec4913b49777a35a39b975c04e137a8432689f64306c5e", 0x82) 11:02:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) [ 767.226177] QAT: Invalid ioctl 11:02:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x14003d, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="817ac388b12f5258dcd9f0d1802d2d094bd0d0e7855bb65587033e35e4942bc9d0fb44b760ad4eb4f1c0e1b6b6018e46737c9f3ef43c0032446705d88e599dcf7b92381a"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) dup2(r7, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100000c81, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="445bdb64b9a96074"], 0x1}}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01010000000000000000030000001400010008000100000000000800040000000000"], 0x1}}, 0x0) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000880), 0x7144e2a) 11:02:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xa47, 0x4) write(r0, &(0x7f0000000200)="f7d7317b1dc5f950f52d23e0786e4d329fc089b931aa8588fdc4f1ecba84b963618d21b85d49eea46ccc2874c2ef4eacef893059ec57bd8f35fe8101dd54566b2660919f84b02e624b3e3212e9bc887eb2c9a0956607a67787ef6f515c85734777a04f08bf43240edf83dfec4913b49777a35a39b975c04e137a8432689f64306c5e", 0x82) 11:02:58 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000400)=""/163) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)={r4, r5+30000000}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r6 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="04ccf7b1fc0a0000000ea4c38200b82af76b0e30b8e31d4d552ace47cfc919dc9eaad09c26529f2364b09fadafc576119e294d177ec3c49c4c89918a00a4be47642acfa2056e9123", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r7, 0xffff}, &(0x7f0000000280)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f00000002c0)) ftruncate(r6, 0x8007ffc) sendfile(r1, r6, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) 11:02:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) [ 767.542681] QAT: Invalid ioctl [ 767.655833] QAT: Invalid ioctl 11:02:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:02:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x14003d, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="817ac388b12f5258dcd9f0d1802d2d094bd0d0e7855bb65587033e35e4942bc9d0fb44b760ad4eb4f1c0e1b6b6018e46737c9f3ef43c0032446705d88e599dcf7b92381a"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) dup2(r7, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100000c81, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="445bdb64b9a96074"], 0x1}}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01010000000000000000030000001400010008000100000000000800040000000000"], 0x1}}, 0x0) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000880), 0x7144e2a) 11:02:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:02:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:02:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:02:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:02:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:02:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0xffffffffffff7fff, 0x10}, &(0x7f0000000480)=0xc) sendto(r2, &(0x7f0000000240)="a29e3c32ed66bf9f307dbf6bd90b883893f803890d75585230c25af644397917cbbd820a506e73d2616f214b707165b19a91db45a8b50c09dfd4c1317a5ef3455c63bb2643e05a3d70dd1de4140d03c1c82bf7f17d6ee2d4582267f69a58ab9d0f30ef3915699e04c3b2bbbcd17f4c0787569cd246d54d41b458a01a82c057eb24e22930aa7584", 0x87, 0x1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in, @in={0x2, 0x4e21, @local}], 0x20) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0x200080) 11:03:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:03:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:03:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:03:00 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000400)=""/163) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)={r4, r5+30000000}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r6 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="04ccf7b1fc0a0000000ea4c38200b82af76b0e30b8e31d4d552ace47cfc919dc9eaad09c26529f2364b09fadafc576119e294d177ec3c49c4c89918a00a4be47642acfa2056e9123", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r7, 0xffff}, &(0x7f0000000280)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f00000002c0)) ftruncate(r6, 0x8007ffc) sendfile(r1, r6, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) 11:03:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x14003d, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="817ac388b12f5258dcd9f0d1802d2d094bd0d0e7855bb65587033e35e4942bc9d0fb44b760ad4eb4f1c0e1b6b6018e46737c9f3ef43c0032446705d88e599dcf7b92381a"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) dup2(r7, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100000c81, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="445bdb64b9a96074"], 0x1}}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01010000000000000000030000001400010008000100000000000800040000000000"], 0x1}}, 0x0) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000880), 0x7144e2a) 11:03:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:03:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, 0x0, &(0x7f0000000340)) [ 769.062277] QAT: Invalid ioctl [ 769.159069] bond0: Releasing backup interface bond_slave_1 [ 769.201870] syz-executor0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 769.218783] QAT: Invalid ioctl 11:03:00 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x1ff, 0x5, 0x4, 0x0, {0x77359400}, {0x7, 0x2, 0x8, 0x5, 0x0, 0x9b, "9f586346"}, 0x7ff, 0x1, @fd=r0, 0x4}) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) accept$alg(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="050000003f000704020000000200"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 11:03:00 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 11:03:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000140), 0x4) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 11:03:00 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 11:03:00 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:00 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 11:03:00 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 11:03:00 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 11:03:01 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000400)=""/163) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)={r4, r5+30000000}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r6 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="04ccf7b1fc0a0000000ea4c38200b82af76b0e30b8e31d4d552ace47cfc919dc9eaad09c26529f2364b09fadafc576119e294d177ec3c49c4c89918a00a4be47642acfa2056e9123", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r7, 0xffff}, &(0x7f0000000280)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f00000002c0)) ftruncate(r6, 0x8007ffc) sendfile(r1, r6, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) [ 769.777778] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 2, id = 0 11:03:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x14003d, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="817ac388b12f5258dcd9f0d1802d2d094bd0d0e7855bb65587033e35e4942bc9d0fb44b760ad4eb4f1c0e1b6b6018e46737c9f3ef43c0032446705d88e599dcf7b92381a"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) dup2(r7, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100000c81, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="445bdb64b9a96074"], 0x1}}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01010000000000000000030000001400010008000100000000000800040000000000"], 0x1}}, 0x0) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000880), 0x7144e2a) 11:03:01 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 11:03:01 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, 0x0, &(0x7f0000000340)) 11:03:01 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) [ 769.886069] QAT: Invalid ioctl 11:03:01 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) [ 770.008054] QAT: Invalid ioctl 11:03:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, 0x0, &(0x7f0000000340)) 11:03:01 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x14003d, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="817ac388b12f5258dcd9f0d1802d2d094bd0d0e7855bb65587033e35e4942bc9d0fb44b760ad4eb4f1c0e1b6b6018e46737c9f3ef43c0032446705d88e599dcf7b92381a"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) dup2(r7, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100000c81, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="445bdb64b9a96074"], 0x1}}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01010000000000000000030000001400010008000100000000000800040000000000"], 0x1}}, 0x0) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000880), 0x7144e2a) 11:03:01 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:01 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000400)=""/163) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)={r4, r5+30000000}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r6 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="04ccf7b1fc0a0000000ea4c38200b82af76b0e30b8e31d4d552ace47cfc919dc9eaad09c26529f2364b09fadafc576119e294d177ec3c49c4c89918a00a4be47642acfa2056e9123", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r7, 0xffff}, &(0x7f0000000280)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f00000002c0)) ftruncate(r6, 0x8007ffc) sendfile(r1, r6, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) 11:03:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, 0x0, &(0x7f0000000340)) 11:03:01 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:01 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) [ 770.403474] QAT: Invalid ioctl [ 770.500463] QAT: Invalid ioctl 11:03:01 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 11:03:01 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 11:03:01 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:01 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:02 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0003000000f3000000d0010c0005000000000010000000"], 0x2c}}, 0x0) 11:03:02 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 11:03:02 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) [ 770.873900] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 770.901360] netlink: 'syz-executor1': attribute type 3 has an invalid length. 11:03:02 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 11:03:02 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(0x0, 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x0, 'fo\x00', 0x23}, {@dev, 0x0, 0x0, 0x2, 0x0, 0x20}}, 0x44) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000580), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss], 0x1) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x4) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r4, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) [ 770.942696] netlink: 'syz-executor1': attribute type 5 has an invalid length. [ 770.980940] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 11:03:02 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 11:03:02 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) dup(0xffffffffffffff9c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0x5}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) 11:03:02 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 11:03:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0003000000f3000000d0010c0005000000000010000000"], 0x2c}}, 0x0) 11:03:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) syz_open_pts(0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x541f, &(0x7f0000000080)) 11:03:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xf601}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 771.253228] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 771.275240] tty_tiocsserial: 'syz-executor5' is using deprecated serial flags (with no effect): 00000200 11:03:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) syz_open_pts(0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x541f, &(0x7f0000000080)) 11:03:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffff7ffff, 0x44f, &(0x7f00001a7f05)=""/251}, 0x48) [ 771.305633] netlink: 'syz-executor1': attribute type 5 has an invalid length. 11:03:02 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 11:03:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 11:03:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xf601}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 11:03:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0003000000f3000000d0010c0005000000000010000000"], 0x2c}}, 0x0) [ 771.454745] tty_tiocsserial: 'syz-executor5' is using deprecated serial flags (with no effect): 00000100 11:03:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) syz_open_pts(0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x541f, &(0x7f0000000080)) 11:03:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffff7ffff, 0x44f, &(0x7f00001a7f05)=""/251}, 0x48) [ 771.574261] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 11:03:02 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 11:03:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xf601}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 771.634397] netlink: 'syz-executor1': attribute type 3 has an invalid length. 11:03:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 771.683528] netlink: 'syz-executor1': attribute type 5 has an invalid length. 11:03:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) syz_open_pts(0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x541f, &(0x7f0000000080)) [ 771.732916] tty_tiocsserial: 'syz-executor5' is using deprecated serial flags (with no effect): 00000400 11:03:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffff7ffff, 0x44f, &(0x7f00001a7f05)=""/251}, 0x48) 11:03:03 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 11:03:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0003000000f3000000d0010c0005000000000010000000"], 0x2c}}, 0x0) 11:03:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xf601}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 771.865807] tty_tiocsserial: 'syz-executor5' is using deprecated serial flags (with no effect): 00000600 11:03:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffff7ffff, 0x44f, &(0x7f00001a7f05)=""/251}, 0x48) 11:03:03 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 11:03:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, &(0x7f0000001ac0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0x40}}, 0x0) [ 772.003615] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 11:03:03 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) listen(r1, 0x5) [ 772.067383] netlink: 'syz-executor1': attribute type 3 has an invalid length. 11:03:03 executing program 2: r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x82, &(0x7f0000000040), 0x0) [ 772.122774] netlink: 'syz-executor1': attribute type 5 has an invalid length. 11:03:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback, @dev}}}, @realm={'realm\x00', 0x2f}]}, [@arpreply={'arpreply\x00', 0x10, {{@local}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2b0) 11:03:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, &(0x7f0000001ac0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0x40}}, 0x0) 11:03:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback, @dev}}}, @realm={'realm\x00', 0x2f}]}, [@arpreply={'arpreply\x00', 0x10, {{@local}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2b0) 11:03:03 executing program 2: r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x82, &(0x7f0000000040), 0x0) 11:03:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, &(0x7f0000001ac0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0x40}}, 0x0) 11:03:03 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x10000, 0x4) bind$bt_rfcomm(r2, &(0x7f0000000440)={0x1f, {0x0, 0x291a, 0x3, 0xfc}, 0x1}, 0xa) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000001640)=""/50) fchdir(r2) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap='cache=mm%p'}]}}) socket$inet6(0xa, 0x1000000000001, 0x0) getpid() sched_setscheduler(0x0, 0x1000000000000005, &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x89a1) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000040)='\x00', 0x1, 0x1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) connect(0xffffffffffffffff, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x8000, @mcast1, 0x200}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xf}, 0xa5}]}, &(0x7f0000000340)=0x10) 11:03:03 executing program 3: readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/165, 0xa5}], 0x3) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 11:03:03 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) listen(r1, 0x5) 11:03:03 executing program 2: r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x82, &(0x7f0000000040), 0x0) 11:03:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback, @dev}}}, @realm={'realm\x00', 0x2f}]}, [@arpreply={'arpreply\x00', 0x10, {{@local}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2b0) 11:03:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, &(0x7f0000001ac0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0x40}}, 0x0) 11:03:03 executing program 3: readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/165, 0xa5}], 0x3) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) [ 772.615189] 9p: Unknown Cache mode mm%p 11:03:03 executing program 2: r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x82, &(0x7f0000000040), 0x0) 11:03:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback, @dev}}}, @realm={'realm\x00', 0x2f}]}, [@arpreply={'arpreply\x00', 0x10, {{@local}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2b0) 11:03:04 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) listen(r1, 0x5) 11:03:04 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) listen(r1, 0x5) 11:03:04 executing program 3: readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/165, 0xa5}], 0x3) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 11:03:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5351, &(0x7f00000001c0)={0x10}) 11:03:04 executing program 2: r0 = creat(&(0x7f0000000140)='./control\x00', 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007b6ff8), 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:04 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2000) 11:03:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5351, &(0x7f00000001c0)={0x10}) 11:03:04 executing program 3: readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/165, 0xa5}], 0x3) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 11:03:04 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) listen(r1, 0x5) 11:03:04 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) listen(r1, 0x5) 11:03:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000001200)='/dev/midi#\x00', 0x0, 0x1) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x3e7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000002680)={0x0, 0x8}, 0x2) 11:03:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5351, &(0x7f00000001c0)={0x10}) [ 773.244776] device nr0 entered promiscuous mode 11:03:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5351, &(0x7f00000001c0)={0x10}) 11:03:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000001200)='/dev/midi#\x00', 0x0, 0x1) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x3e7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000002680)={0x0, 0x8}, 0x2) 11:03:04 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) listen(r1, 0x5) 11:03:04 executing program 4: r0 = inotify_init() inotify_rm_watch(r0, 0x0) 11:03:05 executing program 2: r0 = creat(&(0x7f0000000140)='./control\x00', 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007b6ff8), 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4068aea3, &(0x7f0000000040)) 11:03:05 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:05 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x1, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/35}, 0x2b, 0x0, 0x0) 11:03:05 executing program 0: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x4}) 11:03:05 executing program 0: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x4}) 11:03:05 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x1, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/35}, 0x2b, 0x0, 0x0) 11:03:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4068aea3, &(0x7f0000000040)) 11:03:05 executing program 0: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x4}) 11:03:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000001200)='/dev/midi#\x00', 0x0, 0x1) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x3e7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000002680)={0x0, 0x8}, 0x2) 11:03:05 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x1, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/35}, 0x2b, 0x0, 0x0) 11:03:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4068aea3, &(0x7f0000000040)) 11:03:06 executing program 2: r0 = creat(&(0x7f0000000140)='./control\x00', 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007b6ff8), 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:06 executing program 0: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x4}) 11:03:06 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:06 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x1, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/35}, 0x2b, 0x0, 0x0) 11:03:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4068aea3, &(0x7f0000000040)) 11:03:06 executing program 0: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x4}) 11:03:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000001200)='/dev/midi#\x00', 0x0, 0x1) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x3e7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000002680)={0x0, 0x8}, 0x2) 11:03:06 executing program 0: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x4}) 11:03:06 executing program 4: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:06 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:06 executing program 0: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x4}) 11:03:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:03:07 executing program 2: r0 = creat(&(0x7f0000000140)='./control\x00', 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007b6ff8), 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:03:07 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000007c0), 0x24, 0x0) 11:03:07 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:03:07 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000007c0), 0x24, 0x0) 11:03:07 executing program 4: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:07 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:03:07 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000007c0), 0x24, 0x0) 11:03:08 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000007c0), 0x24, 0x0) 11:03:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:03:08 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000007c0), 0x24, 0x0) 11:03:08 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000007c0), 0x24, 0x0) 11:03:08 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:03:08 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:08 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000007c0), 0x24, 0x0) 11:03:08 executing program 0: r0 = socket$inet6(0xa, 0x40000000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) close(r1) 11:03:09 executing program 4: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:03:09 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0xfffffffffffffe01) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@mss, @mss], 0x2) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r4 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8961}, 0x1c) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1db, 0x0) dup2(r1, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) recvfrom$llc(r2, &(0x7f00000004c0)=""/119, 0x77, 0x0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x5, 0x80000001, 0x4, @remote}, 0x10) 11:03:09 executing program 0: r0 = socket$inet6(0xa, 0x40000000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) close(r1) 11:03:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045431, 0xfffffffffffffff9) 11:03:09 executing program 0: r0 = socket$inet6(0xa, 0x40000000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) close(r1) 11:03:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x2d}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76657400000000000000000400", 0x43732e5398416f1a}) 11:03:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045431, 0xfffffffffffffff9) 11:03:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:03:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045431, 0xfffffffffffffff9) 11:03:09 executing program 0: r0 = socket$inet6(0xa, 0x40000000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) close(r1) 11:03:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x2d}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76657400000000000000000400", 0x43732e5398416f1a}) 11:03:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000140)=0x1a, 0x4) 11:03:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)={0x14, 0x28, 0x829, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 11:03:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045431, 0xfffffffffffffff9) 11:03:10 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0xffffffffffff7ffd, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0xc, 0x8, [@typed={0x8, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:03:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x2d}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76657400000000000000000400", 0x43732e5398416f1a}) 11:03:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffff9}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 778.906614] netlink: 'syz-executor1': attribute type 8 has an invalid length. 11:03:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000140)=0x1a, 0x4) 11:03:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)={0x14, 0x28, 0x829, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 11:03:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000048c0)={&(0x7f0000000000), 0xc, &(0x7f0000004880)={&(0x7f0000003380)=@updsa={0x140, 0x1a, 0x311, 0x0, 0x0, {{@in6=@mcast1, @in6=@ipv4={[], [], @remote}}, {@in, 0x0, 0x32}, @in6=@ipv4={[], [], @local}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 11:03:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000140)=0x1a, 0x4) 11:03:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x2d}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76657400000000000000000400", 0x43732e5398416f1a}) [ 779.115902] netlink: 'syz-executor1': attribute type 8 has an invalid length. 11:03:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000140)=0x1a, 0x4) 11:03:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000048c0)={&(0x7f0000000000), 0xc, &(0x7f0000004880)={&(0x7f0000003380)=@updsa={0x140, 0x1a, 0x311, 0x0, 0x0, {{@in6=@mcast1, @in6=@ipv4={[], [], @remote}}, {@in, 0x0, 0x32}, @in6=@ipv4={[], [], @local}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 11:03:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)={0x14, 0x28, 0x829, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 11:03:10 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0xffffffffffff7ffd, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0xc, 0x8, [@typed={0x8, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:03:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000048c0)={&(0x7f0000000000), 0xc, &(0x7f0000004880)={&(0x7f0000003380)=@updsa={0x140, 0x1a, 0x311, 0x0, 0x0, {{@in6=@mcast1, @in6=@ipv4={[], [], @remote}}, {@in, 0x0, 0x32}, @in6=@ipv4={[], [], @local}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 11:03:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)={0x14, 0x28, 0x829, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 779.461474] netlink: 'syz-executor1': attribute type 8 has an invalid length. 11:03:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffff9}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:03:11 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000006ff00fd4354c00711000022ddb651a6cc5300010423dcffdf00", 0x1f) 11:03:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000048c0)={&(0x7f0000000000), 0xc, &(0x7f0000004880)={&(0x7f0000003380)=@updsa={0x140, 0x1a, 0x311, 0x0, 0x0, {{@in6=@mcast1, @in6=@ipv4={[], [], @remote}}, {@in, 0x0, 0x32}, @in6=@ipv4={[], [], @local}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 11:03:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x17) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r1, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:03:11 executing program 3: alarm(0x8) alarm(0x0) 11:03:11 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0xffffffffffff7ffd, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0xc, 0x8, [@typed={0x8, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:03:11 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000006ff00fd4354c00711000022ddb651a6cc5300010423dcffdf00", 0x1f) [ 780.118779] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. [ 780.160158] netlink: 'syz-executor1': attribute type 8 has an invalid length. 11:03:11 executing program 3: alarm(0x8) alarm(0x0) 11:03:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffff9}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:03:11 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000006ff00fd4354c00711000022ddb651a6cc5300010423dcffdf00", 0x1f) [ 780.245558] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. 11:03:11 executing program 3: alarm(0x8) alarm(0x0) [ 780.325323] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. 11:03:11 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0xffffffffffff7ffd, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0xc, 0x8, [@typed={0x8, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 780.473540] netlink: 'syz-executor1': attribute type 8 has an invalid length. 11:03:12 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000006ff00fd4354c00711000022ddb651a6cc5300010423dcffdf00", 0x1f) 11:03:12 executing program 3: alarm(0x8) alarm(0x0) 11:03:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffff9}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 780.994833] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. 11:03:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x17) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r1, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:03:12 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x0, 0x1, 0x0, "d09e18e149ec4ed4ed8cd9e71ad72fc3fe703789026cb9898eb49d79433f9fc1"}) 11:03:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x9) 11:03:12 executing program 5: add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="d13ff3d776", 0x0) 11:03:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffff9}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:03:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x485, 0x11e57ed0]}) 11:03:12 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x0, 0x1, 0x0, "d09e18e149ec4ed4ed8cd9e71ad72fc3fe703789026cb9898eb49d79433f9fc1"}) 11:03:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x9) 11:03:12 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x0, 0x1, 0x0, "d09e18e149ec4ed4ed8cd9e71ad72fc3fe703789026cb9898eb49d79433f9fc1"}) 11:03:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x9) 11:03:12 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x0, 0x1, 0x0, "d09e18e149ec4ed4ed8cd9e71ad72fc3fe703789026cb9898eb49d79433f9fc1"}) 11:03:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x485, 0x11e57ed0]}) 11:03:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x9) 11:03:13 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, 0x0) 11:03:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x17) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r1, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:03:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffff9}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:03:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffff9}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:03:13 executing program 3: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 11:03:13 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, 0x0) 11:03:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x485, 0x11e57ed0]}) 11:03:13 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, 0x0) 11:03:13 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, 0x0) 11:03:13 executing program 3: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 11:03:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x485, 0x11e57ed0]}) 11:03:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000001c0)={0xfffffffffffffffe, 0x80000, @ioapic={0x5}}) 11:03:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x17) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r1, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 782.488749] Disabled LAPIC found during irq injection 11:03:13 executing program 3: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 11:03:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000001c0)={0xfffffffffffffffe, 0x80000, @ioapic={0x5}}) [ 782.840880] Disabled LAPIC found during irq injection 11:03:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x7, 0xc1fc}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 11:03:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000001c0)={0xfffffffffffffffe, 0x80000, @ioapic={0x5}}) 11:03:14 executing program 3: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 11:03:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000001c0)={0xfffffffffffffffe, 0x80000, @ioapic={0x5}}) 11:03:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xf0ffff}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xff8e}}, 0x0) 11:03:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x7, 0xc1fc}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 783.053395] Disabled LAPIC found during irq injection [ 783.088287] Disabled LAPIC found during irq injection 11:03:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"99306cc6514e1ece57127e4ee0175e4d913680790c40ef3804375efcee8aaed04f27ab3f29cc2ced16b111597693301f40c46806fcf08a2e316ef8d5b0bf4e47bad3648eb8588b0f80db55c9e83dc30fc68b13ad0847ad43385e73882ae61f477f7fcb44d31399633c3642a3b8554e8b85acceca44d8a68c2aeb3f6de7b5cb9bbf0df92b7b7b6233b3d55a171e331816e63907784aebbbcc9b4909b966ba835f6f24619b2fa9b5626e4a736bcc8ebd71b82d633781b15244f1685d0720bebe368a24681d97172a812420421048b421c018cdf982e5f7156d241859bfc571b63ce56a28e16199e99f40917afc8701cf252243ce1980a31ac840d4ef9e6a1727dc558880c9eed86d6ba866bac77c5bbc8ce52870a4c5a939d3c29367354529a61a1f86b45a5c97b9b0133110bb7aa9617c9c4db34e52ae457862d3f704e0cbc79f0fb9d4827b3149eacb13bf58a31e1028b5a83bfd1abcef52739b0a6b4006b658c531bfd0c34f31c04ef9a84241dfcbfc40d98c5b204fba212d9da3ac03925051b64aa6634ef5f395d8a12b45e6a5c658c3e9f7fd77f11f4a87fcd507232a5d1e78c28e22c36c4e8b8ae9845f5c98ca8ac0f8a6e94c1e286c399da87965129dc36187eae5dad8ccb6baffb0c5a3d297f95ec49d7550730d78d1fbb7bd79ee4f1c67e4bff8dc409bf3304a747216227997674148928beb3cfc2527b15f770ca6aa226c7a4bff65c28be679f8385d92f0c3821fa82423f5ac79dc3f11011a9c89ca99958453b1bdde02ae9b9164f9d7afe5a8305aae737ed2a43d52fcfdd41207b8004e064046ed6958d31a055d046805e0788c404b16d14d5efd3430b1561c1da958216e8d4c388b4664f1e9eb829f54488e46aacc11b38836f7acf696cdf0af1a23eb18b5274c3dd0d23ff61a4033b191151f51a254d9232404d076db0434ec812b2877af560201a025dcc6bd44e73924aa8c6f966a70af87e9fd72ae457be0490a8b3d79fce58265a37c4061ceb39d226f30512ebe8164f6a1fa6d987b6e6e570757ef19f0b2a6c04d2c12d5f1910536556e5c0ae3980d373c3a04da2d9982e9bcc8dc773c404dab4698937eee357d5fd786a3fcfc51aab4f3438018f61cc87ae7eb3d403b4e76d19a1e505ab63c5ca29793186a4ac62a021b075a56d5af13954fd111bb475d1d1236b84e83fea43729fbcf6786e460b5a92dc3b86f752b445a68f9562e24843df5c5b8fbac0c13a803d1c9c63436860c4ddacc272e1429b973cf42a00664cb639b67086771402e6c4c68d73a6a646dc59fa4ca43d7e507d3c14aeaa1cdd39dc4ef37c3281af9145ca22a6626926b4655743b304806c3fb40ff556a5d33e69c31fe81913fb38e1078202297e75dc9b606af02472843f31e05546d1694a024b1173c97cd3f533d42c63240fe55660a10fc2ebd223336004fb07d"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000001c0)={0xfffffffffffffffe, 0x80000, @ioapic={0x5}}) 11:03:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000001c0)={0xfffffffffffffffe, 0x80000, @ioapic={0x5}}) 11:03:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000000100)=0xf4) 11:03:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000180)=0x80000001, 0x4) setxattr$security_smack_entry(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='security.SMACK64IPIN\x00', &(0x7f0000000640)='{-\x00', 0x3, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x1e8, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x7b) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 11:03:14 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 11:03:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x7, 0xc1fc}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 783.264687] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 783.306573] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 783.331243] Disabled LAPIC found during irq injection [ 783.344115] Disabled LAPIC found during irq injection 11:03:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x7, 0xc1fc}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 11:03:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000000100)=0xf4) 11:03:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000180)=0x80000001, 0x4) setxattr$security_smack_entry(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='security.SMACK64IPIN\x00', &(0x7f0000000640)='{-\x00', 0x3, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x1e8, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x7b) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 11:03:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000001c0)={0xfffffffffffffffe, 0x80000, @ioapic={0x5}}) 11:03:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x0, 0x6, 0x7f, 0x3, 0x1c8}, &(0x7f0000000700)=0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(0x0, &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44", 0xdb, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000980)={'security\x00', 0xef, "9fc280bf8becfc1678038f77f402f0460a913c58aa925e0b9667101263a7f514f004af204e0175214f02097974b42a9053a293b5903f8d815bbd54a1df572c435c683ff47925c7fc42d1569948bd8c4da2fa393dba834cc25879111a9cddae221487abd8358b5a3277312fbeb1351466b5a6eae7485c8a87914c76d5e780250f45faf72b6981d01545c9bdb415a5da4b3d2e93f5814c059745b2e28a6afe389f25f2374e060291b5ad2ddfd269a211a398a699acccc84625364dc14622d4c9eb8b90c2bf85027e04c82211c72a3f280cb3da9cbc7af4ffbfb19eaf38ca245b282a286b445a819f0ec01d7d73f0a6a5"}, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{}, {}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x64, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {0x0}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003380)=""/11, 0xb}], 0x6, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003480)=""/4096, 0x1000}, {0x0}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000008c0), &(0x7f0000000940)=0x4) ioctl$KVM_NMI(r1, 0xae9a) 11:03:14 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 11:03:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x11) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) 11:03:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000000100)=0xf4) [ 783.591042] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 11:03:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000180)=0x80000001, 0x4) setxattr$security_smack_entry(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='security.SMACK64IPIN\x00', &(0x7f0000000640)='{-\x00', 0x3, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x1e8, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x7b) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 783.656409] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 11:03:15 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000000100)=0xf4) 11:03:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r2, &(0x7f00000000c0)='D', 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0x10166) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='ip6gretap0\x00', 0x10) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) shutdown(r3, 0x1) 11:03:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 783.793616] __ntfs_error: 18 callbacks suppressed [ 783.793627] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 11:03:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000180)=0x80000001, 0x4) setxattr$security_smack_entry(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='security.SMACK64IPIN\x00', &(0x7f0000000640)='{-\x00', 0x3, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x1e8, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x7b) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 784.013932] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) 11:03:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x0, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000740)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r6 = shmget(0x2, 0x4000, 0x4, &(0x7f0000cfe000/0x4000)=nil) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000000500)=""/215) fchdir(r5) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) r7 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r8 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r8, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000240)=0x4) syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000100)='id_legacy\x00', 0x0, 0x0, 0x2ab, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) write$cgroup_pid(r7, &(0x7f0000000200)=r0, 0x12) [ 784.089081] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 11:03:15 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) ppoll(&(0x7f0000000480)=[{r0, 0x502}], 0x1, 0x0, 0x0, 0x0) 11:03:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 784.397817] overlayfs: filesystem on './file0' not supported as upperdir [ 784.406133] Option ' ' to dns_resolver key: bad/missing value [ 784.453480] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 784.528333] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 784.546220] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 784.792217] Option ' ' to dns_resolver key: bad/missing value 11:03:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x0, 0x6, 0x7f, 0x3, 0x1c8}, &(0x7f0000000700)=0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(0x0, &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44", 0xdb, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000980)={'security\x00', 0xef, "9fc280bf8becfc1678038f77f402f0460a913c58aa925e0b9667101263a7f514f004af204e0175214f02097974b42a9053a293b5903f8d815bbd54a1df572c435c683ff47925c7fc42d1569948bd8c4da2fa393dba834cc25879111a9cddae221487abd8358b5a3277312fbeb1351466b5a6eae7485c8a87914c76d5e780250f45faf72b6981d01545c9bdb415a5da4b3d2e93f5814c059745b2e28a6afe389f25f2374e060291b5ad2ddfd269a211a398a699acccc84625364dc14622d4c9eb8b90c2bf85027e04c82211c72a3f280cb3da9cbc7af4ffbfb19eaf38ca245b282a286b445a819f0ec01d7d73f0a6a5"}, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{}, {}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x64, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {0x0}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003380)=""/11, 0xb}], 0x6, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003480)=""/4096, 0x1000}, {0x0}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000008c0), &(0x7f0000000940)=0x4) ioctl$KVM_NMI(r1, 0xae9a) 11:03:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r2, &(0x7f00000000c0)='D', 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0x10166) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='ip6gretap0\x00', 0x10) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) shutdown(r3, 0x1) 11:03:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x11) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) 11:03:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x11) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) 11:03:16 executing program 2: syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x0, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000740)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r6 = shmget(0x2, 0x4000, 0x4, &(0x7f0000cfe000/0x4000)=nil) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000000500)=""/215) fchdir(r5) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) r7 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r8 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r8, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000240)=0x4) syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000100)='id_legacy\x00', 0x0, 0x0, 0x2ab, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) write$cgroup_pid(r7, &(0x7f0000000200)=r0, 0x12) [ 785.405335] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 11:03:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x11) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) 11:03:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r2, &(0x7f00000000c0)='D', 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0x10166) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='ip6gretap0\x00', 0x10) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) shutdown(r3, 0x1) 11:03:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x11) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) [ 785.737512] Option ' ' to dns_resolver key: bad/missing value 11:03:17 executing program 2: syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x0, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000740)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r6 = shmget(0x2, 0x4000, 0x4, &(0x7f0000cfe000/0x4000)=nil) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000000500)=""/215) fchdir(r5) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) r7 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r8 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r8, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000240)=0x4) syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000100)='id_legacy\x00', 0x0, 0x0, 0x2ab, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) write$cgroup_pid(r7, &(0x7f0000000200)=r0, 0x12) [ 786.330413] Option ' ' to dns_resolver key: bad/missing value 11:03:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r2, &(0x7f00000000c0)='D', 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0x10166) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='ip6gretap0\x00', 0x10) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) shutdown(r3, 0x1) [ 814.825887] attempt to access beyond end of device [ 814.831184] loop2: rw=1, want=8525, limit=112 [ 946.503825] INFO: task syz-executor3:30537 blocked for more than 140 seconds. [ 946.511182] Not tainted 4.20.0-rc1-next-20181109+ #110 [ 946.517233] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 946.525271] syz-executor3 D23400 30537 23365 0x00000004 [ 946.530890] Call Trace: [ 946.533534] __schedule+0x8cf/0x21d0 [ 946.537241] ? __sched_text_start+0x8/0x8 [ 946.541375] ? perf_trace_sched_process_exec+0x860/0x860 [ 946.546914] ? __switch_to_asm+0x40/0x70 [ 946.550982] ? __switch_to_asm+0x34/0x70 [ 946.555078] ? __switch_to_asm+0x40/0x70 [ 946.559127] ? __switch_to_asm+0x34/0x70 [ 946.563241] ? __switch_to_asm+0x34/0x70 [ 946.567302] ? graph_lock+0x270/0x270 [ 946.571083] ? graph_lock+0x270/0x270 [ 946.574937] ? graph_lock+0x270/0x270 [ 946.578740] schedule+0xef/0x370 [ 946.582091] ? __schedule+0x21d0/0x21d0 [ 946.586141] ? mark_held_locks+0xc7/0x130 [ 946.590291] schedule_timeout+0x1cc/0x260 [ 946.594472] ? usleep_range+0x1a0/0x1a0 [ 946.598434] ? wait_for_completion+0x41f/0x8a0 [ 946.603085] ? trace_hardirqs_off_caller+0x300/0x300 [ 946.608193] wait_for_completion+0x427/0x8a0 [ 946.612642] ? wait_for_completion_interruptible+0x840/0x840 [ 946.618431] ? wake_up_q+0x100/0x100 [ 946.622131] ? lock_release+0xa10/0xa10 [ 946.626181] ? __init_waitqueue_head+0x9e/0x150 [ 946.630838] ? init_wait_entry+0x1c0/0x1c0 [ 946.635129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 946.640662] flush_workqueue+0x742/0x1e10 [ 946.644896] ? mark_held_locks+0x130/0x130 [ 946.649126] ? cancel_delayed_work+0x3e0/0x3e0 [ 946.653746] ? check_preemption_disabled+0x48/0x280 [ 946.658756] ? kasan_check_read+0x11/0x20 [ 946.663027] ? graph_lock+0x270/0x270 [ 946.666824] ? __lock_acquire+0x62f/0x4c20 [ 946.671045] ? rcu_softirq_qs+0x20/0x20 [ 946.675087] ? unwind_dump+0x190/0x190 [ 946.678964] ? graph_lock+0x270/0x270 [ 946.682816] ? graph_lock+0x270/0x270 [ 946.686608] ? lock_acquire+0x1ed/0x520 [ 946.690574] ? vb2_core_queue_release+0x30/0x80 [ 946.695275] ? lock_release+0xa10/0xa10 [ 946.699237] ? perf_trace_sched_process_exec+0x860/0x860 [ 946.704742] ? mark_held_locks+0xc7/0x130 [ 946.708892] ? graph_lock+0x270/0x270 [ 946.712728] ? __mutex_lock+0x85e/0x16f0 [ 946.716775] ? trace_hardirqs_off_caller+0x300/0x300 [ 946.721867] ? vb2_core_queue_release+0x30/0x80 [ 946.726601] ? vb2_core_queue_release+0x6a/0x80 [ 946.731280] vim2m_stop_streaming+0x7c/0x2c0 [ 946.735736] ? vim2m_stop_streaming+0x7c/0x2c0 [ 946.740306] ? vim2m_buf_queue+0xa0/0xa0 [ 946.744420] __vb2_queue_cancel+0x171/0xd20 [ 946.748735] ? vb2_buffer_done+0xb80/0xb80 [ 946.753010] ? wait_for_completion+0x8a0/0x8a0 [ 946.757587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 946.763182] ? __vb2_queue_free+0x753/0xa30 [ 946.767506] ? v4l2_m2m_job_finish+0x4c0/0x4c0 [ 946.772082] ? __vb2_plane_dmabuf_put.isra.5+0x310/0x310 [ 946.777571] ? vidioc_querycap+0xd0/0xd0 [ 946.781627] vb2_core_queue_release+0x26/0x80 [ 946.786193] vb2_queue_release+0x15/0x20 [ 946.790256] v4l2_m2m_ctx_release+0x2a/0x35 [ 946.794661] vim2m_release+0xe6/0x150 [ 946.798469] v4l2_release+0x224/0x3a0 [ 946.802258] __fput+0x3bc/0xa70 [ 946.805604] ? dev_debug_store+0x140/0x140 [ 946.809833] ? get_max_files+0x20/0x20 [ 946.813757] ? trace_hardirqs_on+0xbd/0x310 [ 946.818060] ? kasan_check_read+0x11/0x20 [ 946.822202] ? task_work_run+0x1af/0x2a0 [ 946.826349] ? trace_hardirqs_off_caller+0x300/0x300 [ 946.831439] ? filp_close+0x1cd/0x250 [ 946.835285] ____fput+0x15/0x20 [ 946.838565] task_work_run+0x1e8/0x2a0 [ 946.842448] ? task_work_cancel+0x240/0x240 [ 946.846829] ? copy_fd_bitmaps+0x210/0x210 [ 946.851070] ? do_syscall_64+0x9a/0x820 [ 946.855078] exit_to_usermode_loop+0x318/0x380 [ 946.859775] ? __bpf_trace_sys_exit+0x30/0x30 [ 946.864378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 946.869907] do_syscall_64+0x6be/0x820 [ 946.873827] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 946.879188] ? syscall_return_slowpath+0x5e0/0x5e0 [ 946.884183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 946.889016] ? trace_hardirqs_on_caller+0x310/0x310 [ 946.894068] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 946.899072] ? prepare_exit_to_usermode+0x291/0x3b0 [ 946.904146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 946.909006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 946.914225] RIP: 0033:0x411021 [ 946.917408] Code: 83 c4 40 c3 48 8d 05 4f 07 49 00 48 89 04 24 48 c7 44 24 08 0d 00 00 00 e8 ac a8 01 00 0f 0b 48 8d 05 34 07 49 00 48 89 04 24 <48> c7 44 24 08 0d 00 00 00 e8 91 a8 01 00 0f 0b e8 1a 8f 04 00 e9 [ 946.936518] RSP: 002b:00007ffe89c3b910 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 946.944250] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411021 [ 946.951505] RDX: 0000000000000000 RSI: 0000000000730680 RDI: 0000000000000003 [ 946.958832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 946.966134] R10: 00007ffe89c3b830 R11: 0000000000000293 R12: 0000000000000000 [ 946.973514] R13: 0000000000000001 R14: 0000000000000108 R15: 0000000000000003 [ 946.980788] INFO: task syz-executor3:30544 blocked for more than 140 seconds. [ 946.988088] Not tainted 4.20.0-rc1-next-20181109+ #110 [ 946.993999] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 947.001957] syz-executor3 D24600 30544 23365 0x00000004 [ 947.007630] Call Trace: [ 947.010206] __schedule+0x8cf/0x21d0 [ 947.013988] ? __sched_text_start+0x8/0x8 [ 947.018126] ? graph_lock+0x270/0x270 [ 947.021910] ? _raw_spin_unlock_irq+0x60/0x80 [ 947.026449] ? graph_lock+0x270/0x270 [ 947.030253] ? print_usage_bug+0xc0/0xc0 [ 947.034491] ? preempt_notifier_register+0x200/0x200 [ 947.039589] ? find_held_lock+0x36/0x1c0 [ 947.043690] ? __mutex_lock+0xafa/0x16f0 [ 947.047738] schedule+0xef/0x370 [ 947.051092] ? __schedule+0x21d0/0x21d0 [ 947.055102] ? kasan_check_read+0x11/0x20 [ 947.059244] ? do_raw_spin_unlock+0xa7/0x330 [ 947.063790] ? do_raw_spin_trylock+0x270/0x270 [ 947.068393] ? ww_mutex_lock.part.8+0xf0/0xf0 [ 947.073069] ? mutex_destroy+0x200/0x200 [ 947.077127] schedule_preempt_disabled+0x13/0x20 [ 947.081866] __mutex_lock+0xaff/0x16f0 [ 947.085795] ? v4l2_m2m_fop_poll+0x98/0x120 [ 947.090142] ? check_preemption_disabled+0x48/0x280 [ 947.095288] ? mutex_trylock+0x2b0/0x2b0 [ 947.099399] ? kasan_check_read+0x11/0x20 [ 947.103882] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 947.109301] ? rcu_read_unlock_special+0x370/0x370 [ 947.114312] ? __fget+0x4d1/0x740 [ 947.117778] ? ksys_dup3+0x680/0x680 [ 947.121480] ? refill_pi_state_cache.part.7+0x310/0x310 [ 947.126911] ? __fget_light+0x2e9/0x430 [ 947.130880] ? fget_raw+0x20/0x20 [ 947.134367] ? usercopy_warn+0x110/0x110 [ 947.138420] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 947.143590] ? v4l2_m2m_request_queue+0x320/0x320 [ 947.148424] mutex_lock_nested+0x16/0x20 [ 947.152532] ? mutex_lock_nested+0x16/0x20 [ 947.156762] v4l2_m2m_fop_poll+0x98/0x120 [ 947.160895] v4l2_poll+0x153/0x200 [ 947.164474] ? v4l2_mmap+0x200/0x200 [ 947.168187] do_sys_poll+0x751/0x1180 [ 947.171997] ? compat_core_sys_select+0xb10/0xb10 [ 947.176873] ? do_futex+0x249/0x26d0 [ 947.180576] ? v4l_enumstd+0x70/0x70 [ 947.184335] ? unwind_dump+0x190/0x190 [ 947.188226] ? exit_robust_list+0x280/0x280 [ 947.192578] ? __fget+0x4aa/0x740 [ 947.196017] ? poll_initwait+0x180/0x180 [ 947.200059] ? graph_lock+0x270/0x270 [ 947.203927] ? kasan_check_read+0x11/0x20 [ 947.208078] ? graph_lock+0x270/0x270 [ 947.211866] ? rcu_read_unlock_special+0x370/0x370 [ 947.216905] ? find_held_lock+0x36/0x1c0 [ 947.220968] ? __might_fault+0x12b/0x1e0 [ 947.225113] ? lock_downgrade+0x900/0x900 [ 947.229256] ? lock_release+0xa10/0xa10 [ 947.233290] ? perf_trace_sched_process_exec+0x860/0x860 [ 947.238731] ? posix_ktime_get_ts+0x15/0x20 [ 947.243101] ? trace_hardirqs_off_caller+0x300/0x300 [ 947.248332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 947.253926] __x64_sys_ppoll+0x4e5/0x610 [ 947.257979] ? __ia32_sys_poll+0x520/0x520 [ 947.262224] ? put_timespec64+0x10f/0x1b0 [ 947.266432] ? nsecs_to_jiffies+0x30/0x30 [ 947.270585] ? do_syscall_64+0x9a/0x820 [ 947.274603] ? do_syscall_64+0x9a/0x820 [ 947.278576] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 947.283266] ? trace_hardirqs_on+0xbd/0x310 [ 947.287594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 947.293179] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 947.298566] ? trace_hardirqs_off_caller+0x300/0x300 [ 947.303720] do_syscall_64+0x1b9/0x820 [ 947.307594] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 947.313003] ? syscall_return_slowpath+0x5e0/0x5e0 [ 947.317920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 947.322819] ? trace_hardirqs_on_caller+0x310/0x310 [ 947.327881] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 947.332965] ? prepare_exit_to_usermode+0x291/0x3b0 [ 947.337972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 947.342860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 947.348059] RIP: 0033:0x457569 [ 947.351252] Code: 83 c4 18 c3 e8 d8 64 00 00 48 8b 04 24 48 8b 4c 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d aa 34 0c <01> 87 01 8b 05 a2 34 0c 01 83 f8 01 0f 85 8a 00 00 00 b8 01 00 00 [ 947.370310] RSP: 002b:00007fd86b39dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 947.378808] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 947.386117] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000480 [ 947.393413] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 947.400674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd86b39e6d4 [ 947.408008] R13: 00000000004c33a8 R14: 00000000004d5668 R15: 00000000ffffffff [ 947.415335] [ 947.415335] Showing all locks held in the system: [ 947.421654] 2 locks held by kworker/0:0/5: [ 947.425944] #0: 0000000021489ce4 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 947.435256] #1: 000000006d57a1eb ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 947.446059] 2 locks held by kworker/0:1/12: [ 947.450374] #0: 0000000021489ce4 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 947.459697] #1: 00000000c2d7b230 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 947.471136] 2 locks held by kworker/1:0/17: [ 947.475491] #0: 0000000021489ce4 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 947.484798] #1: 00000000dfc1fb95 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 947.495583] 2 locks held by kworker/1:1/22: [ 947.499912] #0: 0000000021489ce4 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 947.509231] #1: 0000000090aa5ff0 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 947.520009] 1 lock held by khungtaskd/1010: [ 947.524368] #0: 000000005b035fe6 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 947.533054] 1 lock held by rsyslogd/5915: [ 947.537206] #0: 00000000b79e2a2a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 947.545243] 2 locks held by getty/6006: [ 947.549199] #0: 000000007d64ec66 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 947.557469] #1: 00000000c31738e8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 947.566335] 2 locks held by getty/6007: [ 947.570300] #0: 000000003c4555b9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 947.578557] #1: 000000004db082ce (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 947.587420] 2 locks held by getty/6008: [ 947.591372] #0: 0000000001d85584 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 947.599649] #1: 00000000c75557bf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 947.608512] 2 locks held by getty/6009: [ 947.612466] #0: 00000000fee861f5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 947.620731] #1: 00000000097788af (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 947.629604] 2 locks held by getty/6010: [ 947.633604] #0: 000000006242a227 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 947.641846] #1: 0000000067f5fd99 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 947.650723] 2 locks held by getty/6011: [ 947.654702] #0: 000000001a12ac80 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 947.662983] #1: 0000000078b638f2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 947.671821] 2 locks held by getty/6012: [ 947.675835] #0: 00000000cb215e6b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 947.684119] #1: 00000000a57ac44d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 947.693001] 2 locks held by kworker/1:3/6237: [ 947.697476] #0: 0000000021489ce4 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 947.707024] #1: 000000000a82b18e ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 947.717797] 2 locks held by kworker/0:4/11606: [ 947.722359] #0: 0000000021489ce4 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 947.731673] #1: 0000000071cec70e ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 947.742452] 2 locks held by kworker/1:2/19784: [ 947.747073] #0: 0000000021489ce4 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 947.756398] #1: 00000000dfe956b4 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 947.767217] 2 locks held by syz-executor3/30537: [ 947.771954] #0: 000000000e0fa9ce (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 947.780742] #1: 0000000064660e1b (&dev->dev_mutex){+.+.}, at: vim2m_release+0xbc/0x150 [ 947.788942] 1 lock held by syz-executor3/30544: [ 947.793656] #0: 0000000064660e1b (&dev->dev_mutex){+.+.}, at: v4l2_m2m_fop_poll+0x98/0x120 [ 947.802641] [ 947.804254] ============================================= [ 947.804254] [ 947.811245] NMI backtrace for cpu 1 [ 947.814996] CPU: 1 PID: 1010 Comm: khungtaskd Not tainted 4.20.0-rc1-next-20181109+ #110 [ 947.823209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.832555] Call Trace: [ 947.835142] dump_stack+0x244/0x39d [ 947.838753] ? dump_stack_print_info.cold.1+0x20/0x20 [ 947.843926] ? check_preemption_disabled+0x48/0x280 [ 947.848925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 947.854450] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 947.859117] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 947.864320] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 947.869595] arch_trigger_cpumask_backtrace+0x14/0x20 [ 947.874769] watchdog+0xb4c/0x1060 [ 947.878325] ? hungtask_pm_notify+0xb0/0xb0 [ 947.882636] ? __kthread_parkme+0xce/0x1a0 [ 947.886879] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 947.891981] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 947.897067] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 947.901935] ? trace_hardirqs_on+0xbd/0x310 [ 947.906263] ? kasan_check_read+0x11/0x20 [ 947.910391] ? __kthread_parkme+0xce/0x1a0 [ 947.914606] ? trace_hardirqs_off_caller+0x300/0x300 [ 947.919695] ? __schedule+0x21d0/0x21d0 [ 947.923655] ? lockdep_init_map+0x9/0x10 [ 947.927699] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 947.932784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 947.938299] ? __kthread_parkme+0xfb/0x1a0 [ 947.942513] ? hungtask_pm_notify+0xb0/0xb0 [ 947.946833] kthread+0x35a/0x440 [ 947.950197] ? kthread_stop+0x8f0/0x8f0 [ 947.954152] ret_from_fork+0x3a/0x50 [ 947.957927] Sending NMI from CPU 1 to CPUs 0: [ 947.962512] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 947.963418] Kernel panic - not syncing: hung_task: blocked tasks [ 947.976222] CPU: 1 PID: 1010 Comm: khungtaskd Not tainted 4.20.0-rc1-next-20181109+ #110 [ 947.984425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.993755] Call Trace: [ 947.996325] dump_stack+0x244/0x39d [ 947.999935] ? dump_stack_print_info.cold.1+0x20/0x20 [ 948.005366] panic+0x2ad/0x55c [ 948.008550] ? add_taint.cold.5+0x16/0x16 [ 948.012711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 948.018248] ? nmi_trigger_cpumask_backtrace+0x1d1/0x22a [ 948.023703] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 948.029265] watchdog+0xb5d/0x1060 [ 948.032804] ? hungtask_pm_notify+0xb0/0xb0 [ 948.037116] ? __kthread_parkme+0xce/0x1a0 [ 948.041719] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 948.046812] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 948.052060] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 948.056642] ? trace_hardirqs_on+0xbd/0x310 [ 948.060947] ? kasan_check_read+0x11/0x20 [ 948.065082] ? __kthread_parkme+0xce/0x1a0 [ 948.069532] ? trace_hardirqs_off_caller+0x300/0x300 [ 948.074641] ? __schedule+0x21d0/0x21d0 [ 948.078611] ? lockdep_init_map+0x9/0x10 [ 948.082675] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 948.087780] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 948.093306] ? __kthread_parkme+0xfb/0x1a0 [ 948.097529] ? hungtask_pm_notify+0xb0/0xb0 [ 948.101843] kthread+0x35a/0x440 [ 948.105196] ? kthread_stop+0x8f0/0x8f0 [ 948.109248] ret_from_fork+0x3a/0x50 [ 948.113985] Kernel Offset: disabled [ 948.117613] Rebooting in 86400 seconds..