x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r26 = accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r26, 0x0) r27 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r27, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r28 = socket(0x2, 0x3, 0xff) connect$inet(r28, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) [ 658.568486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45875 sclass=netlink_route_socket pig=6765 comm=syz-executor.4 03:35:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 658.678840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45875 sclass=netlink_route_socket pig=6783 comm=syz-executor.4 03:35:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='time_off\b\x00\x00\x000x00000D00000000']) 03:35:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r26 = accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r26, 0x0) r27 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r27, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r28 = socket(0x2, 0x3, 0xff) connect$inet(r28, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) [ 658.846926] FAT-fs (loop5): Unrecognized mount option "time_off" or missing value [ 658.921185] FAT-fs (loop5): Unrecognized mount option "time_off" or missing value 03:35:23 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x2, 0x0, 0xffffffff}}}, 0x90) 03:35:23 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r26 = accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r26, 0x0) r27 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r27, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) socket(0x2, 0x3, 0xff) 03:35:23 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x1f, 0x1c, 0x9, 0x13, 0x0, 0xffff, 0x1, 0x48, 0xffffffffffffffff}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74296d655f6f6666ced37365743d353030303034303430303030"]) r2 = dup3(r0, r1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 03:35:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0x100000fff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fe000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000003200)={r11, 0x3}, &(0x7f0000003240)=0x8) ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000040)={0x2, 0x7}) r12 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r1) setsockopt$inet6_dccp_int(r0, 0x21, 0x7, &(0x7f0000000000)=0x401, 0x4) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) 03:35:23 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r26 = accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r26, 0x0) r27 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r27, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) [ 659.444271] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 659.444271] program syz-executor.3 not setting count and/or reply_len properly [ 659.473232] FAT-fs (loop5): Unrecognized mount option "t)me_offset=500004040000" or missing value 03:35:23 executing program 2: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x25, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=000000\x00'/28]) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) 03:35:23 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r2 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r2, 0x8007ffc) sendfile(r1, r2, 0x0, 0xffff) sendmmsg$alg(r1, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)="6a33ae00340e58c0f15b3070c8c8de2350de6a7a719dc07f863c11466196a5a8c1bbf1f444121e2e623642c0cd6f8245b2b7381118215052f8d60c62691938aa855c48ea0d588f6f26d57f9a0f13d20ca82c2b8333987680947c0774e83af1beab07d2f89f7f172494c23a5c4aa565b26af4d5f6e0d7c9fa5b6a794e8487984a24618c9097588f9304446a020266e3a11a8d4b8b5fe826cff1dcbd972831d4c9513ab04240629852ccb28f4aed0d4d96c759562360443a32a6284ff78b97c293876867f503ff42d39a78a6cdf5545cb2468edb9b22a46b", 0xd7}, {&(0x7f00000002c0)="cf84d51b66d7e287", 0x8}, {&(0x7f0000000300)="ad477abc7f7594a4a3b0abcde76614321983b30badf54ecb905b1d9a1a973b86b99b52f46df46f8a093d0e54ca9116acf6fdaaddc1aa49ff1436e943f6ef8942d010947f7a3b8cfcac64b70398", 0x4d}, {&(0x7f0000000380)="ed69ce265b25f94f39a47bfe710f6c536ae1c39085076d0c896b0b6d12031da907801b1d309505d43fbe7b5005e9af5929bf67af42f7ac92bbd7f2edd40e0f158129f11404f76b1140a821f0970d4fe46a", 0x51}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="8577c06ce34db8c4898c82a648f64c1e946b94314b9afd201ef361169c551e8b913684f12cb1b81f3932fe557d463e818e45872cb979a1a535d11c076aa7de40471b4fbf43330797c82282c3ea43b0ccabf63a4a0e0bb70dda23c1f344f8ea41d43436d27622195d2e41ad2313", 0x6d}, {&(0x7f0000001480)="abe4499baf8655fa7f60c88a1a4c504ce19cac6470623d8124d6861b564ca5ab46203957e8ad932b5a815cc65f74f20b4e5baf272260d3ae4f237b5605905a4362f4ca6c7b3469abe13191d34cddce81b6331155718722991f322e85d809b44c5691472ab37d26d60a537ba56ca30907df6acba850326dca1ed94b01eff7fd1f7931c9df92e9354993c0fa02b21ede25f6813a4c065c900f5a7e", 0x9a}, {&(0x7f0000001540)="45e85af0caa860318dac4ab8e88f26686e551b27cec8c3837c6b7705b01fc224dde55bdbfb0895de5fb001190b211462f39ffb55d77df76c9de616746235debc5300db5351076d3b84f707533eaf36c73a0007912a1ffd52c934d3d71bd835b583e1d6b92e4a8e9a68515e713f80f42b1781c6a041bc4e3bb13275e09ed3d53f3a4f0ccb5d5934daca89df1ef4c2620907e3f81fe036946186fb4af41600bc3c98f2a4d8e6b6e6f653fdc2a61c471f7fd789c31b52893466c4f3", 0xba}], 0x8, &(0x7f0000001680)=[@iv={0xf0, 0x117, 0x2, 0xdc, "4a0aa04ad0848dde3962cb5473a6c542f28d3815542073ae0006fd6815300e559e100b172b6eb7ccade890f4f73e35091f3f121764e99cb9a6032dc2414f8a1130eff77dc6c971d77c1054a0efa9d537986dbc3fce961ac100fc22af67f6002e2eb65f40f219149cc0041a82ec686ef3767d19f54d590dcec68f91d8bdb3edc9d1745e79d16eeea56938eba34562f1f474c1865214beebbaf3488093d6e4f72d14599573255b6b9850e953c63832758ad40f720c3e20763f53888a906f95fd3a6a990f0c286d75c8dc566846fda63e7c1e7a96271b1c9d68e1615101"}, @iv={0xc0, 0x117, 0x2, 0xac, "a5bad38fee592a449f1893d66eb60944b527dac6d80fb82d0810b12b0353405b1ec47235a864ee38babcbf73a497a39f5b2d96ec3cf635f4ef1bba86a1db8efd12e79dd3584fac0820422c607fc4dc8f8247aa5e66c6529018a05b37b46f4e43c66462a207e2d164d02251e55f53159c67dfb2a52a8f1b3af8f9152f87cf7581dfece5c44e87f84a97e7d706752b0c63a4383595c90c9a6a460a8b22f3ceed5866f095f74bbe2cecf6031022"}, @iv={0xd8, 0x117, 0x2, 0xc0, "650ba8f76ae0b41e754b3678936917691d36ddcfb151fb75f079673e016823fc4d66823081643ce9dfe804c8ee04e6fa5653702fea6e14d3fed6f055a196b283f7f1d965eee6891fda12aef2cbca7cdc62917cf9cee82e8957215fe9b590b1d780e6a6c264ba0e577d0dd4ec6af246ebbfc897fd94f5239d5395596e226b84476b72a08a137664b229e9ed31a011776ce3d9aa396249962b0fbe78fad97b633d9804f5e0bcb48ee30d8e1c8c21768081192875ec82451cac49e416620254fc8f"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x2d0, 0x7ef66dfccc320c94}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001980)="c46aa22d95b7736c25fb196efaa64a9ee53f1ca6396102b4434cc038c367172f9b801a3203f778a503ad5c345ae592f930d363a15dd296fb9f7431a926f5f15b8a198212eca1b5a4990f7fe71536f07589ed685f242b7c1ce27073", 0x5b}, {&(0x7f0000001a00)="a0ec1e4bdb6d55edcdd18a2438c822a1c566812d5f499f4dc96538dfc05577c5444b9996102d6dd0d752034ce2a61a434b6ae07d8b75a80494403c3589157af0cef628b3a324bc7693d80a0ad2159adda61ee4ff91018282d50bb0973ce4d97b064055789db7b6e8015441607e663493f120cafc7a330fe352d785ce16ded3832622f2fad7", 0x85}], 0x2, &(0x7f0000001b00)=[@assoc={0x18, 0x117, 0x4, 0x1f}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x101}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x20, 0x117, 0x2, 0xa, "b8a183bd1f7e5ebcf3aa"}, @assoc={0x18, 0x117, 0x4, 0x20}, @op={0x18, 0x117, 0x3, 0xb3cfa04084395134}, @assoc={0x18, 0x117, 0x4, 0x80000000}], 0xc8, 0x4886}], 0x2, 0x820a6) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/27, &(0x7f00000000c0)=0x1b) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r3, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 659.528268] FAT-fs (loop5): Unrecognized mount option "t)me_offset=500004040000" or missing value 03:35:23 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="001a6d655f6f66667365543d4578473030303034303030ef32ae2539"]) r0 = open(0x0, 0x1a3204, 0x143) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 659.626876] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.2'. 03:35:23 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r26 = accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r26, 0x0) socket$inet6(0xa, 0x2, 0x0) [ 659.694877] FAT-fs (loop2): bogus number of reserved sectors [ 659.704568] FAT-fs (loop5): bogus number of reserved sectors [ 659.711819] FAT-fs (loop5): Can't find a valid FAT filesystem [ 659.734818] FAT-fs (loop2): Can't find a valid FAT filesystem 03:35:23 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 659.773362] FAT-fs (loop5): bogus number of reserved sectors [ 659.779549] FAT-fs (loop5): Can't find a valid FAT filesystem [ 659.797006] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.2'. 03:35:23 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x100, 0x8}, 0xc) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="74696d655f5d66667365743d30783030303001000000303030303030d78fe89b66dc0b8b099a44949fc231fb5017436dc63cc7956cb92f0dba572120673fbfa1f8f6281fa359e2c4a284d7dbd4a84f0c6ccfd15241e55e5daff0e0d66b4bd295ac3f368d0636811846720e0b"]) [ 659.917220] FAT-fs (loop2): Unrecognized mount option "time_]ffset=0x0000" or missing value 03:35:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000240)=r3) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r4}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = openat(r7, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r4, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r4, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r4, 0xfff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r5, 0x2b, "646159ad197474e4c6e783161769b31729ba0468312073cc35cb74169d70f6e1296d6df95f7e4b87be8420"}, &(0x7f0000000180)=0x33) 03:35:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:24 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="74696defc96f666673657430303030343030303030303030bd229faa45aa81450c15397a7d5a65113ec2d99f5318d450be1c2ac748c3c6677a8e1ae2e8230c42de1e7c5b5873036cde8fe3e8f899785d36745013ce80e6ace1d047666fdc1bfc273da03e49831afe0ba6e54a8264a6d12ac6db3831d49117d49c6d4757b8b8da43be83a454f0f0b2500bfb14c722fb015f215b15fabea0ce9639bf35c55638f2e2b37c14f962309825d513caa0f026ff989c82959097db61d6195a168adf162f5446f0496a120edf4a6ff1d6e34b666cc2bcf9787fc5a80097fbff780e947e42ccdd070c8824ce6fdfb2ddc946c22d72689a1f8b454ef3976ad4b9dcc95213abc89fd263e1d99a5ad3b2bf7aed94a128c21cd2d4fe7e66b05712829bf08d73beb14457807abfeeb0103c1e7a3bef0340b0d236be8fffefaf82df3138b34d4c595a39c00e1df1a0d89cc19a623c591709ba6e2a9c5f9d777e2fcf70d75872aa3779546475fd5f4b0738d20d28f23d6ae06923a4afb4d3733f87b0ec2e67ea5fc6f6d85615099310902c50fc499b05c6e7f39dfa7e"]) 03:35:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r26 = accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r26, 0x0) [ 660.285763] FAT-fs (loop2): Unrecognized mount option "timoffset0000400000000"EE 9z}Ze>ٟSP*Hgz# B|[Xslޏx]6tP΀Gfo'=>I Jd*81ԑԜmGWCTP "_![Ζ95V8|b0%ʠ&aZ/TFIjJoKfl¼xŨ" or missing value [ 660.298983] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 660.298983] program syz-executor.3 not setting count and/or reply_len properly 03:35:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) 03:35:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:24 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$KDSETLED(r0, 0x4b32, 0x4) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74696d655f6f6630ff7fffffffffffff303030303030300000000000"]) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x2, 0x4}]}, 0xc, 0x1) 03:35:24 executing program 4: r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x1}, 0x8) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r4, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) [ 660.452731] FAT-fs (loop2): Unrecognized mount option "timoffset0000400000000"EE 9z}Ze>ٟSP*Hgz# B|[Xslޏx]6tP΀Gfo'=>I Jd*81ԑԜmGWCTP "_![Ζ95V8|b0%ʠ&aZ/TFIjJoKfl¼xŨ" or missing value 03:35:24 executing program 2: r0 = add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="2ff95fbf1dc2d63550f9bdaa8abc959d4fa0cb89825cb136c45078adfbb8350d91fc78c576b37dfcc681cef14778a3c9433c5cb1ee163a1ad7d1f56a2202b6c07392316296cd4d86f2b0ea1ea77a1b01cc9d53d9817f185aa2aa0c6e9bd9", 0x5e, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0)='%\xf5\xfd\xec\x7f\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)='#)nodev*bdev+@#)cgroupbdev%+posix_acl_access\\\x00') 03:35:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 660.544406] FAT-fs (loop5): Unrecognized mount option "time_of00000000" or missing value [ 660.631335] FAT-fs (loop5): Unrecognized mount option "time_of00000000" or missing value 03:35:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x20000002, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) 03:35:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) 03:35:24 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000006c0)=0x2) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffffffffffd, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e2200000009fe8000000000000000000000000000bb47820000000000000000000000ad6d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000008fe880000000000000000000000000001ffffffff00000000000000000000000000000000000000796c91bd38ba17fd663000000000000000000000000000000000000000000000f4ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000096e6000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000a000e0000000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000200000000a00000000000000fe8000000000000000000000ebffffba00000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000089bf250ceacfc9fcbad61d2996e7e875000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000022150c46cad76bd3e58096296bc47c9595a5e158ac4f66af5bf8a7d89bc7c5c489237de4bce41fa16e76365f5e5d60f6489e92fdeec3046434862cea0bb5adad7d78e4e5af75ba33c9a17ef936d454239833be1690473efc45bd97bd914466560af6554a5800000000000000000005a4252181987cacfc0c1d17302da91a0906c4a47068e22c736de88301d99f9e5564814494534e3f09e47970825be79bfbd564db417b6192f8350742f16d32c0599d08136bab"], 0x1) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="74696d655f6f66667365743d30783030304e30343030303030303030dc36198760ce6a2c856ec28254"]) 03:35:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="54b8726f75705f69643d", @ANYRESDEC=0x0]) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x4000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) r7 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r7}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x2, 0x3, 0xff) connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r10 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r10, 0x8007ffc) sendfile(r9, r10, 0x0, 0xffff) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10dd15ac5ef83ca4bf685b9d33a03b4ecb9cbcd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31a9e6e6e0290231a9189e9fc8fa7dcf99188fb94c84f1fedadbce4b6bdfeb9f223ae998cdb3777d989b51c00b2753e58caabd0885d77ad916ac2d3a776a38158b706678774fa5542c5d4a585bf88a3c6eaed2c4dfc2c36741deac78d9353abcf3f406e2a82452da9d7826a133e01dfe0451a20a617e24c9685763", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) r13 = openat(r12, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r13, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 661.153440] FAT-fs (loop5): Unrecognized mount option "time_offset=0x000N04000000006`j" or missing value [ 661.165888] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 661.165888] program syz-executor.3 not setting count and/or reply_len properly 03:35:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r2 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r2, 0x8007ffc) sendfile(r1, r2, 0x0, 0xffff) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r4}, &(0x7f0000000300)=0x8) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x3, 0x10000}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x3, 0x2af}, 0xc) 03:35:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) 03:35:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:25 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='-dMv/zdomidk#\x00', 0x2, 0x6b9a7e975387d6fb) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="3c09fcc3c3", @ANYRESDEC, @ANYPTR, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESHEX]]]) 03:35:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) 03:35:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:25 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x40, @mcast1, 0x4}, @in6={0xa, 0x4e23, 0xffff8001, @local, 0x2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x23c79028, @mcast1, 0x80000001}, @in6={0xa, 0x4e24, 0x5b, @empty, 0x9a7}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x5c5}], 0xac) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x26, 0x49, 0x3, 0x7, 0x8, 0x2, 0xf, 0x2, 0xae, 0x40, 0x1c3, 0x5, 0x3, 0x38, 0x2, 0x3, 0x3f, 0x9}, [{0x6, 0x6, 0x6bf, 0xf24, 0x0, 0x1, 0xfb5, 0xa65d}], "6372d6442ea47d4446fc5b910a0682753b292a309dd066545a2f6fb09b8a9b24d48c4ab086b5eacefea4", [[], [], [], [], [], [], []]}, 0x7a2) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 661.572550] FAT-fs (loop2): Unrecognized mount option "" or missing value 03:35:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)) [ 661.643647] FAT-fs (loop2): Unrecognized mount option "" or missing value 03:35:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643de72ad443939974045c387a151857584e0b02c0a2215cf7cb0758bd7a38299d8aef1cb9771f86e078e05776306f3d5d3aadebb5a151e71cda5a9c5cf12ac87b3c5e6e2d74a8c5da6c4b0bf90c39e8061938", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r8 = openat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 661.997537] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 661.997537] program syz-executor.3 not setting count and/or reply_len properly [ 662.029648] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 662.029648] program syz-executor.3 not setting count and/or reply_len properly 03:35:26 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1c1802, 0x140) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r4, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r4, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r4, 0x7, 0xa, [0x7ff, 0x4, 0x78a6, 0x6, 0x5, 0x800, 0x5, 0x9, 0x400, 0x7ff]}, &(0x7f0000000100)=0x1c) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74696d655f6f66667365743d307830303030303430303070303030307aad64ec5873cc91a9834a8fe1f86d029386264a0be6667a49deae0baa348a5b46c6dd433ce7c692973b74f31b70098ffea6df87c1c1bc0d33fc398ad67fcac6fc766c7dfb906331d4028bb0946d05d476a5d775b7ff119938cec424024ac230d9aa63d3fcd47716d1da566d94a91a2401fb96361a37c7f6a4e1a3cb6603c263096a0d001879a016ec0af2b73e2151090c4a64ca86a06752ae5b8cb68ea1a2abcb17a5223469304297ace9d1aa9e139fbaa43e0fcbec59fc640744223b0cc94946555608f31606968cd35603537e12fcc0"]) 03:35:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) 03:35:26 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xd32, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xff, 0x400) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000100)=0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x69, &(0x7f0000000480)="7462082ebba2466cf2069d06c2c79e38497717bbfd5cddf5e2bda1c00256cdb8f0a2f359e31398e5f2fef82c45c8d3d405a16958852263415655fbd5639aeefa74808100b9c77141046f9a415704b50430dea7126edc7068ce315f479b26a05f8f9b10c4dd0218d451e222c3ee42ae751ae0b17509ceb0873515d09789dece203a3adaf358c34485888edacc4bd9b36d9c1386cd81b57c8d61bfb85d6f59c12dd29e928256c77d9b5584ad45f4a458356b53d871674e375d9c9ebf1aab7d4b23806f511af2d8bcf9d7fd456d3106305020f3a578e83772c81082da1fa2b5309c1f4573fc0ae4e90505b4eb9e2dea26d3511e6e30fbd7622f6042ee", 0xffffffffffffff9b, 0x0, &(0x7f00000003c0)="08db5d5aaddfaf56a5ced0c328963bf0d8fe21268914149e63757becb45edc1c16d2aa9b9b0127772bff7b7fa9e8f1529db15cafc9c99e403790160e916c1d0c6779253a2fbe1fd69424f86485e47aa3dc447c5cdb58fa7a65fa16895789633a5e01edfbcee89962d8489a0449814ba04a78799aa8e28890136b9e809072bc8696"}) r4 = open(0x0, 0x1a3204, 0x143) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000003200)={r7, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r7, 0x2}, &(0x7f0000000140)=0x8) recvmmsg(r4, &(0x7f0000001ac0)=[{{&(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/173, 0xad}, 0xabe}, {{&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)=""/53, 0x35}], 0x1}, 0xb}, {{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000980)=""/210, 0xd2}], 0x4, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x200}], 0x3, 0x30022, 0x0) accept4$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c, 0x80800) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, {0x8d, 0x35, 0x81, 0x0, 0x0, 0x4}}, 0xa) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 662.295454] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 662.295454] program syz-executor.3 not setting count and/or reply_len properly 03:35:26 executing program 5: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000400)={'\x00', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340)={'\x01\x00', 0x0}, 0x0, 0x0, r1) keyctl$describe(0x6, r1, &(0x7f0000000140)=""/137, 0x89) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x8000, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT]) r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) symlinkat(&(0x7f0000000280)='./file0/file0\x00', r4, &(0x7f00000002c0)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x222041, 0x0) waitid$P_PIDFD(0x3, r6, &(0x7f0000000480), 0x1, &(0x7f0000000540)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000003200)={r9, 0x3}, &(0x7f0000003240)=0x8) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) writev(r10, &(0x7f0000000a00)=[{&(0x7f0000000600)="bac334c901bf85da02ace0774d64b8470456b45de65a7f3a0f4129405f2bdc478eb9644689602d6eb2b35f39c7c97509bc8805d490ee5b6b2d0d8772d62edcb122", 0x41}, {&(0x7f0000000680)="5986e9978c730b0b67caf346bdf060c88825b23d3398c23950ca82cb14f8898cef13c3481b0fef75dd7025b038c3cfc3fe0813e259d28e7d1f2a4b272151c5cbc79e8d09cd4c494c90c432d88f02549cddd4ba323bff7715a135", 0x5a}, {&(0x7f0000000700)="375ce6b8c6efd7319c02b0345390cf828b224ff75572afdb25a241f60c9a4d710786059de7a1383f2c92ff475f1b90c328fbfcbce063bb6ce1f70e2b700471c749302dd452c9222de741807cc21d", 0x4e}, {&(0x7f0000000780)="c7ff73411740ad2de130fb92eed4dffce57b99adca552ecca6dc367c923e3a78bbc8b25ab248fbfb828f8a76a5b93911eced945bbe2184458d7e0382cc0f164f6d914b6fdf24a616f9b05cdc6a7d6c72575ebb335acc2b00ec99397014c07a8037ba28c6d2c761a4e7987327ccee3ad1337ee8a276a7d352549693109eafb4417bb26c38105677c9061d1e361e724109c7e86ce3b5b408734af8f90cd554633aa3d88656fae995083f87e6", 0xab}, {&(0x7f0000000840)="e9b42f51e25347bfd28fb250fb9cf4311f1b108ba0f37410c748860e38c32a69e0006b107d8e8ddd8c2c2768cbac17d9d67ad1a6bb6e9779b9bc5649da6468973fe881e461f2d5688dcd41aad16498d7300595abf4cd0f3218ac4a720fab7e47ffbda94aebc29360dfa4d0d7e21a834ed807e02abb7fe7fd3fddd9d9b4df184279f4e1276fd6f5", 0x87}, {&(0x7f0000000900)="dbb95aadd5c2064e89821a71a119d6bca9da06cb7bebbbc2d084f46f26291cc3782c7f3fd78d90ca4e19f918daad4e69968f47c0b2ce83af493879ada0d573421b35fd2c6fd044ee2e19d968dc85e9fc93b4c170572d681987051399a7c20ad603cee69440dbfa46dd57d7c84fe3c290e52027d5bef810ac", 0x78}, {&(0x7f0000000980)="70ee875da013a652d9d08e774a7db77695917b5895c9031b7d670929a8a7009f633b901fb7bd647e5e74622db0c36a199071e7af1aa9479317d3392b9b469944497765c60309e60d0d3df89a93845fb91b25116704e2e2e0ba9ae60f8cec", 0x5e}], 0x7) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000500)={0x0, 0x1f}) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r11) fcntl$dupfd(r2, 0x406, r11) [ 662.332321] FAT-fs (loop2): Unrecognized mount option "time_offset=0x000004000p0000zdXs̑Jm&J fzIޮ 4[FC<ƒ;tp ߇ 39vl}c1mvu8$J0٪cwVm$67fc j " or missing value 03:35:26 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff, 0x1}}}, 0x90) r1 = socket$inet(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r2, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000580)={0x7, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x1, 0x4, 0x6, 0x20, 0x57, 0x200, 0x20, 0x1ff, 0xc, 0x4}}}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000202}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r2, 0xfdfb9841a6bc30a3, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x98}, 0x1, 0x0, 0x0, 0x40044040}, 0x40000) 03:35:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) [ 662.417898] FAT-fs (loop5): Unrecognized mount option "01777777777777777777777" or missing value 03:35:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 662.499099] FAT-fs (loop2): Unrecognized mount option "time_offset=0x000004000p0000zdXs̑Jm&J fzIޮ 4[FC<ƒ;tp ߇ 39vl}c1mvu8$J0٪cwVm$67fc j " or missing value 03:35:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) socket(0x10, 0x2, 0x0) 03:35:26 executing program 2: 03:35:26 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000240)=r3) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @dev}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', r4}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x10001, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64]) 03:35:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 662.693692] QAT: Invalid ioctl [ 662.788254] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 662.848896] FAT-fs (loop5): Unrecognized mount option "" or missing value 03:35:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00'}, &(0x7f0000000040)=0x54) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74696d655f6f66667365743d30783030303030343030303030303030c3d0ebb6b73d2aaace9f032e5fa18a35c44dfbdbaa907c7d5a470b83b9411b109d56251c00c93ec4d9a1e0454b433dcec054e8524fcd8df4c4d988dbdf35ccfdee48509918cf499fc0e2c488f9cdb67bd35440d963c2a5bb5955dc25df13ee710d2a92f1fc0ca8bc0500d6c5de72f7d95cf6169ce09684e301fd1634c988eeaf5d3c5c8460d953c66cb4ae2eca99b2cfc52701c1ffe71b5c0e0100d6cde7"]) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400100, 0x0) read$FUSE(r0, &(0x7f0000000280), 0x1000) 03:35:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) 03:35:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:26 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0x2, 0x2, 0xffffffe0, 0x7, 0x6}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) 03:35:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 663.136940] FAT-fs (loop2): Unrecognized mount option "time_offset=0x00000400000000붷=*Ο._5M۪|}ZG AV%" or missing value [ 663.166275] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 663.166275] program syz-executor.3 not setting count and/or reply_len properly 03:35:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r18, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r19, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r18, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r20, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) [ 663.223269] FAT-fs (loop2): Unrecognized mount option "time_offset=0x00000400000000붷=*Ο._5M۪|}ZG AV%" or missing value 03:35:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='tim5_offset=0x00000400000000']) [ 663.378938] FAT-fs (loop2): Unrecognized mount option "tim5_offset=0x00000400000000" or missing value [ 663.456034] FAT-fs (loop2): Unrecognized mount option "tim5_offset=0x00000400000000" or missing value 03:35:27 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x2, 0xffffffff, 0x1}}}, 0x90) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x210000, 0x0) 03:35:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18, 0x3, 0x1f, 0x80000000, 0x8, 0x1, 0x4b3, [], r3, 0xffffffffffffffff, 0x3, 0x1}, 0x3c) 03:35:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db070a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d00000000000000000000000000000000000009e4e6bafef0195984676f83f8a71d1df575b703b19ecbdfbf9de79bbacb8fbec52fe7025e45fd1cfa4bf5013093a8a25a6c14b366e5ca2711ed6bdf89007e1d38d56ef2c50366423ed57a9e0850a01f672f957583b27343a56d52d0b2f75d1a23ff21bda2b4a93839b219a672db357f810903720564d05c2a2f1248b6b2b28099aee5ffa8bd388f9ae8dea5f6c6c"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101001, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x7, 0x7}) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x84, 0x2, 0x0, 0x20, 0xde, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x2, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@local, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x3506, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x40, 0xfffffff7, 0x1}}, 0xb5) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r18, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r19, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) 03:35:27 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x0, 0x5000, 0x2, 0x401, 0x7}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74696d655f6f666673657c3d307830305a975fbb2ff9d8fd30303030"]) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="c7b12836c6ff15460dbf44124037e07fe8ab2b6b5be9003944386a98a7f8b80c03d241fe22795d1b3087969a98a80c5fa371d0af708c186e21600c623125b563afcb5417c0") 03:35:27 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/v#ca#\x00', 0xf2, 0x100) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000040)=@null) 03:35:27 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000}}}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 03:35:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x400000, &(0x7f0000000100)=ANY=[@ANYBLOB="74696d655f6f666673000000000000043030342fec2a3010ffdac3"]) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) connect$ax25(r0, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 03:35:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r18, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 664.023635] FAT-fs (loop2): Unrecognized mount option "time_offse|=0x00Z_/0000" or missing value [ 664.026940] sg_write: data in/out 262577/32 bytes for SCSI command 0x0-- guessing data in; [ 664.026940] program syz-executor.3 not setting count and/or reply_len properly [ 664.079500] FAT-fs (loop5): Unrecognized mount option "time_offs" or missing value [ 664.103934] FAT-fs (loop2): Unrecognized mount option "time_offse|=0x00Z_/0000" or missing value 03:35:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="efae92dd1ed69fce9acc41d674"]) 03:35:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r18, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) [ 664.191349] FAT-fs (loop5): Unrecognized mount option "time_offs" or missing value [ 664.315203] FAT-fs (loop2): Unrecognized mount option "ﮒ֟ΚAt" or missing value [ 664.378551] FAT-fs (loop2): Unrecognized mount option "ﮒ֟ΚAt" or missing value 03:35:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00012efe0000dcd86c040000001a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd685078907ccfd39790000000085ebda2e4e6799cd8919d5811f614b6954707f101a700fcf467d74d00000000000000000000000000000000000000000000000c3ddb8384b06cde99c3f14b39b83f6ccc73dd00541063fd34f41a30ee7d9bb6e30f1fd081c7f1e40e49c177349a86affffffffe6237378a636c63b4787a335b620ad8b61c28aa20f1ef62fbfd41211eb1c11f69d5b082f76d58b3b90063119bef7e2cfdb87ef4ed7699c37c6d5b549591bb371279bed1ce8d565f209fefaa0f677c5378bfcb97a3814fe467ee955b288"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f346d6f6465010400000000000011303030303030303030301d30a2f6302c756b65725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@remote, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:28 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'syz_tun\x00', 0xf34, 0xffffffc0}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r1 = syz_open_dev$mouse(&(0x7f0000000140)='\x06\x00}se#\x00', 0x101, 0xb74c707624d86e4a) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x40, 0x4, 0x1}, 0xd18}}, 0x18) 03:35:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)) 03:35:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:28 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x5, @ipv4={[], [], @multicast1}}, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @remote}, 0x2}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0x4}, @in={0x2, 0x4e21, @multicast2}], 0x78) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000080), &(0x7f00000001c0)=0xffffffffffffff9f) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r4}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r5 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r8, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r5, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r4, 0x0, r8}}, 0x8b) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r10}], {0x10, 0x6}}, 0x2c, 0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r12}], {0x10, 0x6}}, 0x2c, 0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r14}], {0x10, 0x6}}, 0x2c, 0x0) getgroups(0x5, &(0x7f0000000100)=[0x0, r10, 0xee01, r12, r14]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x4, {0x0, 0x3, 0x8}, 0x1, r4, r15, 0x1, 0xe00000, 0x4, 0xffffffffffffffe0, 0x0, 0x93b, 0x3, 0x966, 0x8, 0x59ce, 0x7, 0x2d1, 0x4, 0x3, 0x602c0000}}, 0xa0) r16 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r16, 0x8007ffc) sendfile(r3, r16, 0x0, 0xffff) r17 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r17, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r16, 0x84, 0x7b, &(0x7f00000002c0)={r18}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={r19, 0x41}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r20, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES64=r20, @ANYRESHEX]) 03:35:28 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:35:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) 03:35:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 665.066215] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value 03:35:29 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x8}}]}, 0x30}}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='3d\xff\xff/ap\x85miti#f', 0x2, 0x1) write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) socket$packet(0x11, 0x3, 0x300) 03:35:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) geteuid() 03:35:29 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) write$capi20(r0, &(0x7f0000000000)={0x10, 0x1, 0x14f, 0x82, 0x9, 0x1}, 0x10) [ 665.707175] IPv6: Can't replace route, no match found [ 665.713670] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value 03:35:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYRESOCT]) 03:35:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebbd2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c00000000008001003d30303030303030303030300000303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x3, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000003200)={r10, 0x3}, &(0x7f0000003240)=0x8) setsockopt$inet_dccp_buf(r8, 0x21, 0xf, &(0x7f00000004c0)="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", 0xfa) ioctl$VT_ACTIVATE(r6, 0x5606, 0x9b3) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r11, 0x407, 0x0) r12 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r12, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r12, 0x8004e500, &(0x7f0000000240)=r13) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0xb759) r14 = openat(r11, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r14, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) [ 665.794925] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 665.794925] program syz-executor.3 not setting count and/or reply_len properly [ 665.822632] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 665.822632] program syz-executor.3 not setting count and/or reply_len properly 03:35:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) [ 665.841061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24879 sclass=netlink_route_socket pig=7352 comm=syz-executor.4 03:35:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0xbd, 0x80800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:29 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000080)) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 665.919119] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value 03:35:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 665.998262] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 665.998262] program syz-executor.3 not setting count and/or reply_len properly [ 666.035100] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value 03:35:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) creat(&(0x7f0000000040)='./bus\x00', 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 03:35:30 executing program 5: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x5}, 0x2}}, 0x18) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) 03:35:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x92}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 03:35:30 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6022, 0x440400) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r3 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r3, 0x8007ffc) sendfile(r2, r3, 0x0, 0xffff) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7600e9fad7b4d3d58bfd833d1b192f62fa5d33b31c8e6e6e0290231a9fc9d9fb2bbac01ca8db2892fccf69751b7501c93a40a86649023", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={r5}, &(0x7f0000000300)=0x8) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x20e) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 03:35:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 03:35:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74696d655f6f30173030303030303030"]) [ 666.717955] FAT-fs (loop2): Unrecognized mount option "time_o000000000" or missing value 03:35:30 executing program 5: r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) recvfrom$rose(r1, &(0x7f0000000140)=""/233, 0xe9, 0xa4e4da110a6782ca, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74696d655f6f66667365743d10783030303030343030303030303030"]) 03:35:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 666.774028] FAT-fs (loop2): Unrecognized mount option "time_o000000000" or missing value 03:35:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="746d6d655f6f66667365743d3078300000000000000009303030303066d3ed7a3c8a286245c760a909893509acb12fd93f80fb4a77bed7d27f1b2c4abec33c5a757bc5072ba71dfa92ecc5c32bde2277ff462e3887e0bfc9883a6ddfca4ed69b43ee3cb7dc24390ad145b8bf03acf4945d56cbfd219fa4d541a57110b4473387d7f7000ae619c3cb2a92b169afa8579204d1593178eb15915889c569149d566ce57f113a27b2c22effffda7d7a7db4b43bfe23457c2003585dbf3e5ca02e495602572a994f30f9aea6769b0959ee078a0000000000"]) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r1 = accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r1, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000080)={{0x0, @addr=0x10001}, 0x8, 0x0, 0x3}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @identifier="47b290ff57ec8bfa2b90086764b29358"}}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000300)={0x5, [0x3, 0x2, 0x20, 0x70a4, 0x5, 0x0, 0x3, 0x8, 0xfffd, 0x0, 0x1, 0x0, 0xe331, 0x6, 0x800, 0x3638, 0xfffa, 0x4, 0x5, 0x7ff, 0xa000, 0x5, 0x1, 0x138, 0x7, 0x89, 0xa76, 0x4, 0x877, 0x9, 0x9, 0xf, 0x1ff, 0x1, 0xfff9, 0x7fff, 0x2, 0x20, 0x1, 0x0, 0x1, 0x6, 0x28, 0x80, 0x9, 0x0, 0x20, 0x7edc], 0x1b}) 03:35:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) [ 666.921338] FAT-fs (loop2): Unrecognized mount option "tmme_offset=0x0" or missing value [ 666.936100] FAT-fs (loop5): Unrecognized mount option "time_offset=x00000400000000" or missing value 03:35:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 667.028549] FAT-fs (loop2): Unrecognized mount option "tmme_offset=0x0" or missing value 03:35:31 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x3ff, 0x0, 0xffffffff}}}, 0x90) 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:31 executing program 2: r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x142) sendfile(r0, r2, 0x0, 0xda) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x18, r4, 0x5, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6d}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x2) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffff1, 0x0, 0x8000, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) mlockall(0x3) 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) r0 = getpid() prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/rpc\x00') write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x5, {{0x10, 0x4, 0x7}, 0xfffffc00}}, 0x18) 03:35:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x221, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32]) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 03:35:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)) [ 667.727731] FAT-fs (loop5): Unrecognized mount option "time_offset=x00000400000000" or missing value 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:31 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2cf, 0x0, 0x0, {0x0, 0x9, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x4) 03:35:31 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x1) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000054d0c951d07e0edd437a9b6bb6f8fa447fd43c1c8575dbd29978adf1b7d9509a7e6e76b6117263000000000000000000000000000000000000000000000000000000000000000000000000000000c725ffc3555c790754d1e03cc64aab60fd764a7fb45500333bc254b9095dd8874cda51fad5d365263bf64d0ce5eb3167695e886b650d231f9e3dee8b7bce23afce6a7026a6b0140b322deedccff09c72bc7c76c9f203c48da7d831b4af6f248d81d308"]) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x80000000) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 667.903060] FAT-fs (loop5): Unrecognized mount option "time_offset=0x00000400000000imFZ/" or missing value 03:35:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 667.986319] FAT-fs (loop5): Unrecognized mount option "time_offset=0x00000400000000imFZ/" or missing value 03:35:31 executing program 2: r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r8 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r8, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000240)=r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r11 = socket(0x2, 0x3, 0xff) connect$inet(r11, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r12 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r12, 0x8007ffc) sendfile(r11, r12, 0x0, 0xffff) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000002c0)={r14}, &(0x7f0000000300)=0x8) r15 = socket(0x2, 0x3, 0xff) connect$inet(r15, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r16 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r16, 0x8007ffc) sendfile(r15, r16, 0x0, 0xffff) r17 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r17, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r16, 0x84, 0x7b, &(0x7f00000002c0)={r18}, &(0x7f0000000300)=0x8) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r16]) 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:31 executing program 5: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) 03:35:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) 03:35:32 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) mount$9p_xen(&(0x7f0000000040)='cpuseteth0-\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x80000, &(0x7f0000000100)={'trans=xen,', {[{@cache_none='cache=none'}, {@uname={'uname', 0x3d, '!vboxnet1trusted('}}, {@loose='loose'}, {@privport='privport'}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x31, 0x31, 0x34, 0x0, 0x63, 0x39, 0x38], 0x2d, [0x31, 0x65, 0x38, 0x32], 0x2d, [0x1f, 0x38, 0x33, 0x36], 0x2d, [0x3, 0x33, 0x62, 0x64], 0x2d, [0x31, 0x65, 0x32, 0x33, 0xc1, 0x33, 0x4, 0x35]}}}, {@subj_type={'subj_type', 0x3d, '\']user'}}, {@context={'context', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}}) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x7, 0x1c8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) r1 = socket(0x2, 0x3, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000240)=r3) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r4 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r4, 0x8007ffc) sendfile(r1, r4, 0x0, 0xffff) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = open(0x0, 0x1a3204, 0x143) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000003200)={r9, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r9, 0x2}, &(0x7f0000000140)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) r13 = open(0x0, 0x1a3204, 0x143) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000000040)={r16, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000015c0)=ANY=[@ANYRES64=r3, @ANYRES64=r12, @ANYRES32=r16], &(0x7f0000000340)=0x3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0), &(0x7f0000000300)=0x8) fchmod(r4, 0x8c) 03:35:32 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:32 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000140)={{0x8, 0x1, 0x7fffffff, 0x1f}, 0x5, 0x2, 0xff, r1, 0x5, 0xffff7fff, 'syz0\x00', &(0x7f0000000080)=['msdos\x00', 'msdos\x00', 'systemeth1\x00', '\x00', 'msdos\x00'], 0x1e, [], [0x2, 0x8966, 0x530, 0x9]}) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) 03:35:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) 03:35:32 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r1) r2 = open(0x0, 0x1a3204, 0x143) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r5, 0xffff081d}, 0x8) 03:35:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) 03:35:32 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 03:35:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74696d655f6f66660265523d30783030303030343030303030303030"]) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={{0x3, 0x0, @descriptor="936ca013aaf3c0f7"}, 0x63, [], "66a928b294217fa297eb9dab8c5f35258f82f8e88e712867502cb53e2598c45a3085402b0cb143cbb8a92cd4229e63b4ff2c776c7110c132b42832736ef910a706e281520c2ef75bcb3d963af8ce7c90add777bdda8d186498343e105514ba88de9f3e"}) 03:35:32 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:33 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000001380)=@tipc=@name, &(0x7f0000000140)=0x80, 0x180000) connect$l2tp(r0, &(0x7f0000001400)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @broadcast}, 0x4, 0x1, 0x3, 0x2}}, 0x26) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="74696d655f6f66667345743d30783030303030343030303030303030480319f386cd9244bebdde7911488539a7ceef822e0fa57c7814b6529804e9319d853731a5f3f8954c3d74cbf7099ac58dc8166f0d5996ce1e1c8f81cf827f2b7f2f22dfcd0ce6520b62d84a2bea392f2681585f14a86469bdd3907369dce1db3e3fc5ca597f41336b84b15368b00e9499d5380b7cac8279aa49fd52ed076ea900931f6de828daf3698785cf1625e07fc05d1d6ff81cfcf42a6c76e4d824b92a370b6d76d3b4efb7"]) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) name_to_handle_at(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x1008, 0x8e7, "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"}, &(0x7f0000000100), 0x2800) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x7, 0x6}) 03:35:33 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x2}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x4f6000) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000100)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r4, 0x2d) write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 669.164093] FAT-fs (loop5): Unrecognized mount option "time_offeR=0x00000400000000" or missing value 03:35:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) [ 669.228073] FAT-fs (loop5): Unrecognized mount option "time_offeR=0x00000400000000" or missing value 03:35:33 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfffffffffffffc01, 0x400000) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) 03:35:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) 03:35:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 669.332487] FAT-fs (loop2): Unrecognized mount option "time_offsEt=0x00000400000000H͒DyH9.|xR171L=t ōo Yς+/" R bJ+9/&X_diӐsi>?YA3kSh8 |yIRn" or missing value 03:35:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) 03:35:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:33 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xe1, 0x206000) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xc) 03:35:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) 03:35:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) [ 670.064695] FAT-fs (loop2): Unrecognized mount option "time_offsEt=0x00000400000000H͒DyH9.|xR171L=t ōo Yς+/" R bJ+9/&X_diӐsi>?YA3kSh8 |yIRn" or missing value 03:35:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) 03:35:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:34 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="4f534cd9badb884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d00000000ea00b81ec10db35bc5ef83ca4bf685b9b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{r4, r5/1000+10000}, {0x0, 0x7530}}) 03:35:34 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:35:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x0) 03:35:34 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x96ec170285b74ec5, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x1, 0x9, 0x5, 0x400, 0x45, 0x100, &(0x7f0000000240)="a7dfaa240357a62ea1eff5711115f6d69398b8e0886c6bfb765785f3643af8dc12083b7eb2aeacd12969f13f5fd051627ff987a2a144f0666690cf7690f3c38871332257f4"}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r1 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r4 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r4, 0x8007ffc) sendfile(r3, r4, 0x0, 0xffff) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={r6}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={r7, 0x41}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r12 = fcntl$dupfd(r10, 0x0, r11) r13 = gettid() ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r13}) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r15, 0x0, 0x0) r16 = getpgrp(0x0) waitid(0x0, r16, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r16, 0x9, &(0x7f00000001c0)=""/68) r17 = getpgid(r16) r18 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000000)=0x0) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r21 = openat$cgroup_ro(r20, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r22 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r23 = inotify_init1(0x0) r24 = gettid() fcntl$setown(r23, 0x8, r24) r25 = getpid() r26 = socket(0xa, 0x3, 0x8) r27 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r26, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r27, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r26, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r29 = gettid() waitid(0x83b895581628fca4, r29, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r26, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r28, @ANYRESDEC=r29]], 0xfffffffffffffe56}}, 0x20004850) r30 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r31 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r32 = dup2(r31, r30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r32, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r32, 0xc08c5334, &(0x7f0000000200)) r33 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r33) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r33}, 0x0) kcmp(r33, r33, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r33, 0x0, 0x0) r34 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r33, r34, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r29, r32, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r35}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r25, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r24, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r22, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r21, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r19, r18, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r17, r15, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r13, r14, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r9, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000480)='/proc/self/net/pfkey\x00', r35}, 0x30) getresuid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) r38 = gettid() r39 = open(0x0, 0x1a3204, 0x143) r40 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r41 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r41, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r40, 0x84, 0x11, &(0x7f0000003200)={r42, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r39, 0x84, 0x66, &(0x7f0000000040)={r42, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r39, 0x29, 0x23, &(0x7f00000005c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) r44 = geteuid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000042c0)=0x0) r46 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r46, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r46, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) sendmsg$netlink(r1, &(0x7f0000004600)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004580)=[{&(0x7f0000000700)={0x774, 0x1d, 0x200, 0x70bd25, 0x25dfdbff, "", [@nested={0x124, 0x54, [@generic="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", @generic="77f2bf9ea768b043b57e5dcde94bab86a779af8362019fbd1485274428324675e6c904"]}, @nested={0x28, 0x11, [@generic="c273a3ca798714276d1496cd289f149cda628d6ee8f2eeb834", @typed={0x8, 0x2d, @fd=r0}]}, @typed={0x10, 0x53, @str='security\\\x00'}, @generic="58f9a72a6b837af6dcaf5666ac5a626ca0fab15d04ca87864cff24eb5f28b04dc24264388e09b14d3e178cc7c030bc03699ce9ff4cbca59efb19669f759666e41e8247c8288baa618af735fb507e4bc5215e54956975df532666886a3151a2df54c07fc1a2d862b75a4b995e76221d06170ea3f62dd321d239878a40c565f7f7f4b3e52f64b9bf", @typed={0x8, 0x4c, @uid=r8}, @nested={0x418, 0x6f, [@generic="a78de5fea914df462c390175449b92c0360f036a8139b6d2085e3ff84b92cd73c52945971b980ebd209134501eb49343c30d1ea88f1b8bae8a78eb4a6e8a767275d20cb2d515d02538f60052c3f0ae834d238f82fdf8f6dc54d2ebce97c59ebeed5b233bec982cc9e40b03d626f1a085712722408cda1f2dcc13f73892b14c55fa626c263bd59436359dc14623614e5e5bfe2ac5e3af0ac14b22e47176abeb1cd6f06ecfe184325d5fb8c8905547449ac4d5bb", @generic="5ac2cf247e754093eb100f4ee8e228b4dfd02976df021dbfbc4807da464104d1dedc3dfe0a439c87060fc4f46f4d40238d804a08bcad4e66641da129772eee85e76aff47e59c04e8805b9e523ed6f7d01a", @generic="5fc29b7e6891feca5c372db0fcbd3e3f2b3dc2b0880724268510b178360cf9bca6a6a74f3fd385199dd5ee5f07e9597bf413bf2639d56d7eb2ea35f1d44b7bdb516821e28389994c0e530f996e3e9941bd877b7f1728293fca8cfe53552d820fc15d98e4b8d89d13a25dfb477ba20c0bab3625bca76715814796ce8aa7bd42e92617bb8e21388ebf2628c76cae62c8104b81cdcf07289301747af5eaa27bea8883917452ebc7f491ca44e6ebe8023af63ad52fbfcae51b7d03a9cebba928c98bd82f169b1596475b9b2202f42a76e28864117eea3a7e1f07d09bbdf008d23cb6ac499240debc12950ac38a", @generic="bced4de17a434a66ca069b699615cff9058b43951963986b0e78f13726606c138ce6a62c6d1fcd3dc7052e5c036e581d823e76727f612cda4fd6d4ec65fd32b547ddb4094b8829d2142609028b326cd1d65929dbe5f68da1ea1744ea4061c7acef4c33239d6b962b167f4bb768efdf9a789bb602220d404d382caa4cc5b5265e8cc2070def66587d02e3abbef60a049b34415cc9ebb9ff6b74342ad7b25a3931362e3495a13200970a9a72fc3d9792e759c8630e717b52544b23837173ebc7f74ed6561a571210d92217cdb6dc12b5cd0e3d", @typed={0xc, 0x84, @str='msdos\x00'}, @typed={0x68, 0x8d, @binary="f00ff9b381d7f8972b6014a3ce8773cc49957d49cdb34ac7b254f5202722f47e5db5ad8165eb47bda1038b857ea229bede0f3c86aadcbaf0d89f1e830184290473a8baf75b1aec0631968a6be9c4eb2a67d5180d46322de24a951b8d8212f98671f1"}, @typed={0x14, 0x30, @ipv6=@mcast2}, @typed={0x8, 0x92, @pid=r36}, @generic="539617e494de726dff8e0ae240760372aa4e89f33422e31089c8da850f9ecb8f6d00cadb413c2fc8097502034f008a4dbb19bfd7d22996787eac072e3a47d2a24735ce5672cda0e9ab73e96500ed25984e6684ddeea7ddd49013ff99f6f97b83e0d24fd0188df06b64628ee906fae008f1e9be5ab171620fc6ea5e020918f4c7aab817bbdf33465c80ae5950f005dc00fff9823558a7e0bfd1828a0a91681a7610d794ef5bb5f3d49fc51bf6d8dd6321b0d99fa1ea113b50f45514", @typed={0x8, 0x32, @uid=r37}]}, @nested={0x4, 0x59}, @nested={0x15c, 0x11, [@typed={0xc, 0x9, @u64=0x3208}, @typed={0x8, 0x7d, @pid=r38}, @typed={0x1c, 0x80, @str='proc@usertrusted^\\eth0(\x00'}, @generic="bec97712ff9407fb610a65d50d99306656b42991468f87d266298d3cfdeec6", @typed={0x8, 0x25, @uid=r43}, @generic="1849096d40fec9fd786f62ca94fcade1215f84a378a7a17ea98a13ed2ac3dec6f2164d38fa5f97f9c2dc704968395815b6bc4b94949b24aa5172396b5b03a1cf44cc7af24bc637f13c1f2f2a696d02a4f2d7832297d43b0acb083778152ccb44649485f28f43402b4562", @typed={0x14, 0x4b, @ipv6=@loopback}, @generic="5f9b421ffc532cf8bc4516b061ecb96cdcbddfc8cd72bcafa47a9b41837c9307da58cb067160bafea8a23782619260af9625ae0765760846a56d8c25a563c6ea140cf7206a544d1559e9dba252dd30e3bae401cee2fccad4aab3293ec950f4dcbdec886b76f37c979f205bdd79e614f760b08daa4aa2f1a31cffe562189c0016d8b5"]}]}, 0x774}, {&(0x7f0000000e80)={0x14, 0x20, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x4, 0x66}]}, 0x14}, {&(0x7f0000000ec0)={0x3384, 0x2c, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="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", @nested={0x30, 0x35, [@typed={0x2c, 0x0, @str='-mime_typevboxnet0,vmnet1securityem0].\x00'}]}, @typed={0x8, 0x8d, @u32=0x400}, @nested={0x288, 0x16, [@generic="4c2785da50610ae1a89e2b68f7ae9170c05b21ac3dc1d6f0f205eb583a87c95e36ad72fcf7c330d1b81470176fa0ced0e016c5e7de8d00433f14ceeaf365e4b6f311665325e2d2c27b6e62619ea8cd0e8d5dad7f3b4c123eda3bafd602a30004fcbbe501dcc9ae231253af957808eec2be6483f0710eb3277d35b74fb1c98eb4ae6a00d5647a2cb24efbb74b0b9dc7962ca61090df10141e47eac56e1d34f65d90a02578b6acd5375b3ba55ad20bac219df04eb0c57385d59c98a201eebb4bb76ff18e97192d02363ca511c78e3e85acc4b105c9c3b1a0f8a7f70412a42c2f6939afb5f635c88c2a", @typed={0x8, 0x84, @ipv4=@loopback}, @typed={0xd4, 0x6f, @binary="bd77e4318a086bb71e82862be45326f961268c5f64fe408e115f83e7f3f3f8be771c416c0ac49a17f656a09cfecbf065a2761d81f77f3e7bc329d4ab952f2dba200d13aac45c89795a1d99b9419ed2bcb3718bd24e206235bf3a4b9728c67354174ceacfb9c8c6ff4dfcd932cc67ee9cf5b3ca714dd7c6346adf2eccaf6f75140e4b43c0a97c51628c06349e9e9d6b9a415ecb647f40f2b9bc2dcfdf2cf0fe0254a529a6de874c8ee5bdfdf0e55e4192c7fa9e011dbe98b2641e7737c2df761a2a44587d3ff28119987fd5f7b0ce"}, @typed={0xc, 0x23, @u64=0x6}, @generic="98bb6e149cb57cf7df7eeb53697810763074d67e78b6c9687f67e50f8296c3a9e4328472149b19cfd90d53f32fab1f644736160b44b9457ddaf359430113dd2622975bad1c43f50ca6529af409708408d8a290b4feb698c3fa32f135c338345476190297a9c8aaaccacb6a12528b78cf28dc3563b8e1544f3ebf5ecf62e8d4faba09daf76522af2b43dd5d66b38fd758e415726d960c7a9eb6f253e8316d54304cd2a325c769110798", @typed={0x8, 0x7c, @u32=0x6}]}, @generic="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", @generic="b19431443d7be6a704e82b92e7e9397344f9513002cf98405c042437269d77e440ada060ded1e6f774b4432c24c3a019117f9679a01ed9d78e30a49432ccdc650963d7b47feb8503c7fe3ea6b185d5afc43de476db0bf5cf732b4184bdf96ebf6eb7625c1563d1cbef68ad6de0e5b7e28d0bfa88652b6d2cbe4a7fa19e471bb0dc35f401d6bd", @nested={0x100c, 0x61, [@typed={0x8, 0x61, @u32=0x40}, @generic="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"]}, @typed={0x14, 0x57, @ipv6=@mcast2}, @typed={0xc, 0x32, @u64}]}, 0x3384}, {&(0x7f0000004280)={0x20, 0x38, 0xa40, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x0, @u32=0x8}, @typed={0x8, 0x3c, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, {&(0x7f0000004300)={0x1b8, 0x22, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@generic, @typed={0x14, 0x4d, @ipv6=@mcast2}, @typed={0x8, 0x35, @uid=r44}, @typed={0x8, 0x6f, @pid=r45}, @generic="b3db34dcb4030a9fc7f0e33aa1af9889eaa6aaf8bc0b3f02c306865e5c35be64e8869dd037a2755d1377aff4643576d25092ad", @generic="977593aa08d9caf8c0d78055551fa0f14921f8d5dd30ff54a0a4d409b7e2e413f0cf69c23bd2b424237e95f6039f91d7e54242543c6e49c311c2fac3ab0f784d1c29916defe94dc00615b7cb25ae841193fd576d50bfb2aed69071f4e45407a414134b26041c915aad7bc0787a02ad38a702df7f3e139a4489cb67fcaaa76d6c4a7d7a5b3353175fc8f8da801507664b45dfe138c9b52e75aad002a37761807f272a9c3234e2bea90102f6a62bd1f23668697e66b759a28b809f269ab8024a62f80e993d9ef89439b9fd4393907a18e2c70286a1c83a5742c154538119408eec76", @typed={0x8, 0x68, @ipv4=@local}, @typed={0x14, 0x23, @ipv6=@loopback}, @generic="530a4898809ad8be201b54116cc1d4fb5896b2cc2649b19d84c49bfe81c35b9ba09594c12cea12a6e216bdb9515e9cbcb40af9b1f9568f808409d6e71e43584c61c288b758b6ee05e72edd3a4d5d833425c4"]}, 0x1b8}, {&(0x7f00000044c0)={0x88, 0x28, 0x800, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x77, @ipv4=@broadcast}, @generic="968c08a5e5ba3dd63474a57e7a92dde665e7fb3384f355c175d2306547f6caa1476fc6b4181458f686f5e1868fc65289e59bd4183fce7f53e1c4f954a6c4eb07346d7b9dc23f1cfdf386b6c8dc579695d5fd45cdca394fb765072c737b25a6b88f038ff732", @typed={0x8, 0x83, @fd=r46}]}, 0x88}], 0x6, 0x0, 0x0, 0x1}, 0x40081) 03:35:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x0) 03:35:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) 03:35:34 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) 03:35:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x0) 03:35:34 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='fuseblk\x00', 0x401a, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}], [{@smackfshat={'smackfshat'}}, {@fsuuid={'fsuuid', 0x3d, {[0x6d, 0x37, 0x0, 0x0, 0x0, 0x61, 0x37], 0x2d, [0x39, 0x30, 0x63, 0x39], 0x2d, [0x64, 0xfe, 0x61, 0x62], 0x2d, [0x64, 0x57, 0x35, 0x33], 0x2d, [0x0, 0x39, 0x62, 0x64, 0x35, 0x0, 0x0, 0x36]}}}, {@subj_user={'subj_user', 0x3d, '!)wlan1'}}]}}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'team_slave_1\x00', 0x1}, 0x18) 03:35:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) socket(0x2, 0x3, 0xff) 03:35:34 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x200001) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012e68801107c4e7ea83010000000000000000000068000a010001000027db6ea8945d9701e5cd3d606bd60c85614b69546b7f1010a50e78467d74d0"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = open(0x0, 0x1a3204, 0x143) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000003200)={r12, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r12, 0x2}, &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x9, 0x0, 0x20002, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r9, 0x40106436, &(0x7f0000000140)={r13, 0x4}) r14 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r14, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) [ 670.617845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 670.634374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 670.722925] sg_write: data in/out 262577/32 bytes for SCSI command 0x0-- guessing data in; [ 670.722925] program syz-executor.3 not setting count and/or reply_len properly 03:35:34 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = open(0x0, 0x1a3204, 0x143) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3, 0x2}, &(0x7f0000000140)=0x8) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000140)) 03:35:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 03:35:34 executing program 1: getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, "5579a33568669d231c7e19bbce70e304d01419445b7b576b06734dea02ee3dc5707fcb68199ec74b36f931949dcdf01315d0c536449abf3db23e7c2625d049a8a6af83c9a99f5559fc6189bb7f63b827"}, 0xd8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800400000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) [ 671.112651] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 671.127859] FAT-fs (loop1): Filesystem has been set read-only 03:35:35 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) socket$inet6(0xa, 0x2, 0x0) 03:35:35 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4200c0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3, 0x80, 0x5, 0x7}]}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0xcc802) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x800, 0x2, 0x80, 0x7}]}) 03:35:35 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x11100) ioctl$RTC_AIE_OFF(r0, 0x7002) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x18) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = creat(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getpeername$packet(r1, 0x0, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, "5579a33568669d231c7e19bbce70e304d01419445b7b576b06734dea02ee3dc5707fcb68199ec74b36f931949dcdf01315d0c536449abf3db23e7c2625d049a8a6af83c9a99f5559fc6189bb7f63b827"}, 0xd8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) write$P9_RAUTH(r1, &(0x7f0000000280)={0x14, 0x67, 0x0, {0x2, 0x2}}, 0x14) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800400000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000680)={"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"}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) creat(&(0x7f0000000000)='./file2\x00', 0x0) mkdirat(r2, &(0x7f0000000180)='./file1\x00', 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0xb589) link(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)='.\x00') 03:35:35 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc6db, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x3, 0x4) r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r6, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="74696d655f6f66667365743d30783030303030529338879922a4343030303030303030"]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept$unix(r0, &(0x7f0000000140), &(0x7f0000000000)=0x6e) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xfe00, 0xf61a]) 03:35:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) [ 671.378590] FAT-fs (loop5): Unrecognized mount option "time_offset=0x00000R8"400000000" or missing value 03:35:35 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x11100) ioctl$RTC_AIE_OFF(r0, 0x7002) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x18) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = creat(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getpeername$packet(r1, 0x0, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, "5579a33568669d231c7e19bbce70e304d01419445b7b576b06734dea02ee3dc5707fcb68199ec74b36f931949dcdf01315d0c536449abf3db23e7c2625d049a8a6af83c9a99f5559fc6189bb7f63b827"}, 0xd8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) write$P9_RAUTH(r1, &(0x7f0000000280)={0x14, 0x67, 0x0, {0x2, 0x2}}, 0x14) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800400000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000680)={"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"}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) creat(&(0x7f0000000000)='./file2\x00', 0x0) mkdirat(r2, &(0x7f0000000180)='./file1\x00', 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0xb589) link(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)='.\x00') [ 671.446518] FAT-fs (loop2): Unrecognized mount option "/proc/self/net/pfkey" or missing value 03:35:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) 03:35:35 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) r1 = open(0x0, 0x1a3204, 0x143) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000300)={0x0, 0xfffffe8e}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="6296aaeab0c59cfd30c647e7067728bdb742ec56ba29808f8936ce47fff07932c1f942b73133b471d1ecd0e011c8812abff380a75cf3eb8730903803b6dd485f9a5cb1b4dc58cc2004d7b075d538856c56223b2b41e701ac871b38606e3ec9c524c09c1d991e8c7ee408", 0x6a, 0x4, &(0x7f0000000080)={0x11, 0x1a, r5, 0x1, 0x9}, 0x14) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000400)=""/4096, &(0x7f00000002c0)=0x1000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000003200)={r8, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r8, 0x2}, &(0x7f0000000140)=0x8) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, r9}}}, 0x90) [ 671.593032] FAT-fs (loop2): Unrecognized mount option "/proc/self/net/pfkey" or missing value 03:35:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = open(0x0, 0x1a3204, 0x143) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3, 0x2}, &(0x7f0000000140)=0x8) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)="d8c1a6336562e7aed100f71e8b3380d74479627b07a6ee93ecc3c415119f4f3bd4fdb90caea2cfdafd4d81f3c5dc4f5011465f523f6d83569b93dcf4ddbf89d60a1b2dca1a4cb394fa621f36eb6b28a8b0206d9280548c429957328e2342213433dd4693ee2a6ae60f9c6332a1aa203815fb64cf8a0d04ca67b40a2f245d97e2ce6472e1a58fa38586") [ 671.656037] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 671.656037] program syz-executor.3 not setting count and/or reply_len properly 03:35:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) 03:35:35 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x40, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000240)={0x1ff, 0x6, 0xffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40002022, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) shutdown(r2, 0x1) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0x535e2f3003f56a5b) socket$inet6_tcp(0xa, 0x1, 0x0) 03:35:35 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x244701) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 03:35:35 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000040)=0x3) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x200, 0xc8, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:36 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000003200)={r2, 0x3}, &(0x7f0000003240)=0x8) sendmmsg$alg(r0, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f0000000380)=[{0xffffffffffffffff}, {&(0x7f0000000140)="d624c0e0c281ae9f431bbd62bf4660e73229f0c602b771805ed37dc68b7e7ff8442bb524648553dcdcc6f6bdb45a9f86a6a5c633512c5cb08539920a9f1aa58906cf438e19bbf0a3da6095ed0c04243a03ff0768977e4f11fc0fa0b3996d2d790992d43439377c8180e5e41530b287e28a063ec11913278f727d93d35b5fe6c2f26d020aae901bcbe04220551928711a4f8d1ab2f5bcbb67", 0x98}, {&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000000000)="4c90adeee18f60a651624f181a5f22c7a0259ac644943622df118c7c0ccb829e973f37", 0x23}, {&(0x7f0000000300)="63108e64a85157ab682770a10ce45da10a9d08b1133a7002c7be6a28e36b6bc6e281ed6128acb06d84017e2f9103aa6a26b12753a3efd0a5a67f2d27744ed4397cfb0876ae4dc8d9", 0x48}, {&(0x7f0000000080)="3087affd87dd2cdae60d2ca12d727e7e582cfd19b8d75b7748ed4b6c1b077f166e18603db3bc39dd708e986b94488880d01282588c85b56029", 0x39}], 0x6, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0xd7f23654f70787fa}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="98c5964286ab82af793f426ea97992d407fe44360a6ae037703d155c3e57d88b377cf1fbd44bc11afff6e69054b5e88d56701787a82d93f3358efabab8785e47e3da239167eabb9780fa022df66830b2351fcf83e17db9f305ca63a658cbe7966a701ed640d93333720d40b5b345c5b3894c02847b546861f62bee17cd25c1657e3bdba4037568434463fc0b0bbcc2ca8ccda7008a7efd94dde1320f08141e696bd4ca967931ce4bfad397", 0xab}, {&(0x7f0000000500)="dff457765e1f3a072317d51954692c0602268c67e2d06ef8991cc2860915ee2298bffe310db121fd165d723ea5a7fd20cee81a9b860669e70ece23b6f9caa36e01e6675f8ec263b46c8c3fdbb3ec76f19030c300a1c5c4dee7faaed52cd0b7976228a68d2f4842ef0e947671", 0x6c}, {&(0x7f0000000580)="c31f06ec1c61446f441fec2e7cdbc930084d394b67df9784fb414e05fbbfd9ae445febd0d2e9bb0d3831d6e8a31fac0566d42837f9921eaf428e6304cae39bfd48c18fb3506cd6a3d38d10d63918f47c2d90e32992c7a30cdd5a31d5d7add038bb4859ee4aff716314ea70b50a1c3324e8aceb02d710bbc180", 0x79}, {&(0x7f0000000600)="a216d62302013ebfaf1938ad785f8df48333945e212e7d8c3274f0313f7563821db2a8270d78ab76f60d9d57e9766b7ae6a8b8117d5dae8fb3d784dc52563a27", 0x40}], 0x4, &(0x7f0000000680)=[@iv={0xa8, 0x117, 0x2, 0x93, "9b86bc9b36948d69dd40f42c06cfaad13b6d1b1ab5976c9278f4d4de4c6d933fa68ce78db637b289a6083be42a9ac4b96a3b4f39d14d73dc6fd7dab013dee339909a240c87743f08c76cd2e86fcfc52f3a0e6c33d05dcf82d2a868594b58c973e181d4e7afa90754ced4ba5be920ee466ebfe276fbd6beee622bfc12fbc8a8126ceecd3c18c931f108a247398c15901dc88df8"}, @op={0x18}], 0xc0, 0x4}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="822f8fc5266977a67d18d0d342d00c3e53b5365e8e33fbb6676b655757298c5f46b799edab09b5ca6572e771c2d266eeedc102f7787a89f1bf4a6d9668fd75ded2e2dce96a58dbf944969a9e236b9b77ecf31f692ebd26b4922146bf7303351aed143c0f37b293e666b78d4c8b6f6fb94d88961dea06c7be5ac95ec05ca410309dea46d11d1fa8c9e6909ef6e1f09f3577a338c2a8d52d858b9c7b061179e6909dae49d595739cb86b9da589", 0xac}, {&(0x7f0000000800)="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", 0xfd}, {&(0x7f0000000900)="9061d91b64ef4a0b094be4917a68eea090f9003cc3cdc6cefdedbd9ccf8eb24296941b5959a732f5afb62e9176e96babaeccbb6bdc07a58bbd109f323a6338f9787f6fa67617c09bc4", 0x49}], 0x3, &(0x7f00000009c0)=[@assoc={0x18, 0x117, 0x4, 0x8001}, @assoc={0x18, 0x117, 0x4, 0x10001}, @iv={0xd0, 0x117, 0x2, 0xb8, "b0d0b5048d54cafbe7ae989dcf33f8ecd51a25734ded9934c66f0e49ab3e8364d443f45e72c871610d42a65bda40c52d34c797f972b889fcb8523de48a7ebf042621192b6ad510b61d9f89d4a4fb2fb03c8849a48d1a830b1c71cd97751af0190ec138e352af8941027e1dd20a79766df37e67a80ee2584b7739f24944443afc7d6522843d34f07707b4791dfaa25cad42def388706a35e553849b3f91bac0db6a211405bbe97b59b28493fcdc35285073683336a49de953"}], 0x100, 0x1}, {0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="a7ee198f1d26ca958528c64c7ef9749fe2e081dbec777850fbdb405524726688a12252047d13b1352a165a8ba643b349c99726c8443be9b4790662e3bdbad5d02f673fafba1f70625272ad80a8796082ab672398c22ba3238857566b6c50b99fad4f4405e8b74b4477e60f13b84c8e889328f57cac619e03fe07cc14baefe2fa26308777e8c8afcbea6d0187d3a69a3d68ff368445c378fd805aa194be4e0d06c4ca4ff4a4db50342b027892b6a7f8dc1638c6bb3754a5da4e604a4c17e6b9983857d1f00e0e9a8dcc16e08d03598f888759cbed80e762e4", 0xd8}, {&(0x7f0000000bc0)="fa190f49643b7e46551e2f0b6de1e55c68f875d5fabe8d306eb8fec01d23a71cf1ff1b58d5bf7ca1450c6d7bfb558e3bfb8430528154d9e6171c48ae2845baee0a91e60e2a2c702cfbd69518744b", 0x4e}, {&(0x7f0000000c40)="54aa1080506a347cfadbf21bf0198037fbd95bfdda2a70412d3486f4bdc4ebf45d26a9766128677b7288e63f60402f4950372ba21940827cf16a5d98d23e85e8e255bc644e7a0aafe1ef5cd6018786414d1b85870012979bf2c42239c83b3ae5b78e64ef8afaaa9650ffb70ae5d76cf24084775041f65301802d72119a4f8e9a809369327911b8e9296b4a5e7ed740fbf78beaec3b8900371c44974c3528a10f794bae5191ab105bedc760d77256949f912a7aa9b3f22edba49e87ebb8f6507dab55989209c999c9613aa1d90556ff4d8107360ddd113dbaafbb7dddef2d21925ef29abf7ecd5ffa9184a76d449ad275f701957405920dd7", 0xf8}], 0x3, 0x0, 0x0, 0x8100}], 0x4, 0x8000) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r3 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000e80)=""/79) 03:35:36 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x40, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000240)={0x1ff, 0x6, 0xffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40002022, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) shutdown(r2, 0x1) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0x535e2f3003f56a5b) socket$inet6_tcp(0xa, 0x1, 0x0) 03:35:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r0}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000001480), 0x10) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000001440)=0x126, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) r6 = socket(0x2, 0x3, 0xff) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r7 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r7, 0x8007ffc) sendfile(r6, r7, 0x0, 0xffff) write$binfmt_aout(r6, &(0x7f00000015c0)={{0xc0, 0x3, 0x1, 0x3a5, 0x32e, 0xec, 0x5, 0x7}, "07f740fc7dabca0704511fb67bdd0aa9934c81d15fdf1e767e13074481d3256b8b500e508a66d800b0aff94c204a0530fa4cd6bc06af06f053cad242dc642316df69a4d84935cc80b8babfcf66f04d8ac0b8bbd14518db9774d2b47b1e72f8763c823a20fd52caae24144dcb377a34632427b9b0e99f79b1e7a74daa76619eccda42078052b63478", [[], [], []]}, 0x3a8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$KDGETMODE(r8, 0x4b3b, &(0x7f00000014c0)) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r5, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r1, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r0, 0x0, r5}}, 0x8b) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000140), 0x0, 0x1}, {&(0x7f0000000180)="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", 0x1000, 0x2}, {&(0x7f0000001180)="9d23059f2a2170db500fd3978e0de855ec15ba976990edbb68c43581e3a888479997e27a6aa7d81d917f637bdfa4b4bda588e98a6b4fc7a81b7f76bef5b60502916dff967775d117ad4e98f9f430f1dadc7fe40a2d279a4dc091851e5ebb03524d2ed1ad3412fed04cebc00aab254b8540d92fcca63c9cfdb627b9d8ec0c66d08397ce4e8f112bc3f99839142c4e5e00c60ed28991be615c11a9a434c44d60f7f72afda290b836ccb75de35285caa91836c01a91003f3d1bae3605658f397d886567e0c9be6799a00f5f2d39bd5d1fae0916ab7aba79e13841", 0xd9, 0x1}, {&(0x7f0000001280)="84a58e3058ce0c755cf1e6ed1b090e8239d4823e6c41dfcde1c95a5af60b471c13e6a04f3b799ff99ab044c9b5397cbfbf8dc5df04cdd843e7d4e531fa552610c61b486af43d871acfde18c4337a0580f6ab929e3b0df7b95664f4d036e9266a6389ea4cdd8b3241f3b64f0c972043eb8561d79bc4843e68b6aa29eebf4b5e8cf3983a60dd89aef5a3081b642a6d935636ac4e1d4b28e6e0c0a5769b580d4e7d6a5a1020ffbc3440066f8b29174f903df6b36757efa1bed9af88e65208bed6c6d451449f760668beff81ca24976f14c65cac030521d7f546f228db2b04b6c553f91f3230154a25", 0xe7, 0x9}, {&(0x7f0000001380)='iW', 0x2, 0x2}], 0x0, &(0x7f0000001500)={[{@heap='heap'}, {@extent_cache='extent_cache'}, {@data_flush='data_flush'}, {@inline_data='inline_data'}, {@data_flush='data_flush'}], [{@context={'context', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r5}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[wlan1'}}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}]}) [ 672.313080] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0xec4fe7e5) [ 672.321475] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 672.337529] F2FS-fs (loop2): Unable to read 2th superblock [ 672.343629] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0xec4fe7e5) [ 672.351673] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 672.359342] F2FS-fs (loop2): Unable to read 2th superblock 03:35:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() write$UHID_CREATE(r3, &(0x7f0000000480)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000007c0)=""/4096, 0x1000, 0x9, 0x4, 0x8, 0x2, 0xffff8001}, 0x120) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = openat(r7, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) 03:35:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000003200)={r6, 0x3}, &(0x7f0000003240)=0x8) renameat2(r1, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00', 0x4) 03:35:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc6db, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x3, 0x4) r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r6, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:36 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x90) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) preadv(r0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/203, 0xcb}], 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000040)=""/223, 0xdf}, {&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/120, 0x78}], 0xa, 0x0) 03:35:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc6db, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x3, 0x4) r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r6, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc6db, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x3, 0x4) r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r6, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 672.524010] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 672.524010] program syz-executor.3 not setting count and/or reply_len properly 03:35:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) 03:35:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc6db, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x3, 0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc6db, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x3, 0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) 03:35:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc6db, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x3, 0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x4000) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000140)=0x81, 0x4) r3 = getpid() r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gsoup_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r3, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:35:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) 03:35:37 executing program 2: r0 = open(0x0, 0x1a3204, 0x143) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3, 0x2}, &(0x7f0000000140)=0x8) r4 = open(0x0, 0x1a3204, 0x143) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000003200)={r7, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r7, 0x2}, &(0x7f0000000140)=0x8) r8 = open(0x0, 0x1a3204, 0x143) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000003200)={r11, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r11, 0x2}, &(0x7f0000000140)=0x8) r13 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000003200)={r15, 0x3}, &(0x7f0000003240)=0x8) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r17, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r18 = getpid() sched_setattr(r18, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r19 = socket(0x2, 0x3, 0xff) connect$inet(r19, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r20 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r20, 0x8007ffc) sendfile(r19, r20, 0x0, 0xffff) r21 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r21, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r22 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r22, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r21, 0x8004e500, &(0x7f0000000240)=r22) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYRESOCT=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], @ANYRESDEC=r4, @ANYRES64=r11, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="2eb86323e37667f4df7e6a9733b43674df89173b", @ANYPTR64, @ANYRES32], @ANYRES32], @ANYPTR=&(0x7f0000001400)=ANY=[@ANYBLOB="80d1038a55c0e0e6a149f8680e2d4d73a625370b4305ea79403e6b2aff05544c0de07875c11b9650d43574e28322af44cdedbdd4f0c998fce9abf1dd7d90bb063db94268692fc4346018bc9fe1cc5049d369ae4e86e0b36fe88b42b9bf223a052c8ac2c986104f794d95a97da2d98d4218fdf897e693076b9f5ef833e9d73e586a375fa88f75d3b10bb9ec3fb5a7c7104ff0fa9ab8c2bdd24c5563e92c59797cecf6fb63285b0573a282f35025bc7c2557c2eeaba04fea984afcbfde36409cbd392f8051b4849faaadda", @ANYRES32, @ANYRESOCT=r13, @ANYBLOB="98d4eedb7cc767236632628064c974d2d50df574", @ANYPTR=&(0x7f00000012c0)=ANY=[@ANYPTR64, @ANYRES32=r16, @ANYRESDEC, @ANYRES32=r5, @ANYRES16, @ANYRES64=r12, @ANYBLOB="92d61f72e05f07bba37ea9440c714395eaea9b6cf0db16b5b6c21a1af604f6c462ad36deddcc226dee47a265f8e9abe2c614d84c477de6396ab67e7aa9bcb86628e7ef54737c33ea636a77895edd9483517785d0dfec8ede4bd07d4e31f69b72dd86b821dcba59c5bc670cf26a31b620e4"], @ANYRESHEX, @ANYPTR64=&(0x7f0000001380)=ANY=[@ANYRESOCT, @ANYPTR64, @ANYRES16, @ANYRES32=r17, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES16], @ANYRESOCT, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESDEC=r6, @ANYRES64, @ANYRES16=r18, @ANYRES64=r19, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r21]], @ANYRES16=0x0]) [ 673.389043] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 673.389043] program syz-executor.3 not setting count and/or reply_len properly 03:35:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x5, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r5 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r5, 0x8007ffc) sendfile(r4, r5, 0x0, 0xffff) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r7}, &(0x7f0000000300)=0x8) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r8, 0x8992, &(0x7f0000000100)={'bond0\x00\xe1\x03\n\x00!!S\x01\x00', @ifru_names='veth0_to_bridge\x00'}) r9 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r9, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8400, 0x0) 03:35:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc6db, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r6, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:37 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x96ec170285b74ec5, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x1, 0x9, 0x5, 0x400, 0x45, 0x100, &(0x7f0000000240)="a7dfaa240357a62ea1eff5711115f6d69398b8e0886c6bfb765785f3643af8dc12083b7eb2aeacd12969f13f5fd051627ff987a2a144f0666690cf7690f3c38871332257f4"}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r1 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r4 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r4, 0x8007ffc) sendfile(r3, r4, 0x0, 0xffff) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={r6}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={r7, 0x41}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r12 = fcntl$dupfd(r10, 0x0, r11) r13 = gettid() ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r13}) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r15, 0x0, 0x0) r16 = getpgrp(0x0) waitid(0x0, r16, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r16, 0x9, &(0x7f00000001c0)=""/68) r17 = getpgid(r16) r18 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f0000000000)=0x0) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r21 = openat$cgroup_ro(r20, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r22 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r23 = inotify_init1(0x0) r24 = gettid() fcntl$setown(r23, 0x8, r24) r25 = getpid() r26 = socket(0xa, 0x3, 0x8) r27 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r26, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r27, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r26, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r29 = gettid() waitid(0x83b895581628fca4, r29, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r26, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r28, @ANYRESDEC=r29]], 0xfffffffffffffe56}}, 0x20004850) r30 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r31 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r32 = dup2(r31, r30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r32, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r32, 0xc08c5334, &(0x7f0000000200)) r33 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r33) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r33}, 0x0) kcmp(r33, r33, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r33, 0x0, 0x0) r34 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r33, r34, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r29, r32, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r35}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r25, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r24, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r22, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r21, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r19, r18, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r17, r15, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r13, r14, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r9, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000480)='/proc/self/net/pfkey\x00', r35}, 0x30) getresuid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) r38 = gettid() r39 = open(0x0, 0x1a3204, 0x143) r40 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r41 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r41, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r40, 0x84, 0x11, &(0x7f0000003200)={r42, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r39, 0x84, 0x66, &(0x7f0000000040)={r42, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r39, 0x29, 0x23, &(0x7f00000005c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) r44 = geteuid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000042c0)=0x0) r46 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r46, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r46, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) sendmsg$netlink(r1, &(0x7f0000004600)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004580)=[{&(0x7f0000000700)={0x774, 0x1d, 0x200, 0x70bd25, 0x25dfdbff, "", [@nested={0x124, 0x54, [@generic="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", @generic="77f2bf9ea768b043b57e5dcde94bab86a779af8362019fbd1485274428324675e6c904"]}, @nested={0x28, 0x11, [@generic="c273a3ca798714276d1496cd289f149cda628d6ee8f2eeb834", @typed={0x8, 0x2d, @fd=r0}]}, @typed={0x10, 0x53, @str='security\\\x00'}, @generic="58f9a72a6b837af6dcaf5666ac5a626ca0fab15d04ca87864cff24eb5f28b04dc24264388e09b14d3e178cc7c030bc03699ce9ff4cbca59efb19669f759666e41e8247c8288baa618af735fb507e4bc5215e54956975df532666886a3151a2df54c07fc1a2d862b75a4b995e76221d06170ea3f62dd321d239878a40c565f7f7f4b3e52f64b9bf", @typed={0x8, 0x4c, @uid=r8}, @nested={0x418, 0x6f, [@generic="a78de5fea914df462c390175449b92c0360f036a8139b6d2085e3ff84b92cd73c52945971b980ebd209134501eb49343c30d1ea88f1b8bae8a78eb4a6e8a767275d20cb2d515d02538f60052c3f0ae834d238f82fdf8f6dc54d2ebce97c59ebeed5b233bec982cc9e40b03d626f1a085712722408cda1f2dcc13f73892b14c55fa626c263bd59436359dc14623614e5e5bfe2ac5e3af0ac14b22e47176abeb1cd6f06ecfe184325d5fb8c8905547449ac4d5bb", @generic="5ac2cf247e754093eb100f4ee8e228b4dfd02976df021dbfbc4807da464104d1dedc3dfe0a439c87060fc4f46f4d40238d804a08bcad4e66641da129772eee85e76aff47e59c04e8805b9e523ed6f7d01a", @generic="5fc29b7e6891feca5c372db0fcbd3e3f2b3dc2b0880724268510b178360cf9bca6a6a74f3fd385199dd5ee5f07e9597bf413bf2639d56d7eb2ea35f1d44b7bdb516821e28389994c0e530f996e3e9941bd877b7f1728293fca8cfe53552d820fc15d98e4b8d89d13a25dfb477ba20c0bab3625bca76715814796ce8aa7bd42e92617bb8e21388ebf2628c76cae62c8104b81cdcf07289301747af5eaa27bea8883917452ebc7f491ca44e6ebe8023af63ad52fbfcae51b7d03a9cebba928c98bd82f169b1596475b9b2202f42a76e28864117eea3a7e1f07d09bbdf008d23cb6ac499240debc12950ac38a", @generic="bced4de17a434a66ca069b699615cff9058b43951963986b0e78f13726606c138ce6a62c6d1fcd3dc7052e5c036e581d823e76727f612cda4fd6d4ec65fd32b547ddb4094b8829d2142609028b326cd1d65929dbe5f68da1ea1744ea4061c7acef4c33239d6b962b167f4bb768efdf9a789bb602220d404d382caa4cc5b5265e8cc2070def66587d02e3abbef60a049b34415cc9ebb9ff6b74342ad7b25a3931362e3495a13200970a9a72fc3d9792e759c8630e717b52544b23837173ebc7f74ed6561a571210d92217cdb6dc12b5cd0e3d", @typed={0xc, 0x84, @str='msdos\x00'}, @typed={0x68, 0x8d, @binary="f00ff9b381d7f8972b6014a3ce8773cc49957d49cdb34ac7b254f5202722f47e5db5ad8165eb47bda1038b857ea229bede0f3c86aadcbaf0d89f1e830184290473a8baf75b1aec0631968a6be9c4eb2a67d5180d46322de24a951b8d8212f98671f1"}, @typed={0x14, 0x30, @ipv6=@mcast2}, @typed={0x8, 0x92, @pid=r36}, @generic="539617e494de726dff8e0ae240760372aa4e89f33422e31089c8da850f9ecb8f6d00cadb413c2fc8097502034f008a4dbb19bfd7d22996787eac072e3a47d2a24735ce5672cda0e9ab73e96500ed25984e6684ddeea7ddd49013ff99f6f97b83e0d24fd0188df06b64628ee906fae008f1e9be5ab171620fc6ea5e020918f4c7aab817bbdf33465c80ae5950f005dc00fff9823558a7e0bfd1828a0a91681a7610d794ef5bb5f3d49fc51bf6d8dd6321b0d99fa1ea113b50f45514", @typed={0x8, 0x32, @uid=r37}]}, @nested={0x4, 0x59}, @nested={0x15c, 0x11, [@typed={0xc, 0x9, @u64=0x3208}, @typed={0x8, 0x7d, @pid=r38}, @typed={0x1c, 0x80, @str='proc@usertrusted^\\eth0(\x00'}, @generic="bec97712ff9407fb610a65d50d99306656b42991468f87d266298d3cfdeec6", @typed={0x8, 0x25, @uid=r43}, @generic="1849096d40fec9fd786f62ca94fcade1215f84a378a7a17ea98a13ed2ac3dec6f2164d38fa5f97f9c2dc704968395815b6bc4b94949b24aa5172396b5b03a1cf44cc7af24bc637f13c1f2f2a696d02a4f2d7832297d43b0acb083778152ccb44649485f28f43402b4562", @typed={0x14, 0x4b, @ipv6=@loopback}, @generic="5f9b421ffc532cf8bc4516b061ecb96cdcbddfc8cd72bcafa47a9b41837c9307da58cb067160bafea8a23782619260af9625ae0765760846a56d8c25a563c6ea140cf7206a544d1559e9dba252dd30e3bae401cee2fccad4aab3293ec950f4dcbdec886b76f37c979f205bdd79e614f760b08daa4aa2f1a31cffe562189c0016d8b5"]}]}, 0x774}, {&(0x7f0000000e80)={0x14, 0x20, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x4, 0x66}]}, 0x14}, {&(0x7f0000000ec0)={0x3384, 0x2c, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="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", @nested={0x30, 0x35, [@typed={0x2c, 0x0, @str='-mime_typevboxnet0,vmnet1securityem0].\x00'}]}, @typed={0x8, 0x8d, @u32=0x400}, @nested={0x288, 0x16, [@generic="4c2785da50610ae1a89e2b68f7ae9170c05b21ac3dc1d6f0f205eb583a87c95e36ad72fcf7c330d1b81470176fa0ced0e016c5e7de8d00433f14ceeaf365e4b6f311665325e2d2c27b6e62619ea8cd0e8d5dad7f3b4c123eda3bafd602a30004fcbbe501dcc9ae231253af957808eec2be6483f0710eb3277d35b74fb1c98eb4ae6a00d5647a2cb24efbb74b0b9dc7962ca61090df10141e47eac56e1d34f65d90a02578b6acd5375b3ba55ad20bac219df04eb0c57385d59c98a201eebb4bb76ff18e97192d02363ca511c78e3e85acc4b105c9c3b1a0f8a7f70412a42c2f6939afb5f635c88c2a", @typed={0x8, 0x84, @ipv4=@loopback}, @typed={0xd4, 0x6f, @binary="bd77e4318a086bb71e82862be45326f961268c5f64fe408e115f83e7f3f3f8be771c416c0ac49a17f656a09cfecbf065a2761d81f77f3e7bc329d4ab952f2dba200d13aac45c89795a1d99b9419ed2bcb3718bd24e206235bf3a4b9728c67354174ceacfb9c8c6ff4dfcd932cc67ee9cf5b3ca714dd7c6346adf2eccaf6f75140e4b43c0a97c51628c06349e9e9d6b9a415ecb647f40f2b9bc2dcfdf2cf0fe0254a529a6de874c8ee5bdfdf0e55e4192c7fa9e011dbe98b2641e7737c2df761a2a44587d3ff28119987fd5f7b0ce"}, @typed={0xc, 0x23, @u64=0x6}, @generic="98bb6e149cb57cf7df7eeb53697810763074d67e78b6c9687f67e50f8296c3a9e4328472149b19cfd90d53f32fab1f644736160b44b9457ddaf359430113dd2622975bad1c43f50ca6529af409708408d8a290b4feb698c3fa32f135c338345476190297a9c8aaaccacb6a12528b78cf28dc3563b8e1544f3ebf5ecf62e8d4faba09daf76522af2b43dd5d66b38fd758e415726d960c7a9eb6f253e8316d54304cd2a325c769110798", @typed={0x8, 0x7c, @u32=0x6}]}, @generic="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", @generic="b19431443d7be6a704e82b92e7e9397344f9513002cf98405c042437269d77e440ada060ded1e6f774b4432c24c3a019117f9679a01ed9d78e30a49432ccdc650963d7b47feb8503c7fe3ea6b185d5afc43de476db0bf5cf732b4184bdf96ebf6eb7625c1563d1cbef68ad6de0e5b7e28d0bfa88652b6d2cbe4a7fa19e471bb0dc35f401d6bd", @nested={0x100c, 0x61, [@typed={0x8, 0x61, @u32=0x40}, @generic="bfecbe712d958a7066423c9e4c7552e718bb0d8987674e7be681a28f9a3351ebc6e6848c85168ac555178e867754efe38890f8a6e58c9305b0526d90674d6b8863d5107a268a64a82ee4493086648e99e93d4fdbdfeda917378de3659d8ba8dc271b449d236b3cddb72ca1e0b83e8df7eff82d5048d45f705710d65f2c6a48d8f31a1622f14e8951b8b4c7924bca862d6f358e5c7eddc225e9ab6221de47d00dffcd6f8c80c7d33eb523a45e87891c35b96a7eb3e1082ee775d4d7be1966577ba911b5593d63b68265f5baf119240423545959e3670cd11ee85950e6df3f7265ab55f3a2e3e801f7e00365443a3d755e97df787f413d0c875a6ede922412eb0ced6f4224d553c592f6c935dd4b8372450fb934a82c4e1a59325b6561f685bf074e209c765b4e596bdd0a79a026e7a870f51b794b97f48769952d22a5446d416fae586d574efedf6729e0234741768635e69e0e78a1774e455ca608cbf680bfc5074a6f3dab5e147232044e4dd5a2688fb23bc1e71479d5a2f9056c232e7126d4b5b17a93f50d991212f5eafbe3954f21923ad30c6b48869882384b9e07e70cbd0679708325f216f827b52c350e72a84fc52953e8442c83748b32aa56f2b9cd5ab09f11829b0c9a15d1af471cb76b975a4b4152125e629add1fdddafb9eba85e2f43b50cd98aa38f6e28873616575b81283852c82d2887c34c3bd696ea812f1f5491ce2407d80e3be0c2f1ea3cf0888c618e23fb65017d8828c6588a395aedf88a9e0842310dabbfa3fea3ef26cf00e2532bb4c5ac1dbeff8b2f8ba56d61ae97f2ed1ad9a34938eb30c6268ea0609a256e3cb53cb5faf6c93b324640eb950854621a4103b0e2be8b488994455404868d78014d4f6a5fad9faf4d594e881268e2e7637c846fe9f3f2bba888ce3771e54ae65ae58601f88134965808651484e1eb3f7a3b5f996cff1b47ccb68d2039680f5fb55555070cf094e860a1bc9c0b74fcf6a09c6775380093ba12d13629480b0bd52ddef5a57fb7df226a80e738600448a7461644361e8b35391e66f25c525e7f5188398cfab5ad022a245a952a93683b7e0f311ad49a5c73257671cf0f7c447ab5fc7d0c349ab685993e4ed3809278432d7cd3c7c1906993e784756a2c799d134e103c4eb30e1f8a35490d01d31de56b97a255d2f43c3d2d0fc183df5934c78805fa750efd8401be821ebf58cfcf1168fc526f0281f2442635de802b0912c9694ff564c3d8929851b10edfa3adb0050b6f71c8b2f45fe66b7056d76bad029978349f0825f3b8508d459dc2dd051b98d0307d305a65efff03c2989c7c7c8cf840451051b5671e4154d5b85975e52c25c883f6a9301ae85413c52d557f06c2847010a2cf0dbf1292203410d5041d4ba54666ecd71e567f00d8fe711a3f209d522d7c5486ecf8be780358bdd85770dd2e3ee6e8907bdc1c153f7d7ce7ab7c5518548e034db55d9cd1a526402bd0faac51ef74a714a6bd0e4c13908da00a5a3a181cf7429e09adeb4e3b81b5243f55d4d7bc66f32d15c9669d8db2cc8f23693e9f1da3fa7a730b8bff7958e6586e5078541c29d41e7ce6fbcff2717408ec59585b72e7204dc4040f8a7cec8e58c975f71b43f7584795c174524c5054ee0662be926827243774d0a34f618afc0c34cd4b9a9c654f78bb6f3c9391437c1c633d9f40f70cf5a9e6555cb93a3608e9781174d16a6a862402a8259999ee69fdbd7a7ba99dd9d136138fb887f3512e6bdd817fb57bd39d272ef7a3154dc8bcef0c85f2869ba14c62d916d7a3a730f6e62ec412788197a7a41049f7c9cfd01f4af880e8ec7de44c4d9788dcb0fda01f2973b6e1421f051a7ac2fd5e309bb7f7865528f5b8371d53acca1664dd6e7e1174e86a6e82bf631d86d41839107759f8b78091b4542944a07017cb7668b7a20d61a9b6d16a1d1cd5055f1d67ff14ffdaa557eaa4f30a1896d053079d716930b057898ed19b78ffbae81f647d9361f161f88533031a59643396fa93e0fe97855d66c124481a3a1a8d073ba10dd05f230edb656984d39086da5e663f70fb25bff2d4ec324ef83d497c083be89982ff08c623e29adade216fcf59fca530774aa8ce0dab6d8f87190fa2943a637623f85a388a08e02af7ea0aebb32ae758305adb8b89e4181ec2b708d196c8c905db763fcd7352bbbc52cda1e96d0b3e9b5caf7829853014a6a170749d7c587fdce0861af59e30464b5162c1c42829e58f7e64ac9d0b9390ce4c1f13e461f339274ddbef98409585bc8bff13e9fa8f92904c79252240385dbfe33b11d51c5c33d0b5d62489a8edfedf25e8205a9a52fbef0d25651bbb90044c8477a12d3d9d6143b101e6e0cab1b396fe92bb9dc495faa2b9251715914e5a1acf715c81495061216ea1640470cfffb355be2484f012b7a07729357b7d2bedbda0fd64a55735520f736c99b8ef3e348db1ef6d97300c3b63167f7d618fa9d9a62ed579a7652b60f77cc7af96c4706a0fe7ae4d471764eda2d7aef4566d47547ab75d39839722677ae973d6f7feb7836905dfbca2c7fc257240117f194594d79d16bd43c5fc0520d8254b1975d70fbbce347b41baa10c1107d041a486d31faffbb734fff8f31fdcfadd47118ba981962769ed5b86cd78daecde7ed2c5b704a80e4e13a6b80a34875c601c98701ac1114a2dd7775f6c9538f4ce55f55e0d6fdf30fe3b029b1d97b12c8ac52ceb70d495bc73a1cb5de753f23eb23f236bc92510465651a04261dcdf1b1a131dce9622f2ae340411dca904d6c9d900bec5be379169d0729339d41d7ab6b56703dad367c0d0b7b99445086ed2d368a42cf1326e0fdff6b1aa55a69489cec507d175e6c2ace40f83091092090c6f9f02250657e8b88449f22b5472c872be01fabdcfbbd6dc380b3e3787e9d6a352909976abd420f68b965f4bb4eea085b87148d7a30bd07fb5be868cadb29135a812de091721449f32d7442dd5e5047234f02a7a2e9fb34aa7e5c210b313da680d45b8d29b7fc19058ee62cef25f868ea6530e4c461872c10acbe00d03c338dfe40be8462db03f77c2baa264f3a7ec62197ae94b839e43ab3093b00f2ac4f3173f913752288f01a2d1cb87963d51208b401a91c774015ee19c356a4baad1f47d1b944f355e06f3e2e5e945d92e38ecd58ca00d8a57b3ad16c751f0cd2d9cc00c87dc2a82bf7ad7a4554868e6c1d269b293e55f84e7a2f5f4fe72b24f6eeba13732e3ec2d62b440dd7c655c144270f33a7b10f316a5d657ac1e327e872b672a68f9e737763aeb99847d357fd38ecd4bd626cf3a4255da08beb86b03f68bb11a03ac27eeba674ce5869e9b382de1c92398a27fc264dd878b4476d1148b454ad2b759e3e480e775f42df1f51f45a7e58b5541812ca0d153032aa6389b1586ee7508cec7d22781daf00fe7c81fb5f908f401052f156e2d2d6bfdbc4e0c5d160fb8e4326b1f601ea34e4f527583a8f23a91edf476b2b2fbba15290ccf171e53a62c1d59ceed578e88b95d2fafdc2255ef6950dd382cbf502f184e10cd609545c361d1a3d2a56b87c782de0502548beac54dfc874d0905f394008417f713c6de25d4a864c308cb5e1cb33c5b5012f4b14bbacc514601bac395b6ef11708728cd5747cd137bcfc8c4ed77b18c80d5a86b38e1e12e50eb124992bc7a4c36c9c4dbfd902f3ecafc3b74c3d9e8a57a05599d204ae8d8a3f954a139f9d996219458bfead58337a494c8bcc6400f8e790c68fe0dbd90b954a1b43cbe522c39302ca73f7e88ddf5daf7c884f2498ec0f5844ff437743d7a179f8533624aa5ce6e44bd689a4e9c23d3283c8f61bc9ed4f06bd2422a81fde46ce54dffd1ede635148646ccdca29f33ad595e32bd5a6e177f9e196dea34d270680b237ff149b4290faceff59ebf4d6cb57e5a6f9f96db08b332544d22258b5c8d1e2909db62c371c5017f40ddec7d9dbeaf31850536e25faf9d41180ea114b2f69a7cccbcfe5f61b5abcdd6b5b8d650908b5fb1c7789cc86759b551aa2cc47d2106277c61f44f037d5e03353b4569cd48e3aa8d214711b2b52d9b9745a024049e5fe3ee6ab8d85b67c974354e678dccb4d16c18e217664ee235e6c9b32540942abb4a9f14726e41fd0027d02876a787f0cadcafd642cf61b913bb648b54af9d302d5da29db101f9c4ec00011e3b105568c206d218f8e931068c36869c22f11bf63805c41ab6337fe97ba12d14e1dbd1d8edccb3f3ffefdb446a3e2c4821e420505e2aa135e7f0a6a2851507e2f2f39a429f8d0e6001318c38b5a5f8e9afb46c72139b87db8d431905004864061667e67bfd3cdc482ab539057e03b9e2cbd0f440719aeb9a3e33b176bde0f7441c0ad3905e1905861a1e0f4de801ad3016860e8d5feb8eca05895a290c9f78c38bd097128c8def0f400941680938c87337dca6c65ed73e8db55f18c67bfbb17bee14f71d59bdf0a19714287e6c7abff00ab8d3ce6f94f1cfc128e6c61b034e118038cc63f3802816d5feef17a56b60b209a5087303147f5c408f063b7dffa904aa937a996ba2118c76567c0f1e89204bf713c44ecd6330cbf28f0ad55f4c215c1f6a95b0cee4cc042a44bc8c5279bedab5ab20738d2a8b0610392007eb99bca52617cf2828d32cfac4a8f62af2895c7c106d0b39d7c2ff5905cfafc0f62e303785d38794aea30d447a624384e74262e5f3fac4cbb9fd0eca2e5fd9cf4c4ad05c820f8e4d9eb458460845b34f801bdb2c168c72dec3ce1a4f3a332dbc2ddd905c8d734b7cd7cf7b25a50e4c8c8d49b1ae4ed85db54b866941c2c1de52d75a16a4f0c58b4607d3dc656004fea61793fa6280910b819a266afef108d9d43c333068c66b596f2e116c7a6c9980307b7cbd6ad5fd59c28b7fe21c55e96c4d2ada96b61bc6edec1d8045b66e033423c715355938af21da7d4a0cda54c1ce357353d797d9c3c895bae6454832317140bc290f46acb38550fb5e093e726c41bca4329225823d9beb502cf0cdd581e233c350150154c347fc75db60ddfcbe6de23af397979c65d5dd30a9dbe83236d62bf78cba632891c9bf9a62bdc377ea4bcf26046754c1c5c3a2987de10eba099433fd6882f240a26fdc684fea4046bee8486487fece1fb0df026bd22e1b80b67be35216b74010f9e56f186fab0878ce134cd4f14fc81625544af217ce8406fbc74c56813ce275e5160ce0f37e0aa9218bbc970ed8167d542159aa9fac850cf056b1d5d97346fed4f8a94abceb6203c6c28ccff440393b7d0fd6506a7f322597417575e35dce82c29d4cc35c1dfb1586d9b02f8881236e2fbc8b986deba3ee8d402ab02353e240ad92283aaca6167118f79c43fa3a9f7f691788d11374df2d6183e72814f4abca9aa09f0fcf89415cebbd50337c54cfa4df5cb39e9757e73478bd8c7b6b4f8eab50b493407165ce774d0c257828e8d9cdce5288a45676e8183466ae38e4ef1cffe24950cd13840137da118fddba1db91a1fca98bf853abee93cd9eac1b1041f3b2aeaa6c56b2b23eb20876211824e4d23988e940225a4156abc52fa9f47d743c2daf10e47f0e1fcd3d0bb138726edbee1f422a4b1493986505c610bc8622afea2e032f517b4eed6b83aac749f763600ca3a41d078c5d2907040535fd681a28f1199224b6cb9bc41f3f3ea18cf8c884e941e089510afb18e00042ce14429fb11b479b156a1f35cdcbcc8517c6df08c2a4daa0cb049972712b001497318f165108cc92b92f8c33fcab899aeaec1cedb0062b876be2f4585f754911f84757"]}, @typed={0x14, 0x57, @ipv6=@mcast2}, @typed={0xc, 0x32, @u64}]}, 0x3384}, {&(0x7f0000004280)={0x20, 0x38, 0xa40, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x0, @u32=0x8}, @typed={0x8, 0x3c, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, {&(0x7f0000004300)={0x1b8, 0x22, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@generic, @typed={0x14, 0x4d, @ipv6=@mcast2}, @typed={0x8, 0x35, @uid=r44}, @typed={0x8, 0x6f, @pid=r45}, @generic="b3db34dcb4030a9fc7f0e33aa1af9889eaa6aaf8bc0b3f02c306865e5c35be64e8869dd037a2755d1377aff4643576d25092ad", @generic="977593aa08d9caf8c0d78055551fa0f14921f8d5dd30ff54a0a4d409b7e2e413f0cf69c23bd2b424237e95f6039f91d7e54242543c6e49c311c2fac3ab0f784d1c29916defe94dc00615b7cb25ae841193fd576d50bfb2aed69071f4e45407a414134b26041c915aad7bc0787a02ad38a702df7f3e139a4489cb67fcaaa76d6c4a7d7a5b3353175fc8f8da801507664b45dfe138c9b52e75aad002a37761807f272a9c3234e2bea90102f6a62bd1f23668697e66b759a28b809f269ab8024a62f80e993d9ef89439b9fd4393907a18e2c70286a1c83a5742c154538119408eec76", @typed={0x8, 0x68, @ipv4=@local}, @typed={0x14, 0x23, @ipv6=@loopback}, @generic="530a4898809ad8be201b54116cc1d4fb5896b2cc2649b19d84c49bfe81c35b9ba09594c12cea12a6e216bdb9515e9cbcb40af9b1f9568f808409d6e71e43584c61c288b758b6ee05e72edd3a4d5d833425c4"]}, 0x1b8}, {&(0x7f00000044c0)={0x88, 0x28, 0x800, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x77, @ipv4=@broadcast}, @generic="968c08a5e5ba3dd63474a57e7a92dde665e7fb3384f355c175d2306547f6caa1476fc6b4181458f686f5e1868fc65289e59bd4183fce7f53e1c4f954a6c4eb07346d7b9dc23f1cfdf386b6c8dc579695d5fd45cdca394fb765072c737b25a6b88f038ff732", @typed={0x8, 0x83, @fd=r46}]}, 0x88}], 0x6, 0x0, 0x0, 0x1}, 0x40081) [ 673.502252] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value 03:35:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r6, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 673.680194] protocol 88fb is buggy, dev hsr_slave_0 [ 673.685488] protocol 88fb is buggy, dev hsr_slave_1 [ 673.761550] protocol 88fb is buggy, dev hsr_slave_0 [ 673.766697] protocol 88fb is buggy, dev hsr_slave_1 03:35:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:35:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) timer_create(0x3, &(0x7f0000000280)={0x0, 0x0, 0x4, @thr={&(0x7f0000000140), &(0x7f00000004c0)="9136a0b8783d656a57cba8b446fe376d760569de3d01b6ec5bd4db628cf2d29c2b77c7a0976f0f86304c26cbd04c3d8c0dff0bdcf168ddd2be7ecda73daeac99f8a8dac78e65ca069de1ab916583d87cdd00839b804e04dccd0c813a5952b9d6b02d676787823b281840f0154d5f87e07ba8dbf7943991dd394b1f5a8784c806669a74ca25bc43e2883b1ba3527db25add7c2e2591adcf771599fb122521f5d36107f2d9e48389dc4be86fb2d8a5ca0e8d5d65b7bb7cff928cb3389f7297e77c9c379f"}}, &(0x7f00000002c0)) timer_create(0x3, &(0x7f0000000640)={0x0, 0x39, 0x2}, &(0x7f0000000680)=0x0) timer_gettime(r10, &(0x7f0000000300)) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') r11 = open(0x0, 0x1a3204, 0x143) r12 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000003200)={r14, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000040)={r14, 0x2}, &(0x7f0000000140)=0x8) renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r11, &(0x7f0000000600)='./file0\x00') read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/20, 0x14) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r4, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r4, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r4, 0x0, 0x71, "09325ab7f3818bf8d45c245bb327fa4d824d7da48c0ce3450470ba798c1ba208f43843953a33e8f35277b2a177291bafb2608a93a51670777df36997f9d6eefaca5326db603ccc073e7e335ac2e0d11bfc52effc40835c6c390ee9b6c4288ba3f86e191725bdd5993da9294ba72881508b"}, 0x79) [ 674.233421] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 674.238878] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 674.238878] program syz-executor.3 not setting count and/or reply_len properly 03:35:38 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x5, 0x7, 0x9, 0x3, 0x1ff, 0x1f}) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PORT={0xffffff7b, 0x2, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6d1fcdeb85902e, 0xb, 0xc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9fe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8894) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 03:35:38 executing program 2: r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r1 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r8 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r8, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000240)=r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r11 = socket(0x2, 0x3, 0xff) connect$inet(r11, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r12 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r12, 0x8007ffc) sendfile(r11, r12, 0x0, 0xffff) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000002c0)={r14}, &(0x7f0000000300)=0x8) r15 = socket(0x2, 0x3, 0xff) connect$inet(r15, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r16 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r16, 0x8007ffc) sendfile(r15, r16, 0x0, 0xffff) r17 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r17, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r16, 0x84, 0x7b, &(0x7f00000002c0)={r18}, &(0x7f0000000300)=0x8) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r16]) 03:35:38 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db070a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d00000000000000000000000000000000000009e4e6bafef0195984676f83f8a71d1df575b703b19ecbdfbf9de79bbacb8fbec52fe7025e45fd1cfa4bf5013093a8a25a6c14b366e5ca2711ed6bdf89007e1d38d56ef2c50366423ed57a9e0850a01f672f957583b27343a56d52d0b2f75d1a23ff21bda2b4a93839b219a672db357f810903720564d05c2a2f1248b6b2b28099aee5ffa8bd388f9ae8dea5f6c6c"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101001, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x7, 0x7}) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x84, 0x2, 0x0, 0x20, 0xde, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x2, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@local, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x3506, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x40, 0xfffffff7, 0x1}}, 0xb5) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:38 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) dup(r1) 03:35:38 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) socket$inet(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r3, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000140)={0x0, @aes128}) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xff) connect$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r8 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r8, 0x8007ffc) sendfile(r7, r8, 0x0, 0xffff) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000002c0)={r10}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000340)={r11, 0x41}, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) r12 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r12}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r13, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r15, 0x407, 0x0) write(r15, &(0x7f0000000340), 0x41395527) r16 = openat(r15, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self\x00', 0x40000, 0x0) setsockopt$inet_tcp_TLS_RX(r16, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) socket$inet(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r3, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 675.098426] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 675.098426] program syz-executor.3 not setting count and/or reply_len properly 03:35:39 executing program 5: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 5: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r3, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db070a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d00000000000000000000000000000000000009e4e6bafef0195984676f83f8a71d1df575b703b19ecbdfbf9de79bbacb8fbec52fe7025e45fd1cfa4bf5013093a8a25a6c14b366e5ca2711ed6bdf89007e1d38d56ef2c50366423ed57a9e0850a01f672f957583b27343a56d52d0b2f75d1a23ff21bda2b4a93839b219a672db357f810903720564d05c2a2f1248b6b2b28099aee5ffa8bd388f9ae8dea5f6c6c"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101001, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x7, 0x7}) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x84, 0x2, 0x0, 0x20, 0xde, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x2, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@local, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x3506, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x40, 0xfffffff7, 0x1}}, 0xb5) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:39 executing program 5: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r3, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 5: r0 = syz_open_dev$admmidi(0x0, 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x37, 0x6, 0x0, {0x1, 0x4, 0xe, 0x0, '/dev/admmidi#\x00'}}, 0x37) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2d6202, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYBLOB="650a41a6cc5801edca2d67de6712a79053dacf95a85f5cc1b37bf4768faa2e41b1ae3572e5b5de6dec19496df9fe21303d42ad30cd4354259268a210a492fac293371378ff35da833722f5c8917c94e3fb4614bfbc4c0aee964ed7dd243c0c973ab3127b836accd874260df8d4511cb42b178166244dfd4d2aeae3"], 0x2}}, 0x20000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe2(&(0x7f0000000040), 0x84800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000003200)={r12, 0x3}, &(0x7f0000003240)=0x8) setsockopt$inet_group_source_req(r10, 0x0, 0x2b, &(0x7f0000000600)={0xfffffe00, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) 03:35:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:39 executing program 5: r0 = syz_open_dev$admmidi(0x0, 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 5: r0 = syz_open_dev$admmidi(0x0, 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) [ 675.974989] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 675.974989] program syz-executor.3 not setting count and/or reply_len properly 03:35:39 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:39 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db070a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d00000000000000000000000000000000000009e4e6bafef0195984676f83f8a71d1df575b703b19ecbdfbf9de79bbacb8fbec52fe7025e45fd1cfa4bf5013093a8a25a6c14b366e5ca2711ed6bdf89007e1d38d56ef2c50366423ed57a9e0850a01f672f957583b27343a56d52d0b2f75d1a23ff21bda2b4a93839b219a672db357f810903720564d05c2a2f1248b6b2b28099aee5ffa8bd388f9ae8dea5f6c6c"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101001, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x7, 0x7}) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x84, 0x2, 0x0, 0x20, 0xde, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x2, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@local, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x3506, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x40, 0xfffffff7, 0x1}}, 0xb5) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:40 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:40 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x9, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendfile(r1, r0, &(0x7f0000000280), 0x4) io_setup(0x5, &(0x7f0000000000)=0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video35\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, 0xffffffffffffffff, &(0x7f0000000180)) io_cancel(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x9, r3, &(0x7f00000004c0)="f375f7896d239ea70c1fc543991ac5b447bf29383f5a0c288e33ae6dc50763e42e123b1c457c7521552885d75a97078c17a4b8c321bab1630ceaf86217613cc5e80549cd9229f08c704ba38db0d9f1a75a7ae045ed1bf4b0cc686556f84456d0e94e2cc70e6164b25bfacc85c9870d4035bc310bc2118112293e3344cebac0402eab762049f7c1eb29c261f304fa547a9150474c1ad4a615f88ed354493d86dd808075d81fb7f53d9b92d794412a5b7b196afd7b26ee9c2118c9400fa846e386a0530abbd3873ad6dd9b01d5b7f83d43b3cefe880cec8f6c62262d7b3424f52879d035458d6919696a06984256469087", 0xf0, 0x1}, &(0x7f0000000600)) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x00000400000000']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) getuid() mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x4e1012a}}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}], [{@dont_hash='dont_hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x64, 0x36, 0x13, 0x66, 0x36, 0x64, 0x36], 0x2d, [0x37, 0x31, 0x37, 0x61], 0x2d, [0x33, 0x0, 0x6, 0x38], 0x2d, [0xce, 0x30, 0x66, 0x38], 0x2d, [0x39, 0x575d0c088150de2e, 0x35, 0x61, 0x64, 0x6c12e769a10e8623, 0x38, 0x3c]}}}, {@obj_role={'obj_role', 0x3d, 'm\x01\x00\x00\x00\x00'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x25}}, {@uid_lt={'uid<', 0xee00}}]}}) 03:35:40 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101900, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:40 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:40 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8018800}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x130, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbcf}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2a}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:40 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) [ 676.833727] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 676.833727] program syz-executor.3 not setting count and/or reply_len properly 03:35:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:40 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r26 = accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r26, 0x0) r27 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r27, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r28 = socket(0x2, 0x3, 0xff) connect$inet(r28, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r29 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r29, 0x8007ffc) sendfile(r28, r29, 0x0, 0xffff) r30 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r30, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r30, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r29, 0x84, 0x7b, &(0x7f00000002c0)={r31}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r27, 0x84, 0x76, &(0x7f0000000340)={r32, 0x41}, 0x8) socketpair(0x3, 0x0, 0x9, &(0x7f0000001b00)) 03:35:41 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r9 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r9, 0x8007ffc) sendfile(r8, r9, 0x0, 0xffff) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r13, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r14 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003200)={r16, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r17 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r17}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r18 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r19, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r19, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r21, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r18, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r17, 0x0, r21}}, 0x8b) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r23}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r24, 0x407, 0x0) write(r24, &(0x7f0000000340), 0x41395527) r25 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r26 = accept4$inet(r25, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r26, 0x0) r27 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r27, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r28 = socket(0x2, 0x3, 0xff) connect$inet(r28, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r29 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r29, 0x8007ffc) sendfile(r28, r29, 0x0, 0xffff) r30 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r30, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r30, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r29, 0x84, 0x7b, &(0x7f00000002c0)={r31}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r27, 0x84, 0x76, &(0x7f0000000340)={r32, 0x41}, 0x8) socketpair(0x3, 0x0, 0x9, &(0x7f0000001b00)) r33 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r34 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r34, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r33, 0x84, 0x11, &(0x7f0000003200)={r35, 0x3}, &(0x7f0000003240)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r36, 0x407, 0x0) write(r36, &(0x7f0000000340), 0x41395527) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x4, 0x8, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x66ae85f6}, [@jmp={0x5, 0x0, 0x4, 0x1, 0x8, 0x2c, 0x1}, @ldst={0x3, 0x2, 0x6, 0x1, 0xf4c3ced7ea81ed88, 0xfffffffffffffffc, 0x7ffffffffffffffa}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000001b80)='GPL\x00', 0x6, 0xe6, &(0x7f0000001bc0)=""/230, 0x41000, 0x6, [], 0x0, 0x2a, r36, 0x8, &(0x7f0000001cc0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001d00)={0x1, 0xa, 0x4, 0x4b}, 0x10}, 0x70) r37 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r37, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r38 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r38, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 03:35:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000003200)={r12, 0x3}, &(0x7f0000003240)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) r14 = open(0x0, 0x1a3204, 0x143) r15 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000003200)={r17, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r14, 0x84, 0x66, &(0x7f0000000040)={r17, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r13, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x6, 0x6, 0x4000, 0x0, 0x5, 0x5, {r17, @in6={{0xa, 0x4e22, 0xffffffff, @mcast1, 0x4}}, 0x9, 0x2, 0x7, 0x10001, 0x10000}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000140)={0x7f, 0x3ff, 0x8, 0x7, 0x0, 0x6, 0x0, 0x2, r18}, &(0x7f00000004c0)=0x20) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:41 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:41 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0xc8, 0x9, 0x0, 0x0, 0xffffffff}}}, 0x90) fcntl$getown(r0, 0x9) 03:35:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:41 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000240)=r2) r3 = accept4$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000140)=0x10, 0x80000) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'ifb0\x00', 0x9371dfc154402eb5}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r4 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r5 = getpid() r6 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000240)=r7) r8 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r8}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r11, 0x407, 0x0) write(r11, &(0x7f0000000340), 0x41395527) r12 = openat(r11, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r5, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) [ 677.694748] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 677.694748] program syz-executor.3 not setting count and/or reply_len properly 03:35:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74696d655f6f6666736d743d307829303030303430303030303030306bc86b0b60c0cd67897400ee32c85d907e7a3e1fb1749c83bbdb1fbacc48ce0957f2f25739fdbc5650e2258c93bc1577dc6acb3b064bc75437469ac44893278fde627c6572e358f682073ac605e4f34e7b36178299e72214f810f4b1532723eca9d0f37d2599"]) 03:35:41 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, 0x0, 0x0) 03:35:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 677.817063] FAT-fs (loop2): Unrecognized mount option "time_offsmt=0x)0000400000000kk `gt" or missing value 03:35:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x7e, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0xa, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:41 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, 0x0, 0x0) 03:35:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000003200)={r12, 0x3}, &(0x7f0000003240)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) r14 = open(0x0, 0x1a3204, 0x143) r15 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000003200)={r17, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r14, 0x84, 0x66, &(0x7f0000000040)={r17, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r13, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x6, 0x6, 0x4000, 0x0, 0x5, 0x5, {r17, @in6={{0xa, 0x4e22, 0xffffffff, @mcast1, 0x4}}, 0x9, 0x2, 0x7, 0x10001, 0x10000}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000140)={0x7f, 0x3ff, 0x8, 0x7, 0x0, 0x6, 0x0, 0x2, r18}, &(0x7f00000004c0)=0x20) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:42 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, 0x0, 0x0) 03:35:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000280)={0x7f, {{0x2, 0x4e23, @multicast2}}}, 0x88) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x4, 0xc1, 0x0, 0x7}, {0x5, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x2, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x0, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) faccessat(r3, &(0x7f0000000040)='./file0\x00', 0x2, 0x800) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) [ 678.554735] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 678.554735] program syz-executor.3 not setting count and/or reply_len properly 03:35:42 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x7e, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0xa, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:42 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:42 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000003200)={r12, 0x3}, &(0x7f0000003240)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) r14 = open(0x0, 0x1a3204, 0x143) r15 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000003200)={r17, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r14, 0x84, 0x66, &(0x7f0000000040)={r17, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r13, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x6, 0x6, 0x4000, 0x0, 0x5, 0x5, {r17, @in6={{0xa, 0x4e22, 0xffffffff, @mcast1, 0x4}}, 0x9, 0x2, 0x7, 0x10001, 0x10000}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000140)={0x7f, 0x3ff, 0x8, 0x7, 0x0, 0x6, 0x0, 0x2, r18}, &(0x7f00000004c0)=0x20) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:43 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES64=r4, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC], @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) r11 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x55, 0x101200) sendfile(r8, r11, &(0x7f0000000140), 0x2) 03:35:43 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) [ 679.423310] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 679.423310] program syz-executor.3 not setting count and/or reply_len properly 03:35:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x7e, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0xa, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:43 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:43 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0b") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:44 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2e5, 0x0, 0xffffffff}}}, 0x90) 03:35:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0b") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000240)=r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r9 = socket(0x2, 0x3, 0xff) connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r10 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r10, 0x8007ffc) sendfile(r9, r10, 0x0, 0xffff) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000002c0)={r12}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000340)={r13, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r14, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r15 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000003200)={r17, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r18 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r18}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r19 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r20, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r20, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r22, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r19, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r18, 0x0, r22}}, 0x8b) r23 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r24}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r25, 0x407, 0x0) write(r25, &(0x7f0000000340), 0x41395527) r26 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r27 = accept4$inet(r26, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r27, 0x0) r28 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r28, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r29 = socket(0x2, 0x3, 0xff) connect$inet(r29, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r30 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r30, 0x8007ffc) sendfile(r29, r30, 0x0, 0xffff) r31 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r31, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r31, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r30, 0x84, 0x7b, &(0x7f00000002c0)={r32}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r28, 0x84, 0x76, &(0x7f0000000340)={r33, 0x41}, 0x8) socketpair(0x3, 0x0, 0x9, &(0x7f0000001b00)) r34 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r35 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r35, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r34, 0x84, 0x11, &(0x7f0000003200)={r36, 0x3}, &(0x7f0000003240)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r37, 0x407, 0x0) write(r37, &(0x7f0000000340), 0x41395527) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x4, 0x8, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x66ae85f6}, [@jmp={0x5, 0x0, 0x4, 0x1, 0x8, 0x2c, 0x1}, @ldst={0x3, 0x2, 0x6, 0x1, 0xf4c3ced7ea81ed88, 0xfffffffffffffffc, 0x7ffffffffffffffa}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000001b80)='GPL\x00', 0x6, 0xe6, &(0x7f0000001bc0)=""/230, 0x41000, 0x6, [], 0x0, 0x2a, r37, 0x8, &(0x7f0000001cc0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001d00)={0x1, 0xa, 0x4, 0x4b}, 0x10}, 0x70) r38 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r38, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r39 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r39, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r38, 0x8004e500, &(0x7f0000000240)=r39) r40 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r40, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r41 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r41, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r40, 0x8004e500, &(0x7f0000000240)=r41) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r42, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r43 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r44 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r45 = fcntl$dupfd(r43, 0x0, r44) r46 = gettid() ioctl$BLKTRACESETUP(r45, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r46}) r47 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r48 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r48, 0x0, 0x0) r49 = getpgrp(0x0) waitid(0x0, r49, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r49, 0x9, &(0x7f00000001c0)=""/68) r50 = getpgid(r49) r51 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r51, 0x8904, &(0x7f0000000000)=0x0) r53 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r54 = openat$cgroup_ro(r53, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r55 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r56 = inotify_init1(0x0) r57 = gettid() fcntl$setown(r56, 0x8, r57) r58 = getpid() r59 = socket(0xa, 0x3, 0x8) r60 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r59, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r60, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r59, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r62 = gettid() waitid(0x83b895581628fca4, r62, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r59, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r61, @ANYRESDEC=r62]], 0xfffffffffffffe56}}, 0x20004850) r63 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r64 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r65 = dup2(r64, r63) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r65, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r65, 0xc08c5334, &(0x7f0000000200)) r66 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r66) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r66}, 0x0) kcmp(r66, r66, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r66, 0x0, 0x0) r67 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r66, r67, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r62, r65, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r68}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r58, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r57, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r55, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r54, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r52, r51, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r50, r48, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r46, r47, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001e00)={0xffffffffffffffff, r42, 0x0, 0x8, &(0x7f0000001dc0)='ip6gre0\x00', r68}, 0x30) geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) 03:35:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) memfd_create(&(0x7f0000000080)='\x00', 0x0) r1 = getpid() r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000240)=r3) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r4}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = openat(r7, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r1, &(0x7f0000000000)='comm\x00') 03:35:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0b") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 680.276877] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 680.276877] program syz-executor.3 not setting count and/or reply_len properly 03:35:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000240)=r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r9 = socket(0x2, 0x3, 0xff) connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r10 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r10, 0x8007ffc) sendfile(r9, r10, 0x0, 0xffff) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000002c0)={r12}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000340)={r13, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r14, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r15 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000003200)={r17, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r18 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r18}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r19 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r20, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r20, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r22, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r19, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r18, 0x0, r22}}, 0x8b) r23 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r24}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r25, 0x407, 0x0) write(r25, &(0x7f0000000340), 0x41395527) r26 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r27 = accept4$inet(r26, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r27, 0x0) r28 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r28, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r29 = socket(0x2, 0x3, 0xff) connect$inet(r29, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r30 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r30, 0x8007ffc) sendfile(r29, r30, 0x0, 0xffff) r31 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r31, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r31, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r30, 0x84, 0x7b, &(0x7f00000002c0)={r32}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r28, 0x84, 0x76, &(0x7f0000000340)={r33, 0x41}, 0x8) socketpair(0x3, 0x0, 0x9, &(0x7f0000001b00)) r34 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r35 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r35, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r34, 0x84, 0x11, &(0x7f0000003200)={r36, 0x3}, &(0x7f0000003240)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r37, 0x407, 0x0) write(r37, &(0x7f0000000340), 0x41395527) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x4, 0x8, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x66ae85f6}, [@jmp={0x5, 0x0, 0x4, 0x1, 0x8, 0x2c, 0x1}, @ldst={0x3, 0x2, 0x6, 0x1, 0xf4c3ced7ea81ed88, 0xfffffffffffffffc, 0x7ffffffffffffffa}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000001b80)='GPL\x00', 0x6, 0xe6, &(0x7f0000001bc0)=""/230, 0x41000, 0x6, [], 0x0, 0x2a, r37, 0x8, &(0x7f0000001cc0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001d00)={0x1, 0xa, 0x4, 0x4b}, 0x10}, 0x70) r38 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r38, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r39 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r39, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r38, 0x8004e500, &(0x7f0000000240)=r39) r40 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r40, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r41 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r41, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r40, 0x8004e500, &(0x7f0000000240)=r41) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r42, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r43 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r44 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r45 = fcntl$dupfd(r43, 0x0, r44) r46 = gettid() ioctl$BLKTRACESETUP(r45, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r46}) r47 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r48 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r48, 0x0, 0x0) r49 = getpgrp(0x0) waitid(0x0, r49, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r49, 0x9, &(0x7f00000001c0)=""/68) r50 = getpgid(r49) r51 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r51, 0x8904, &(0x7f0000000000)=0x0) r53 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r54 = openat$cgroup_ro(r53, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r55 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r56 = inotify_init1(0x0) r57 = gettid() fcntl$setown(r56, 0x8, r57) r58 = getpid() r59 = socket(0xa, 0x3, 0x8) r60 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r59, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r60, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r59, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r62 = gettid() waitid(0x83b895581628fca4, r62, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r59, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r61, @ANYRESDEC=r62]], 0xfffffffffffffe56}}, 0x20004850) r63 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r64 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r65 = dup2(r64, r63) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r65, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r65, 0xc08c5334, &(0x7f0000000200)) r66 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r66) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r66}, 0x0) kcmp(r66, r66, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r66, 0x0, 0x0) r67 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r66, r67, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r62, r65, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r68}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r58, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r57, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r55, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r54, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r52, r51, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r50, r48, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r46, r47, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001e00)={0xffffffffffffffff, r42, 0x0, 0x8, &(0x7f0000001dc0)='ip6gre0\x00', r68}, 0x30) geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) r69 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r70 = accept4$inet(r69, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r70, 0x0) r71 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r72 = accept4$inet(r71, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r72, 0x0) r73 = getpid() sched_setattr(r73, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r74 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r74, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r74, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@local, @in=@empty}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8) fstat(r5, &(0x7f0000002000)) 03:35:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:44 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r5 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r5, 0x8007ffc) sendfile(r4, r5, 0x0, 0xffff) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r7}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={r8, 0x41}, 0x8) r9 = dup(r3) setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e21, 0x9, @empty, 0x1f}, {0xa, 0x4e23, 0xfffff000, @empty, 0x400}, 0xec, [0x6, 0x3, 0x5, 0x9, 0x1, 0x55, 0x100, 0x1000]}, 0x5c) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000040)=0x6b, 0xffffff82) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000240)=r2) fallocate(r1, 0x8, 0x100000000, 0xfffffffffffff800) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80, 0x0) write$binfmt_aout(r10, &(0x7f0000000480)={{0x107, 0xe7, 0x5, 0x39f, 0x3a4, 0x1, 0x3e5, 0x1}, "09c1da09164cb00bd4474f5719dad1b0985acc96080269dfa666c30719587d2170121e231e0c5ce30f3559e3be947f1dbd54b731a738b585fb530ff1bb94ae7e2a3ad111851759d13555dade15a97d6c83e09a677bab1fab8da0e3d8ca306e68708473d5d273ec6ac47033d5b4f4346517875cae348c527849c26f98149905f6b51ef510fa23139180668113f4a25b05901007389b310847517dbb388e72a579e578299a4d69fb3c90df4ebaaf4b519c9f875b2ce2aea18be2bf977d5491dbe983a0d0baaa53c85e8573ec6d5db6a5d04678204a40fb33786d4f", [[], [], [], [], [], [], [], [], []]}, 0x9fa) ioctl$KVM_GET_IRQCHIP(r9, 0xc208ae62, &(0x7f00000011c0)={0x0, 0x0, @ioapic}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r11, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="1631fbbc53a22d", 0x7}], 0x1, &(0x7f0000000e80)=[{0xf8, 0x104, 0x7, "3d60d6be12cc38ea843cc5df794fe2aca17a4ca420610def209ffc4cf979e7ab0626862b099c1ef0362849545a104c5d730cb88ca430481b5a59dfecbeb9fb4b3115b91c54b28f11827be29c15f32519679b0273c7eb18021b93d80858ee9965d6215e98db4974d673d613e4c941907f050bf241173d1acbe8f679995c423f21c84271159cb16775f19ce27405a70b3d6bfbe75fc79538c02a52d9d2758aa120ac2d4f73a83c105de906ad3335e1beee3d07a01b339349aa039ba0d99f3f74538bd8112fab17b5ffbd3dd702e9a1b949eeb0f6cafc299b44e5e70da07aafa44dafaf716591f3"}, {0x38, 0x6, 0x54, "c9260c87c383db2d930514bb3e8392e8959d17a77a8a0639956cb691d67cf33228ed442f19ea"}], 0x130}}, {{&(0x7f0000000fc0)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'hwsim0\x00'}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001040)="c4008a23b15062d5b178a99112e3157b739104dca7f35c03854ba459dd004077059ffe56065b194bcdbb72b5d12e0749201ae4a7a91e65f2e6aa179cad83692719c3e9e88b448f70fbeeb2c8e1b7bd7cb988a631", 0x54}, {&(0x7f00000010c0)="ae134cc5472f408062bb9b4c24eb85fb3b17dfd8874d9538ddb1a9f4d725debefd7627a0740c7900943838678c72dc576ed38f52c614af0c6b2b1efe861ed58efb1c8c6af29bf0ab327b02ed2f54ad6e87f6b425d328b7b0c2c1e73b91c3c9a359f68e883bb45bf9d22e777712ecd80683b0b4e758aa534a3c9426eb5196272d7ab7f9225887cbe960151a7d109faa2bbbc414414e0bf1bb233a54ea7a8c6cdfad28d86a01d5b3e98055c0dae6", 0xad}], 0x2, &(0x7f00000011c0)}}, {{&(0x7f0000001440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4e20, 0x1, @rand_addr="8991f0bbc53be439d268ef0773cf7c2a", 0x5}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000014c0)="b933c4ec4b81eefbd65c30181a319cd5c517a06bea7d39e284e3c934a1a9055f052647aaa6c660b84e0bf7d508eb67969d97adc61094e4bb39a6afe8fe766afe10dcad7ecdeaa1e4f0e1083e464fe042f280732b1eb1ba435e96c9159a7773372fd30a6200d2e63932a7d196f19dca7ed938ed818a68659074146f8894d77ba71eaf05d3170e", 0x86}, {&(0x7f0000001580)="b73f53994cee882d76ecad3f7d4e1870274ce4a508fc7d7a9e8f235a2c2674b793e0d2f399c16a8faf0fb6e5fe7cf4303facd7a61a0bd66b2717d676598d3d42decde2290def11ab5a8d1f28b170a03d095261b48380fafa77d93a7f9b3941d73dc1aebed0bca91be8611e0a6d357647527ab6caa00ccffb40cf6716b5052fb45a04a29be8bbde7ddfa744d9dd5395fc20366166fd42f0eca4d656536c0081602b5266f9f4c1de26954663375ba567f4be87022861eeddce6006af9fadfd5433daea6593", 0xc4}, {&(0x7f0000001680)="4f9859e0a1f60929f87657ac1aeccbd7431e64f822bc259c255ebcd636651567a77cdfdd647f12fe4b4440c06e3d16f7228c01c95e89558b893b7f3b5ea3348b9922e4e2d0fcf485e62b34b92f3616", 0x4f}, {&(0x7f0000001700)="510886e153", 0x5}, {&(0x7f0000001740)="4c2cbf873691704dd4f31f8a9656705bdfae8e33b119254cd73878e5d13e5bccacb186eba580ecf32221542a32828b5f0b6a5225109e2e443f633766902ea792f0174f3967ff05f929e9c62f8d32fde2c767f72ba2bab6b142985198974057d7407c28e1", 0x64}, {&(0x7f00000017c0)="a7c863b01246e37e250e2cb81df54c23efbd15e71ef7f0245d7f2b10c57ffd6fbf47a84f89fa7485020d15ef39d346959a4d3feac6e43757af83c2e7623457ccd5d4d62bca2d3757aa455cb75b3b8c821484a46290f2e085288f71ddb7c191efe48a4e765c9ea980ee935e7f", 0x6c}], 0x6, &(0x7f00000018c0)=[{0x58, 0x105, 0x7, "1948acd5d3b38fd052115d42458f3239247eb1c9a1456747a0b2cd72e0e467ef6a7a080f79099134306fba4124b25b3d79e6a433bf66647aafd5c506c4c8fe42f2d04b"}, {0x58, 0x114, 0x0, "52cb5540880292c32ff2c73a2ff919f73acbb2a4b641ae3d141bf27ee0867f0055f47696204cb7e29d941c8415eda345c5deb5bb00b896316ac5682796cd8dc77f03afe796"}], 0xb0}}], 0x3, 0x0) 03:35:44 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:44 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=&(0x7f00000001c0)="c586f411f0f5e712207ba0585ca0e9c34ac27d69c6584e685f248d08924e044e"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000240)=r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)='ip6gre0\x00'}, 0x30) syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x40) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r9 = socket(0x2, 0x3, 0xff) connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r10 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r10, 0x8007ffc) sendfile(r9, r10, 0x0, 0xffff) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000002c0)={r12}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000340)={r13, 0x41}, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept(r14, &(0x7f0000001840)=@in={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x80) r15 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000003200)={r17, 0x3}, &(0x7f0000003240)=0x8) getpgrp(0x0) r18 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r18}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r19 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r20, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r20, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r22, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r19, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r18, 0x0, r22}}, 0x8b) r23 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r24}], {0x10, 0x6}}, 0x2c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r25, 0x407, 0x0) write(r25, &(0x7f0000000340), 0x41395527) r26 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r27 = accept4$inet(r26, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r27, 0x0) r28 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r28, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r29 = socket(0x2, 0x3, 0xff) connect$inet(r29, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r30 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r30, 0x8007ffc) sendfile(r29, r30, 0x0, 0xffff) r31 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r31, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r31, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r30, 0x84, 0x7b, &(0x7f00000002c0)={r32}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r28, 0x84, 0x76, &(0x7f0000000340)={r33, 0x41}, 0x8) socketpair(0x3, 0x0, 0x9, &(0x7f0000001b00)) r34 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r35 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r35, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r34, 0x84, 0x11, &(0x7f0000003200)={r36, 0x3}, &(0x7f0000003240)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r37, 0x407, 0x0) write(r37, &(0x7f0000000340), 0x41395527) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x4, 0x8, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x66ae85f6}, [@jmp={0x5, 0x0, 0x4, 0x1, 0x8, 0x2c, 0x1}, @ldst={0x3, 0x2, 0x6, 0x1, 0xf4c3ced7ea81ed88, 0xfffffffffffffffc, 0x7ffffffffffffffa}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000001b80)='GPL\x00', 0x6, 0xe6, &(0x7f0000001bc0)=""/230, 0x41000, 0x6, [], 0x0, 0x2a, r37, 0x8, &(0x7f0000001cc0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001d00)={0x1, 0xa, 0x4, 0x4b}, 0x10}, 0x70) r38 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r38, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r39 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r39, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r38, 0x8004e500, &(0x7f0000000240)=r39) r40 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r40, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r41 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r41, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r40, 0x8004e500, &(0x7f0000000240)=r41) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r42, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r43 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r44 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r45 = fcntl$dupfd(r43, 0x0, r44) r46 = gettid() ioctl$BLKTRACESETUP(r45, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r46}) r47 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r48 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r48, 0x0, 0x0) r49 = getpgrp(0x0) waitid(0x0, r49, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r49, 0x9, &(0x7f00000001c0)=""/68) r50 = getpgid(r49) r51 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r51, 0x8904, &(0x7f0000000000)=0x0) r53 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r54 = openat$cgroup_ro(r53, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r55 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r56 = inotify_init1(0x0) r57 = gettid() fcntl$setown(r56, 0x8, r57) r58 = getpid() r59 = socket(0xa, 0x3, 0x8) r60 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r59, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r60, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r59, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r62 = gettid() waitid(0x83b895581628fca4, r62, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r59, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r61, @ANYRESDEC=r62]], 0xfffffffffffffe56}}, 0x20004850) r63 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r64 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r65 = dup2(r64, r63) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r65, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r65, 0xc08c5334, &(0x7f0000000200)) r66 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r66) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r66}, 0x0) kcmp(r66, r66, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r66, 0x0, 0x0) r67 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r66, r67, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r62, r65, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r68}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r58, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r57, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r55, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r54, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r52, r51, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r68}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r50, r48, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r46, r47, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r68}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r68}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001e00)={0xffffffffffffffff, r42, 0x0, 0x8, &(0x7f0000001dc0)='ip6gre0\x00', r68}, 0x30) geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) r69 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r70 = accept4$inet(r69, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r70, 0x0) r71 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r72 = accept4$inet(r71, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r72, 0x0) r73 = getpid() sched_setattr(r73, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r74 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r74, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r74, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@local, @in=@empty}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001fc0)=0xe8) fstat(r5, &(0x7f0000002000)) r75 = socket(0x2, 0x3, 0xff) connect$inet(r75, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) 03:35:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f758d6f1f8943", @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:44 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:44 executing program 2 (fault-call:8 fault-nth:0): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x20}) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) [ 681.148914] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 681.148914] program syz-executor.3 not setting count and/or reply_len properly 03:35:45 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:45 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:45 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:45 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0xfffffeb2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2e5}}}, 0x90) 03:35:45 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) [ 681.352643] FAULT_INJECTION: forcing a failure. [ 681.352643] name failslab, interval 1, probability 0, space 0, times 0 [ 681.371570] CPU: 1 PID: 8411 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 681.378513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.387950] Call Trace: [ 681.390543] dump_stack+0x138/0x197 [ 681.394181] should_fail.cold+0x10f/0x159 [ 681.398337] should_failslab+0xdb/0x130 03:35:45 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) [ 681.402316] kmem_cache_alloc_node+0x287/0x780 [ 681.406905] ? get_pid_task+0x98/0x140 [ 681.410801] copy_process.part.0+0x17d5/0x6a00 [ 681.415394] ? save_trace+0x290/0x290 [ 681.419201] ? proc_fail_nth_write+0x7d/0x180 [ 681.423692] ? proc_cwd_link+0x1b0/0x1b0 [ 681.423704] ? __f_unlock_pos+0x19/0x20 [ 681.423716] ? find_held_lock+0x35/0x130 [ 681.423731] ? __cleanup_sighand+0x50/0x50 [ 681.431737] ? lock_downgrade+0x740/0x740 [ 681.431756] _do_fork+0x19e/0xce0 [ 681.431770] ? fork_idle+0x280/0x280 03:35:45 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) [ 681.431784] ? fput+0xd4/0x150 [ 681.431794] ? SyS_write+0x15e/0x230 [ 681.431810] SyS_clone+0x37/0x50 [ 681.431817] ? sys_vfork+0x30/0x30 [ 681.431834] do_syscall_64+0x1e8/0x640 [ 681.469000] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 681.473853] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 681.479042] RIP: 0033:0x459f39 [ 681.482224] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 681.489939] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 681.497203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 681.504463] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 681.511723] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 681.518984] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() r6 = socket(0x2, 0x3, 0xff) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r7 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r7, 0x8007ffc) sendfile(r6, r7, 0x0, 0xffff) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={r9}, &(0x7f0000000300)=0x8) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x52, r10}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6f}, [@ldst={0x3fd, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) r14 = openat(r13, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r14, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:45 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b00") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:45 executing program 4 (fault-call:3 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:45 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:45 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:45 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) [ 681.974353] FAULT_INJECTION: forcing a failure. [ 681.974353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:35:45 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 682.028326] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 682.028326] program syz-executor.3 not setting count and/or reply_len properly [ 682.030111] CPU: 0 PID: 8434 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 682.051154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.060499] Call Trace: [ 682.063089] dump_stack+0x138/0x197 [ 682.066726] should_fail.cold+0x10f/0x159 [ 682.070870] ? __might_sleep+0x93/0xb0 03:35:45 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b00") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:45 executing program 4 (fault-call:3 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 682.074768] __alloc_pages_nodemask+0x1d6/0x7a0 [ 682.074781] ? __alloc_pages_slowpath+0x2930/0x2930 03:35:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) [ 682.074799] ? rcu_read_lock_sched_held+0x110/0x130 [ 682.074820] copy_process.part.0+0x26a/0x6a00 [ 682.074838] ? save_trace+0x290/0x290 [ 682.074848] ? proc_fail_nth_write+0x7d/0x180 [ 682.074857] ? proc_cwd_link+0x1b0/0x1b0 [ 682.074869] ? __f_unlock_pos+0x19/0x20 [ 682.074879] ? find_held_lock+0x35/0x130 [ 682.074894] ? __cleanup_sighand+0x50/0x50 [ 682.074903] ? lock_downgrade+0x740/0x740 [ 682.074923] _do_fork+0x19e/0xce0 [ 682.074937] ? fork_idle+0x280/0x280 [ 682.074951] ? fput+0xd4/0x150 [ 682.074961] ? SyS_write+0x15e/0x230 [ 682.074975] SyS_clone+0x37/0x50 [ 682.074984] ? sys_vfork+0x30/0x30 [ 682.074996] do_syscall_64+0x1e8/0x640 [ 682.075005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 682.075022] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 682.075029] RIP: 0033:0x459f39 [ 682.075035] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 682.075046] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 682.075052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 682.075058] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 682.075063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 682.075069] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 682.186531] FAULT_INJECTION: forcing a failure. [ 682.186531] name failslab, interval 1, probability 0, space 0, times 0 [ 682.186543] CPU: 1 PID: 8452 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 682.186548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.186552] Call Trace: [ 682.186567] dump_stack+0x138/0x197 [ 682.186582] should_fail.cold+0x10f/0x159 [ 682.186597] should_failslab+0xdb/0x130 [ 682.186608] kmem_cache_alloc+0x2d7/0x780 [ 682.186618] ? creds_are_invalid+0x48/0x110 [ 682.186627] ? __validate_process_creds+0x14c/0x200 [ 682.186645] prepare_creds+0x3e/0x380 [ 682.186661] copy_creds+0x7b/0x4f0 [ 682.186676] ? lockdep_init_map+0x9/0x10 [ 682.186688] copy_process.part.0+0x868/0x6a00 [ 682.186702] ? save_trace+0x290/0x290 [ 682.186711] ? proc_fail_nth_write+0x7d/0x180 [ 682.186719] ? proc_cwd_link+0x1b0/0x1b0 [ 682.186736] ? __f_unlock_pos+0x19/0x20 [ 682.186756] ? __cleanup_sighand+0x50/0x50 [ 682.186768] ? lock_downgrade+0x740/0x740 [ 682.186786] _do_fork+0x19e/0xce0 [ 682.186800] ? fork_idle+0x280/0x280 [ 682.186813] ? fput+0xd4/0x150 [ 682.186822] ? SyS_write+0x15e/0x230 [ 682.186837] SyS_clone+0x37/0x50 [ 682.186845] ? sys_vfork+0x30/0x30 [ 682.186857] do_syscall_64+0x1e8/0x640 [ 682.186867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 682.186881] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 682.186889] RIP: 0033:0x459f39 [ 682.186894] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 682.186909] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 682.186918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 682.186925] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 682.186932] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 682.186937] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r7 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1f, 0x248a00) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x95}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000004c0)={r9, @in6={{0xa, 0x4e24, 0xb2fd, @empty, 0x2}}}, &(0x7f00000002c0)=0x84) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r11, 0x407, 0x0) write(r11, &(0x7f0000000340), 0x41395527) r12 = openat(r11, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b00") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:46 executing program 4 (fault-call:3 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:46 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = open(0x0, 0x1a3204, 0x143) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) r11 = socket(0x2, 0x3, 0xff) connect$inet(r11, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r12 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r12, 0x8007ffc) sendfile(r11, r12, 0x0, 0xffff) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000002c0)={r14}, &(0x7f0000000300)=0x8) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r16 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r16, 0x84, 0x11, &(0x7f0000003200)={r18, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet6_mreq(r16, 0x29, 0x1b, &(0x7f0000000380)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r20, &(0x7f00000005c0)=[{&(0x7f0000000340)="67e0ea7cf2d83d2d5c5a94ccf771e9152cce9a7543f15eda9408414bccefa5428ffaee0dc45e", 0x26}, {&(0x7f0000000900)="43dc5309d1415ebb510b06f0e491152aeceaec1057edf08dca63fa5beba531665adbe6a568c7825b668511a30004333173a8072a9710fbc05aaf6ee1e253783efebce47f70ba027a6578087b6a14990e3c7d7bcf9a53c443d533048ad98a7773a2620b30d1e5337c6d7fae425cd13c69ce487cc12fd5ec5f79f81466f60a24d6cb8615e879bd0845edb0313163a2a1ce31554c90d24cd5c1", 0x98}, {&(0x7f0000001680)="1660e5efe9802719325faebd600b989e7ea5dbc62a46eea3af4ff9d3340ffeffffffffffffff6b44d82cc9c33af096c1f402122a9db8cec441baa74da4de120cda1f93da9181b50031dcf3e925183cbe5fce8c0b924cd24f2a7ad4926a5639dc95e8b8f5a4eb8e8e3509000000e4bd5b03835da7d924992534521761b92de297008493b811189a3891739cf61b3982e2147e007422909521e804584283367f6345ae5392e6a5beaec7dc5c19bd1b5b13f787433d786c8fff1e5950dc17713ca86a5227e286d264f791588d1b2492a416708dd813cb2100000000", 0xda}], 0x3, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r24, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r21, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r24, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r20, 0x8933, &(0x7f0000000400)={'team0\x00', r24}) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r28, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r29, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r26, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=ANY=[@ANYBLOB="74000000240007050000000000000000000000003506bc229984da2d7b0fb5f00dc8052745e8f5", @ANYRES32=r29, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', r29}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xe8) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r35, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r32, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r35, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = socket$netlink(0x10, 0x3, 0x0) r38 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r37, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r39, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r36, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r39, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) r41 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r41, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r41, 0x29, 0x22, &(0x7f0000000740)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000840)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000880)={@dev, @initdev, 0x0}, &(0x7f00000008c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000009c0)={@initdev, @initdev, 0x0}, &(0x7f0000000a00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r46 = socket$nl_route(0x10, 0x3, 0x0) r47 = socket$netlink(0x10, 0x3, 0x0) r48 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r48, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r48, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r47, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r49, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r46, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r49, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) r50 = socket$nl_route(0x10, 0x3, 0x0) r51 = socket$netlink(0x10, 0x3, 0x0) r52 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r52, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r52, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r51, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r53, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r50, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r53, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b00)=0x14) r56 = socket$nl_route(0x10, 0x3, 0x0) r57 = socket$netlink(0x10, 0x3, 0x0) r58 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r58, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r58, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r57, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r59, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r56, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r59, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'hwsim0\x00', 0x0}) r61 = socket$nl_route(0x10, 0x3, 0x0) r62 = socket$netlink(0x10, 0x3, 0x0) r63 = socket(0x10, 0x803, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r62, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r64, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r61, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r64, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000c80)=0xe8) r66 = socket$nl_route(0x10, 0x3, 0x0) r67 = socket$netlink(0x10, 0x3, 0x0) r68 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r68, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r68, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r67, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r69, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r66, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r69, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d00)=0x14) r71 = socket$nl_route(0x10, 0x3, 0x0) r72 = socket$netlink(0x10, 0x3, 0x0) r73 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r73, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r73, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r72, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010cf050700"/20, @ANYRES32=r74, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r71, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r74, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) r75 = open(0x0, 0x1a3204, 0x143) r76 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r77 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r77, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r76, 0x84, 0x11, &(0x7f0000003200)={r78, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r75, 0x84, 0x66, &(0x7f0000000040)={r78, 0x2}, &(0x7f0000000140)=0x8) getpeername$packet(r75, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208801}, 0xc, &(0x7f0000001600)={&(0x7f0000000dc0)={0x83c, 0x0, 0x63deafc5abc66726, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x134, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r31}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r35}, {0x16c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r40}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r42}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r43}}}]}}, {{0x8, 0x1, r44}, {0xfc, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r45}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r49}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r53}}}]}}, {{0x8, 0x1, r54}, {0x170, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r55}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r59}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r60}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0x21c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r64}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r65}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r69}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r70}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r74}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r79}}}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x800}, 0x4090050) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r80 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r80, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0x376, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r82 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r83 = dup3(r81, r82, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r83, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:46 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:46 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 682.868581] FAULT_INJECTION: forcing a failure. [ 682.868581] name failslab, interval 1, probability 0, space 0, times 0 [ 682.923157] CPU: 1 PID: 8474 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 682.930151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.930157] Call Trace: [ 682.930176] dump_stack+0x138/0x197 [ 682.930195] should_fail.cold+0x10f/0x159 [ 682.930212] should_failslab+0xdb/0x130 [ 682.930224] __kmalloc_track_caller+0x2ec/0x790 [ 682.930234] ? check_preemption_disabled+0x3c/0x250 [ 682.930246] ? prepare_creds+0x3e/0x380 [ 682.930258] ? selinux_cred_prepare+0x49/0xb0 [ 682.972015] kmemdup+0x27/0x60 [ 682.975220] selinux_cred_prepare+0x49/0xb0 [ 682.979488] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 682.979488] program syz-executor.3 not setting count and/or reply_len properly [ 682.979547] security_prepare_creds+0x7d/0xb0 [ 682.999903] prepare_creds+0x2cf/0x380 [ 682.999915] copy_creds+0x7b/0x4f0 [ 683.007318] ? lockdep_init_map+0x9/0x10 [ 683.011376] copy_process.part.0+0x868/0x6a00 [ 683.015855] ? save_trace+0x290/0x290 [ 683.019643] ? proc_fail_nth_write+0x7d/0x180 [ 683.024132] ? proc_cwd_link+0x1b0/0x1b0 [ 683.028185] ? __f_unlock_pos+0x19/0x20 [ 683.032153] ? __cleanup_sighand+0x50/0x50 [ 683.036366] ? lock_downgrade+0x740/0x740 [ 683.040524] _do_fork+0x19e/0xce0 [ 683.043968] ? fork_idle+0x280/0x280 [ 683.047662] ? fput+0xd4/0x150 [ 683.050834] ? SyS_write+0x15e/0x230 [ 683.054537] SyS_clone+0x37/0x50 [ 683.057886] ? sys_vfork+0x30/0x30 [ 683.061407] do_syscall_64+0x1e8/0x640 [ 683.065409] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:35:46 executing program 4 (fault-call:3 fault-nth:4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(0x0, 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:46 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) [ 683.070244] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 683.075424] RIP: 0033:0x459f39 [ 683.075430] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 683.075441] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 683.075447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 683.075453] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 683.075459] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 683.075465] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 683.231728] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 683.232082] FAULT_INJECTION: forcing a failure. [ 683.232082] name failslab, interval 1, probability 0, space 0, times 0 [ 683.287736] CPU: 1 PID: 8499 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 683.294700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.294705] Call Trace: [ 683.294721] dump_stack+0x138/0x197 [ 683.294739] should_fail.cold+0x10f/0x159 [ 683.294755] should_failslab+0xdb/0x130 [ 683.294769] kmem_cache_alloc+0x2d7/0x780 [ 683.294783] ? retire_userns_sysctls+0x90/0x90 [ 683.294799] create_user_ns+0x3ce/0xcd0 [ 683.294815] copy_creds+0x3e9/0x4f0 [ 683.294824] ? lockdep_init_map+0x9/0x10 [ 683.294837] copy_process.part.0+0x868/0x6a00 [ 683.294853] ? save_trace+0x290/0x290 [ 683.294862] ? proc_fail_nth_write+0x7d/0x180 [ 683.294872] ? proc_cwd_link+0x1b0/0x1b0 [ 683.294880] ? __f_unlock_pos+0x19/0x20 [ 683.294909] ? __cleanup_sighand+0x50/0x50 [ 683.294918] ? lock_downgrade+0x740/0x740 [ 683.294933] _do_fork+0x19e/0xce0 [ 683.294946] ? fork_idle+0x280/0x280 [ 683.294957] ? fput+0xd4/0x150 [ 683.310489] ? SyS_write+0x15e/0x230 [ 683.310506] SyS_clone+0x37/0x50 [ 683.310516] ? sys_vfork+0x30/0x30 [ 683.310530] do_syscall_64+0x1e8/0x640 [ 683.310539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 683.310555] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 683.310563] RIP: 0033:0x459f39 [ 683.310568] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 683.310579] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 683.338967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 683.338973] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 683.338979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 683.338985] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 683.492835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53008 sclass=netlink_route_socket pig=8484 comm=syz-executor.2 03:35:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d50104000001000315fe0000dcd88b68f379241a3384baa5b5db0700000068000aa89477b9a9a44c40896bd6850789073e03f81cefc3a30c85ebda2e1f614b6d54707f051a6400000000"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x9, 0x7fff, 0x5, @dev={[], 0xd}, 'nr0\x00'}) r9 = open(0x0, 0x1a3204, 0x143) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000003200)={r12, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r12, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000280)=0x4) r13 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r13, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(0x0, 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:47 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r2, r3, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:47 executing program 4 (fault-call:3 fault-nth:5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:47 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x7, "f975e72190a42aa8db1b0c270731c6f5c00cd06c97a5860f4dd291f3889aaee0", 0x2, 0x3}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(0x0, 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 683.767685] FAULT_INJECTION: forcing a failure. [ 683.767685] name failslab, interval 1, probability 0, space 0, times 0 [ 683.786883] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 683.786883] program syz-executor.3 not setting count and/or reply_len properly [ 683.814240] CPU: 0 PID: 8512 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 683.821193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.830545] Call Trace: [ 683.830563] dump_stack+0x138/0x197 [ 683.830582] should_fail.cold+0x10f/0x159 [ 683.830598] should_failslab+0xdb/0x130 [ 683.830611] __kmalloc_track_caller+0x2ec/0x790 [ 683.849551] ? __debug_object_init+0x171/0x8e0 [ 683.854137] ? setup_userns_sysctls+0x50/0x180 [ 683.854152] kmemdup+0x27/0x60 [ 683.854164] setup_userns_sysctls+0x50/0x180 [ 683.854178] create_user_ns+0x79c/0xcd0 [ 683.870286] copy_creds+0x3e9/0x4f0 [ 683.873915] ? lockdep_init_map+0x9/0x10 [ 683.877990] copy_process.part.0+0x868/0x6a00 [ 683.882493] ? save_trace+0x290/0x290 [ 683.886297] ? proc_fail_nth_write+0x7d/0x180 [ 683.890791] ? proc_cwd_link+0x1b0/0x1b0 [ 683.894853] ? __f_unlock_pos+0x19/0x20 [ 683.898835] ? __cleanup_sighand+0x50/0x50 [ 683.903078] ? lock_downgrade+0x740/0x740 [ 683.903094] _do_fork+0x19e/0xce0 [ 683.903107] ? fork_idle+0x280/0x280 [ 683.914392] ? fput+0xd4/0x150 [ 683.914404] ? SyS_write+0x15e/0x230 [ 683.914421] SyS_clone+0x37/0x50 [ 683.914429] ? sys_vfork+0x30/0x30 [ 683.914441] do_syscall_64+0x1e8/0x640 [ 683.932099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 683.936954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 683.942145] RIP: 0033:0x459f39 [ 683.945335] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 683.953048] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 683.960313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 03:35:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:47 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:47 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:47 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 683.967929] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 683.967938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 683.982463] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:47 executing program 4 (fault-call:3 fault-nth:6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 684.098329] FAULT_INJECTION: forcing a failure. [ 684.098329] name failslab, interval 1, probability 0, space 0, times 0 [ 684.110112] CPU: 0 PID: 8541 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 684.117056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.126416] Call Trace: [ 684.126436] dump_stack+0x138/0x197 [ 684.132625] should_fail.cold+0x10f/0x159 [ 684.132647] should_failslab+0xdb/0x130 [ 684.132660] __kmalloc+0x2f0/0x7a0 [ 684.132671] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 684.149726] ? rcu_read_lock_sched_held+0x110/0x130 [ 684.154741] ? __register_sysctl_table+0xc7/0xe50 [ 684.159564] __register_sysctl_table+0xc7/0xe50 [ 684.164222] ? memcpy+0x46/0x50 [ 684.167501] setup_userns_sysctls+0xbc/0x180 [ 684.171954] create_user_ns+0x79c/0xcd0 [ 684.175928] copy_creds+0x3e9/0x4f0 [ 684.179540] ? lockdep_init_map+0x9/0x10 [ 684.183591] copy_process.part.0+0x868/0x6a00 [ 684.188081] ? save_trace+0x290/0x290 [ 684.191873] ? proc_fail_nth_write+0x7d/0x180 [ 684.196359] ? proc_cwd_link+0x1b0/0x1b0 [ 684.200407] ? __f_unlock_pos+0x19/0x20 [ 684.204400] ? __cleanup_sighand+0x50/0x50 [ 684.208614] ? lock_downgrade+0x740/0x740 [ 684.212746] _do_fork+0x19e/0xce0 [ 684.216185] ? fork_idle+0x280/0x280 [ 684.219881] ? fput+0xd4/0x150 [ 684.223062] ? SyS_write+0x15e/0x230 [ 684.226755] SyS_clone+0x37/0x50 [ 684.230098] ? sys_vfork+0x30/0x30 [ 684.233647] do_syscall_64+0x1e8/0x640 [ 684.237521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 684.242349] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 684.247514] RIP: 0033:0x459f39 [ 684.250680] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 684.258366] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 684.265613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 684.272861] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 684.280120] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 684.287370] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000000000000000000000000000ed2b1703efdb806f0ad073589ad79060350b230e6daec95accfdd38f84ae35c603ef4c012eec1a69a83bbb39aff68a171306d400000000000000b33cf75b8fa7f0f70e740a3616bd205f2af50193e3819f9b6de9ac1a830a6cad43ca243082e9eea3c89f718fe80f7ac32c5fa398cb43b98ae1b635b7e5f82232aa392c22fd296ecc55e8771ce63468de36351646af3ab0663f699ff346c6dab60eed02459a32366d928ff62587451340e676e9dd5ec4887b388f2b57ab9cc7abaa3a490f261aff05b169f9a8c5192f4b6d7017290f3fde65d10d594a223f6a9944d52bc20aac3bbf5a46bf3ab8a9d49b45eb0d41183d3f1420d2d72d90f015b93984aaa640a1ef2de75ea8ad1f288fb33425a49b2cf325f99d89dd1621ba7d46b232ad98c9e80c14f87b1fa7c9ab5a7b391b85d77e664ec6dbd9813455ac3ef71bb78f5e87420332bea970005d5e5f9f10b128cc0332c1fc335bf3fa532cf119a73adaee7adb8c63641b375304b03f122a99fcedc5497b38e8533787"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:48 executing program 4 (fault-call:3 fault-nth:7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:48 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:48 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd96, &(0x7f00000bfff0)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000000, 0x2}}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x70bd2d, 0x7, [0x1ff]}}, @coaddr={0x14, 0xe, @in6=@remote}, @sa={0x0, 0x6, {{@in6=@local, @in=@remote, 0x4e20, 0x380, 0x4e20, 0x7fff, 0xa, 0xc0, 0xa0, 0x71}, {@in6=@dev={0xfe, 0x80, [], 0x19}, 0x4d5, 0x32}, @in6=@empty, {0xa3, 0x5, 0x9dc, 0x1, 0x3, 0x7ff, 0x6, 0x40}, {0x800, 0x8, 0x5, 0x10001}, {0x9, 0x3ff, 0x81}, 0x70bd2d, 0x3502, 0x2, 0x1, 0x45, 0x3}}, @replay_thresh={0x8, 0xb, 0xcf}]}, 0xfc}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'batadv0\x00', {0x2, 0x4e24, @empty}}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 684.639964] FAULT_INJECTION: forcing a failure. [ 684.639964] name failslab, interval 1, probability 0, space 0, times 0 [ 684.660692] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 684.660692] program syz-executor.3 not setting count and/or reply_len properly 03:35:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) 03:35:48 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 684.682277] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 684.716650] CPU: 1 PID: 8556 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 684.723617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.732882] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 684.732966] Call Trace: [ 684.744118] dump_stack+0x138/0x197 [ 684.747752] should_fail.cold+0x10f/0x159 [ 684.751906] should_failslab+0xdb/0x130 [ 684.755894] __kmalloc_track_caller+0x2ec/0x790 03:35:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) [ 684.755907] ? __debug_object_init+0x171/0x8e0 03:35:48 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) ptrace$getregset(0x4204, 0x0, 0x1c46aa66664a30b9, &(0x7f0000000180)={&(0x7f0000000340)=""/4096, 0x1000}) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x8e4c04, 0x100) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000280)=0x5) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000000)={[0x0, 0x1000, 0x5a349b0226524f7f, 0x2], 0xa9, 0x2, 0x9}) [ 684.755922] ? setup_userns_sysctls+0x50/0x180 [ 684.755934] kmemdup+0x27/0x60 [ 684.755946] setup_userns_sysctls+0x50/0x180 [ 684.755960] create_user_ns+0x79c/0xcd0 [ 684.755978] copy_creds+0x3e9/0x4f0 [ 684.755987] ? lockdep_init_map+0x9/0x10 [ 684.756001] copy_process.part.0+0x868/0x6a00 [ 684.756017] ? save_trace+0x290/0x290 [ 684.756026] ? proc_fail_nth_write+0x7d/0x180 [ 684.756035] ? proc_cwd_link+0x1b0/0x1b0 [ 684.756046] ? __f_unlock_pos+0x19/0x20 [ 684.756064] ? __cleanup_sighand+0x50/0x50 [ 684.756090] ? lock_downgrade+0x740/0x740 [ 684.756105] _do_fork+0x19e/0xce0 [ 684.756119] ? fork_idle+0x280/0x280 [ 684.756138] ? fput+0xd4/0x150 [ 684.756148] ? SyS_write+0x15e/0x230 [ 684.756163] SyS_clone+0x37/0x50 [ 684.756171] ? sys_vfork+0x30/0x30 [ 684.756184] do_syscall_64+0x1e8/0x640 [ 684.756193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 684.756209] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 684.756217] RIP: 0033:0x459f39 [ 684.756222] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 684.756233] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 684.756239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 684.756245] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 684.756250] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 684.756255] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d38150ddfeb880fd3758b5dcf40e73ae3e0a3f099d9ade925419c89aa647f887cb4d92691c5c2b960c442a289bb6b128e99308464f8c1f31d4140e72e22ad9d135a7a91e354a4e2d90d8f33a5c57910863f4b0ba4234aae65f9b2a8a90cc77ca34b", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x10000, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x2, 0x2, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x30400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = openat(r10, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r11, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:49 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) 03:35:49 executing program 4 (fault-call:3 fault-nth:8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:49 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000080000000000000ff010000000000000000000000000000000000000000000000000a00000000000000cb195098c6619ec644ea396f9a4e259ad036e5ea161b203f4ee9cf29c58565fcc7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = open(0x0, 0x1a3204, 0x143) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000003200)={r6, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r6, 0x2}, &(0x7f0000000140)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r7, 0x10, 0x0, @ib={0x1b, 0x5, 0x5, {"93de7be08c202821ba31f26ab26c8f54"}, 0x4314, 0x10000, 0x7fffffff}}}, 0xa0) r8 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:49 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 685.505326] FAULT_INJECTION: forcing a failure. [ 685.505326] name failslab, interval 1, probability 0, space 0, times 0 [ 685.540430] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; 03:35:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) 03:35:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 685.540430] program syz-executor.3 not setting count and/or reply_len properly [ 685.574954] CPU: 1 PID: 8597 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 685.581950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.591319] Call Trace: [ 685.593937] dump_stack+0x138/0x197 [ 685.597601] should_fail.cold+0x10f/0x159 [ 685.601791] should_failslab+0xdb/0x130 03:35:49 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 685.605792] __kmalloc+0x2f0/0x7a0 [ 685.609356] ? lock_downgrade+0x740/0x740 [ 685.613526] ? find_entry.isra.0+0x1e0/0x1e0 [ 685.617984] ? __register_sysctl_table+0x79b/0xe50 [ 685.622943] __register_sysctl_table+0x79b/0xe50 [ 685.627727] setup_userns_sysctls+0xbc/0x180 [ 685.632173] create_user_ns+0x79c/0xcd0 [ 685.636171] copy_creds+0x3e9/0x4f0 [ 685.639828] ? lockdep_init_map+0x9/0x10 [ 685.643912] copy_process.part.0+0x868/0x6a00 [ 685.648438] ? save_trace+0x290/0x290 03:35:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 685.652261] ? proc_fail_nth_write+0x7d/0x180 [ 685.656776] ? proc_cwd_link+0x1b0/0x1b0 [ 685.660848] ? __f_unlock_pos+0x19/0x20 [ 685.664846] ? __cleanup_sighand+0x50/0x50 [ 685.669101] ? lock_downgrade+0x740/0x740 [ 685.674229] _do_fork+0x19e/0xce0 [ 685.674248] ? fork_idle+0x280/0x280 [ 685.674262] ? fput+0xd4/0x150 [ 685.674273] ? SyS_write+0x15e/0x230 [ 685.681435] SyS_clone+0x37/0x50 [ 685.681445] ? sys_vfork+0x30/0x30 [ 685.681461] do_syscall_64+0x1e8/0x640 [ 685.681471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 685.681487] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 685.681494] RIP: 0033:0x459f39 [ 685.681500] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 685.681510] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 685.681515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 685.681521] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 685.681526] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 03:35:49 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x2) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000ccc100000000000001e000000100000000000000000000000000000000000000000a000000000000005a8432c45d8a6212d3e66a94f010ea82be595c416b44a941846b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 685.681531] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 685.756325] sysctl could not get directory: //user -12 [ 685.766929] CPU: 1 PID: 8597 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 685.773895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.783264] Call Trace: [ 685.785870] dump_stack+0x138/0x197 [ 685.789511] ? trace_hardirqs_on+0xd/0x10 [ 685.793687] __register_sysctl_table+0x762/0xe50 [ 685.798472] setup_userns_sysctls+0xbc/0x180 [ 685.802902] create_user_ns+0x79c/0xcd0 [ 685.806893] copy_creds+0x3e9/0x4f0 [ 685.810529] ? lockdep_init_map+0x9/0x10 [ 685.814605] copy_process.part.0+0x868/0x6a00 [ 685.819115] ? save_trace+0x290/0x290 [ 685.819130] ? proc_fail_nth_write+0x7d/0x180 [ 685.819141] ? proc_cwd_link+0x1b0/0x1b0 [ 685.827417] ? __f_unlock_pos+0x19/0x20 [ 685.827439] ? __cleanup_sighand+0x50/0x50 [ 685.827452] ? lock_downgrade+0x740/0x740 [ 685.827469] _do_fork+0x19e/0xce0 [ 685.827482] ? fork_idle+0x280/0x280 [ 685.827495] ? fput+0xd4/0x150 [ 685.835505] ? SyS_write+0x15e/0x230 [ 685.835524] SyS_clone+0x37/0x50 [ 685.835534] ? sys_vfork+0x30/0x30 [ 685.835547] do_syscall_64+0x1e8/0x640 [ 685.835557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 685.843919] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 685.843929] RIP: 0033:0x459f39 [ 685.843935] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 685.843946] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 685.843952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 685.843958] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 685.843964] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 685.843969] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) dup3(r7, r0, 0x180000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:50 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) ptrace$getregset(0x4204, 0x0, 0x1c46aa66664a30b9, &(0x7f0000000180)={&(0x7f0000000340)=""/4096, 0x1000}) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x8e4c04, 0x100) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000280)=0x5) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000000)={[0x0, 0x1000, 0x5a349b0226524f7f, 0x2], 0xa9, 0x2, 0x9}) 03:35:50 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:50 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:50 executing program 4 (fault-call:3 fault-nth:9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:50 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0xe}, 0x0, 0x2}, 0x20) [ 686.393814] FAULT_INJECTION: forcing a failure. [ 686.393814] name failslab, interval 1, probability 0, space 0, times 0 [ 686.425854] CPU: 0 PID: 8632 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 686.432835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.442195] Call Trace: [ 686.444790] dump_stack+0x138/0x197 [ 686.448431] should_fail.cold+0x10f/0x159 [ 686.452589] should_failslab+0xdb/0x130 [ 686.452602] kmem_cache_alloc+0x2d7/0x780 [ 686.452616] ? lockdep_init_map+0x9/0x10 [ 686.460709] ? debug_mutex_init+0x2d/0x5a [ 686.460725] dup_fd+0x85/0xa40 [ 686.460745] copy_process.part.0+0x1b5a/0x6a00 [ 686.460759] ? save_trace+0x290/0x290 [ 686.460770] ? proc_fail_nth_write+0x7d/0x180 [ 686.460779] ? proc_cwd_link+0x1b0/0x1b0 [ 686.460797] ? __cleanup_sighand+0x50/0x50 [ 686.460805] ? lock_downgrade+0x740/0x740 [ 686.460820] _do_fork+0x19e/0xce0 [ 686.493356] ? fork_idle+0x280/0x280 [ 686.493385] ? fput+0xd4/0x150 [ 686.493396] ? SyS_write+0x15e/0x230 [ 686.499229] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 686.499229] program syz-executor.3 not setting count and/or reply_len properly [ 686.500973] SyS_clone+0x37/0x50 [ 686.500983] ? sys_vfork+0x30/0x30 [ 686.500998] do_syscall_64+0x1e8/0x640 [ 686.501007] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:35:50 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8010000190000080000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) epoll_wait(r3, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r7 = dup3(r2, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x42) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) r8 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r8, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000240)=r9) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000180)) 03:35:50 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 686.501023] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 686.501035] RIP: 0033:0x459f39 [ 686.507907] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 686.507920] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 686.507926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 686.507937] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 686.507943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 03:35:50 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:50 executing program 4 (fault-call:3 fault-nth:10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 686.507950] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 686.692225] FAULT_INJECTION: forcing a failure. [ 686.692225] name failslab, interval 1, probability 0, space 0, times 0 [ 686.722202] CPU: 0 PID: 8658 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 686.729233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.729238] Call Trace: [ 686.729253] dump_stack+0x138/0x197 [ 686.729270] should_fail.cold+0x10f/0x159 [ 686.748943] should_failslab+0xdb/0x130 [ 686.752914] kmem_cache_alloc_trace+0x2e9/0x790 [ 686.757582] ? lock_downgrade+0x740/0x740 [ 686.761729] alloc_fdtable+0x7f/0x280 [ 686.765519] dup_fd+0x693/0xa40 [ 686.765538] copy_process.part.0+0x1b5a/0x6a00 [ 686.773368] ? save_trace+0x290/0x290 [ 686.773379] ? proc_fail_nth_write+0x7d/0x180 [ 686.773388] ? proc_cwd_link+0x1b0/0x1b0 [ 686.773409] ? __cleanup_sighand+0x50/0x50 [ 686.789939] ? lock_downgrade+0x740/0x740 [ 686.794102] _do_fork+0x19e/0xce0 [ 686.797558] ? fork_idle+0x280/0x280 [ 686.801275] ? fput+0xd4/0x150 [ 686.804456] ? SyS_write+0x15e/0x230 [ 686.808158] SyS_clone+0x37/0x50 [ 686.811510] ? sys_vfork+0x30/0x30 [ 686.815039] do_syscall_64+0x1e8/0x640 [ 686.818904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 686.823731] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 686.828920] RIP: 0033:0x459f39 [ 686.832091] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 686.839787] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 686.847085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 686.854339] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 686.861592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 686.868838] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in6=@mcast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = openat(r7, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:51 executing program 4 (fault-call:3 fault-nth:11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) 03:35:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, 0x0, 0x0) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:51 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:51 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000000)="47ac5ddf80d993f2fd6e1099ad93c88f7f2c54434ec8fd1d9bfa6d8d253769e91f97e0b1ab374771f8e5ba340babd98f302da16567380c8d2c585c709781ed7f0fb6a5387bdbf173059d2f205f4f49fe21c577ec33deff0b69bb5756cec4f9ec1759b613cfe6c163736c367f9b6b563c4c98669e33", 0x75, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 687.328162] FAULT_INJECTION: forcing a failure. [ 687.328162] name failslab, interval 1, probability 0, space 0, times 0 03:35:51 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 687.392475] CPU: 1 PID: 8672 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 687.399467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.408830] Call Trace: [ 687.408853] dump_stack+0x138/0x197 [ 687.408874] should_fail.cold+0x10f/0x159 [ 687.408892] should_failslab+0xdb/0x130 [ 687.423215] kmem_cache_alloc_trace+0x2e9/0x790 [ 687.423232] ? lock_downgrade+0x740/0x740 [ 687.432043] alloc_fdtable+0x7f/0x280 [ 687.435862] dup_fd+0x693/0xa40 [ 687.439165] copy_process.part.0+0x1b5a/0x6a00 [ 687.443865] ? save_trace+0x290/0x290 [ 687.447682] ? proc_fail_nth_write+0x7d/0x180 [ 687.452207] ? proc_cwd_link+0x1b0/0x1b0 [ 687.456289] ? __cleanup_sighand+0x50/0x50 [ 687.460537] ? lock_downgrade+0x740/0x740 [ 687.464728] _do_fork+0x19e/0xce0 [ 687.464746] ? fork_idle+0x280/0x280 [ 687.471928] ? fput+0xd4/0x150 [ 687.475132] ? SyS_write+0x15e/0x230 [ 687.478861] SyS_clone+0x37/0x50 [ 687.482232] ? sys_vfork+0x30/0x30 [ 687.482250] do_syscall_64+0x1e8/0x640 [ 687.482260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 687.482277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 687.482287] RIP: 0033:0x459f39 [ 687.482291] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 687.482300] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 687.482305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 687.525544] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 687.532805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 687.540068] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:51 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:51 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, 0x0, 0x0) [ 687.566560] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55680 sclass=netlink_xfrm_socket pig=8689 comm=syz-executor.2 [ 687.615720] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55680 sclass=netlink_xfrm_socket pig=8695 comm=syz-executor.2 03:35:52 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/252) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/290], 0xb8}, 0x1, 0x0, 0x0, 0x4018c05}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) fsetxattr$security_smack_transmute(r6, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:52 executing program 4 (fault-call:3 fault-nth:12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, 0x0, 0x0) 03:35:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:52 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 688.257257] FAULT_INJECTION: forcing a failure. [ 688.257257] name failslab, interval 1, probability 0, space 0, times 0 [ 688.280541] CPU: 0 PID: 8714 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 688.287529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.296907] Call Trace: [ 688.299548] dump_stack+0x138/0x197 [ 688.303200] should_fail.cold+0x10f/0x159 [ 688.307374] should_failslab+0xdb/0x130 [ 688.309529] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 688.309529] program syz-executor.3 not setting count and/or reply_len properly [ 688.311365] kmem_cache_alloc_node_trace+0x280/0x770 [ 688.311382] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 688.311396] __kmalloc_node+0x3d/0x80 [ 688.311411] kvmalloc_node+0x4e/0xe0 [ 688.311429] alloc_fdtable+0xcf/0x280 [ 688.349188] dup_fd+0x693/0xa40 [ 688.352501] copy_process.part.0+0x1b5a/0x6a00 [ 688.357106] ? save_trace+0x290/0x290 [ 688.357121] ? proc_fail_nth_write+0x7d/0x180 [ 688.357132] ? proc_cwd_link+0x1b0/0x1b0 [ 688.369502] ? __cleanup_sighand+0x50/0x50 [ 688.373757] ? lock_downgrade+0x740/0x740 [ 688.377926] _do_fork+0x19e/0xce0 [ 688.381394] ? fork_idle+0x280/0x280 [ 688.385117] ? fput+0xd4/0x150 [ 688.388317] ? SyS_write+0x15e/0x230 [ 688.392045] SyS_clone+0x37/0x50 [ 688.395416] ? sys_vfork+0x30/0x30 [ 688.398969] do_syscall_64+0x1e8/0x640 [ 688.402885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 688.402904] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 688.412949] RIP: 0033:0x459f39 [ 688.416140] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 688.423857] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 688.431138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 688.438420] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 688.445700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:52 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 688.452984] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:52 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_UNALIGN(0x6, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:52 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r8, r9, 0x0) 03:35:52 executing program 4 (fault-call:3 fault-nth:13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:52 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 689.054652] FAULT_INJECTION: forcing a failure. [ 689.054652] name failslab, interval 1, probability 0, space 0, times 0 [ 689.092570] CPU: 1 PID: 8744 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 689.099562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.108938] Call Trace: [ 689.108963] dump_stack+0x138/0x197 [ 689.108984] should_fail.cold+0x10f/0x159 [ 689.109004] should_failslab+0xdb/0x130 [ 689.109023] kmem_cache_alloc+0x2d7/0x780 [ 689.109035] ? dup_fd+0x533/0xa40 [ 689.109051] copy_fs_struct+0x43/0x2d0 [ 689.109065] copy_process.part.0+0x3924/0x6a00 [ 689.109082] ? save_trace+0x290/0x290 [ 689.113859] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 689.113859] program syz-executor.3 not setting count and/or reply_len properly [ 689.115293] ? proc_fail_nth_write+0x7d/0x180 [ 689.115306] ? proc_cwd_link+0x1b0/0x1b0 [ 689.115333] ? __cleanup_sighand+0x50/0x50 [ 689.123438] ? lock_downgrade+0x740/0x740 [ 689.123458] _do_fork+0x19e/0xce0 [ 689.123474] ? fork_idle+0x280/0x280 [ 689.123490] ? fput+0xd4/0x150 [ 689.179538] ? SyS_write+0x15e/0x230 [ 689.179557] SyS_clone+0x37/0x50 [ 689.179567] ? sys_vfork+0x30/0x30 [ 689.179581] do_syscall_64+0x1e8/0x640 [ 689.179591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 689.186479] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 689.186490] RIP: 0033:0x459f39 [ 689.186496] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 689.186508] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 689.186513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 689.186519] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 689.186527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 03:35:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, r9, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x0, 0x2, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) r13 = openat(r12, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r13, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:53 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) 03:35:53 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:53 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0x4300, "055839856163e29ce7a4ff867569913c26a11f7d570212fbe1d5063dff11200e"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r2, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0xfc}, 0x0, 0x1, 0x3}, 0x20) 03:35:53 executing program 4 (fault-call:3 fault-nth:14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 689.214216] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:53 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) 03:35:53 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@local, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f8}, 0x20) 03:35:53 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 689.342943] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 689.342943] program syz-executor.3 not setting count and/or reply_len properly [ 689.371738] FAULT_INJECTION: forcing a failure. [ 689.371738] name failslab, interval 1, probability 0, space 0, times 0 [ 689.400722] CPU: 1 PID: 8766 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 689.407709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.417087] Call Trace: [ 689.419697] dump_stack+0x138/0x197 [ 689.423351] should_fail.cold+0x10f/0x159 [ 689.427516] should_failslab+0xdb/0x130 [ 689.431502] kmem_cache_alloc+0x2d7/0x780 [ 689.431519] ? _raw_spin_unlock+0x2d/0x50 [ 689.431539] copy_process.part.0+0x3987/0x6a00 [ 689.431555] ? save_trace+0x290/0x290 [ 689.439836] ? proc_fail_nth_write+0x7d/0x180 [ 689.439848] ? proc_cwd_link+0x1b0/0x1b0 [ 689.439872] ? __cleanup_sighand+0x50/0x50 [ 689.439886] ? lock_downgrade+0x740/0x740 [ 689.452748] _do_fork+0x19e/0xce0 [ 689.452764] ? fork_idle+0x280/0x280 [ 689.452781] ? fput+0xd4/0x150 [ 689.452790] ? SyS_write+0x15e/0x230 [ 689.452802] SyS_clone+0x37/0x50 [ 689.452811] ? sys_vfork+0x30/0x30 [ 689.452826] do_syscall_64+0x1e8/0x640 [ 689.452836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 689.452853] entry_SYSCALL_64_after_hwframe+0x42/0xb7 03:35:53 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:53 executing program 4 (fault-call:3 fault-nth:15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 689.465697] RIP: 0033:0x459f39 [ 689.476016] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 689.476030] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 689.476036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 689.476042] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 689.476048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 689.476054] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 689.655384] FAULT_INJECTION: forcing a failure. [ 689.655384] name failslab, interval 1, probability 0, space 0, times 0 [ 689.715426] CPU: 1 PID: 8786 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 689.722412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.731782] Call Trace: [ 689.734399] dump_stack+0x138/0x197 [ 689.738066] should_fail.cold+0x10f/0x159 [ 689.742240] should_failslab+0xdb/0x130 [ 689.746241] kmem_cache_alloc+0x2d7/0x780 [ 689.750400] ? _raw_spin_unlock+0x2d/0x50 [ 689.754538] copy_process.part.0+0x3987/0x6a00 [ 689.759108] ? save_trace+0x290/0x290 [ 689.762893] ? proc_fail_nth_write+0x7d/0x180 [ 689.767424] ? proc_cwd_link+0x1b0/0x1b0 [ 689.771476] ? __cleanup_sighand+0x50/0x50 [ 689.775694] ? lock_downgrade+0x740/0x740 [ 689.779825] _do_fork+0x19e/0xce0 [ 689.783302] ? fork_idle+0x280/0x280 [ 689.787003] ? fput+0xd4/0x150 [ 689.790176] ? SyS_write+0x15e/0x230 [ 689.793928] SyS_clone+0x37/0x50 [ 689.797276] ? sys_vfork+0x30/0x30 [ 689.800808] do_syscall_64+0x1e8/0x640 [ 689.804678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 689.809508] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 689.814795] RIP: 0033:0x459f39 [ 689.817970] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 689.826529] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 689.833802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 689.841054] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 689.848305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 689.855601] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:53 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:53 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:53 executing program 4 (fault-call:3 fault-nth:16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d313a81a3fbcaee3c9d63965c3ed8bcb561969860abbaf42b415ca85ea12edd421f2f4b27cac1310fd42a9b83f5110b0c5a74747a2a4a2c", @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) r10 = socket(0x2, 0x3, 0xff) connect$inet(r10, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r11 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r11, 0x8007ffc) sendfile(r10, r11, 0x0, 0xffff) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000000280)=""/102, &(0x7f0000000040)=0x66) 03:35:54 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 690.165574] FAULT_INJECTION: forcing a failure. [ 690.165574] name failslab, interval 1, probability 0, space 0, times 0 [ 690.191414] CPU: 0 PID: 8804 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 690.198396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.207770] Call Trace: [ 690.210381] dump_stack+0x138/0x197 [ 690.214031] should_fail.cold+0x10f/0x159 [ 690.218195] should_failslab+0xdb/0x130 [ 690.222196] kmem_cache_alloc+0x2d7/0x780 [ 690.226366] ? selinux_capable+0x36/0x40 [ 690.230448] create_new_namespaces+0x34/0x720 [ 690.234951] ? ns_capable_common+0x12c/0x160 [ 690.239377] copy_namespaces+0x284/0x310 [ 690.243456] copy_process.part.0+0x2603/0x6a00 [ 690.248061] ? proc_fail_nth_write+0x7d/0x180 [ 690.252564] ? proc_cwd_link+0x1b0/0x1b0 [ 690.256647] ? __cleanup_sighand+0x50/0x50 [ 690.260887] ? lock_downgrade+0x740/0x740 [ 690.265033] _do_fork+0x19e/0xce0 [ 690.265046] ? fork_idle+0x280/0x280 [ 690.265060] ? fput+0xd4/0x150 [ 690.275388] ? SyS_write+0x15e/0x230 [ 690.279115] SyS_clone+0x37/0x50 [ 690.282486] ? sys_vfork+0x30/0x30 [ 690.286038] do_syscall_64+0x1e8/0x640 [ 690.289935] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 690.294805] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 690.300009] RIP: 0033:0x459f39 [ 690.303203] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 03:35:54 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) 03:35:54 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000000)=""/100, &(0x7f0000000180)=0x64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r2, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:54 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 690.311006] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 690.318289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 690.325561] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 690.325567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 690.325572] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 690.349315] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 690.349315] program syz-executor.3 not setting count and/or reply_len properly 03:35:54 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x90) [ 690.459817] IPVS: length: 102 != 8 03:35:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat(r8, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:54 executing program 4 (fault-call:3 fault-nth:17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:54 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:54 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20400, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x7, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r4 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r4, 0x8007ffc) sendfile(r3, r4, 0x0, 0xffff) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={r6}, &(0x7f0000000300)=0x8) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000180)=0x84d, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev, 0x10000, 0x0, 0x3}, 0x20) 03:35:54 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd}}, 0x90) 03:35:54 executing program 0: socket$inet6(0xa, 0x80002, 0x0) r0 = open(0x0, 0x1a3204, 0x143) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003200)={r4, 0x3}, &(0x7f0000003240)=0x8) r5 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r4, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 691.055656] FAULT_INJECTION: forcing a failure. [ 691.055656] name failslab, interval 1, probability 0, space 0, times 0 [ 691.076313] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 691.076313] program syz-executor.3 not setting count and/or reply_len properly [ 691.097289] CPU: 0 PID: 8855 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 691.104265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.104273] Call Trace: [ 691.104293] dump_stack+0x138/0x197 [ 691.104315] should_fail.cold+0x10f/0x159 [ 691.104332] should_failslab+0xdb/0x130 [ 691.104350] kmem_cache_alloc_trace+0x2e9/0x790 [ 691.104361] ? _raw_spin_unlock_irq+0x28/0x90 [ 691.104374] ? trace_hardirqs_on_caller+0x400/0x590 [ 691.104393] inc_ucount+0x3db/0x710 [ 691.104402] ? create_new_namespaces+0x34/0x720 [ 691.104413] ? retire_userns_sysctls+0x90/0x90 03:35:55 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 691.104423] ? refcount_inc_not_zero+0x88/0xe0 [ 691.104433] ? copy_mnt_ns+0x47/0x8c0 [ 691.104446] copy_utsname+0xd3/0x330 [ 691.104458] create_new_namespaces+0x153/0x720 [ 691.104468] ? ns_capable_common+0x12c/0x160 [ 691.104489] copy_namespaces+0x284/0x310 [ 691.104504] copy_process.part.0+0x2603/0x6a00 [ 691.104522] ? proc_fail_nth_write+0x7d/0x180 [ 691.104531] ? proc_cwd_link+0x1b0/0x1b0 [ 691.104549] ? __cleanup_sighand+0x50/0x50 [ 691.104557] ? lock_downgrade+0x740/0x740 [ 691.104571] _do_fork+0x19e/0xce0 03:35:55 executing program 4 (fault-call:3 fault-nth:18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 691.104583] ? fork_idle+0x280/0x280 [ 691.150704] ? fput+0xd4/0x150 [ 691.150718] ? SyS_write+0x15e/0x230 [ 691.150736] SyS_clone+0x37/0x50 [ 691.150743] ? sys_vfork+0x30/0x30 [ 691.150757] do_syscall_64+0x1e8/0x640 [ 691.150766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 691.150783] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 691.193564] RIP: 0033:0x459f39 [ 691.201916] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 691.201926] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 691.201930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 691.201935] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 691.201939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 691.201943] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 691.255239] FAULT_INJECTION: forcing a failure. [ 691.255239] name failslab, interval 1, probability 0, space 0, times 0 [ 691.255252] CPU: 0 PID: 8866 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 691.255259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.255262] Call Trace: [ 691.255277] dump_stack+0x138/0x197 [ 691.255297] should_fail.cold+0x10f/0x159 [ 691.311873] should_failslab+0xdb/0x130 [ 691.311889] kmem_cache_alloc_trace+0x2e9/0x790 [ 691.311903] ? retire_userns_sysctls+0x90/0x90 [ 691.311917] ? refcount_inc_not_zero+0x88/0xe0 [ 691.326231] ? copy_mnt_ns+0x47/0x8c0 [ 691.335458] copy_utsname+0x119/0x330 [ 691.335476] create_new_namespaces+0x153/0x720 [ 691.343851] ? ns_capable_common+0x12c/0x160 [ 691.343867] copy_namespaces+0x284/0x310 [ 691.352224] copy_process.part.0+0x2603/0x6a00 [ 691.352243] ? proc_fail_nth_write+0x7d/0x180 [ 691.352252] ? proc_cwd_link+0x1b0/0x1b0 [ 691.352270] ? __cleanup_sighand+0x50/0x50 [ 691.352283] ? lock_downgrade+0x740/0x740 [ 691.360729] _do_fork+0x19e/0xce0 [ 691.360743] ? fork_idle+0x280/0x280 [ 691.360757] ? fput+0xd4/0x150 [ 691.360768] ? SyS_write+0x15e/0x230 [ 691.396353] SyS_clone+0x37/0x50 03:35:55 executing program 0: socket$inet6(0xa, 0x80002, 0x0) r0 = open(0x0, 0x1a3204, 0x143) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003200)={r4, 0x3}, &(0x7f0000003240)=0x8) r5 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r4, 0x2}, &(0x7f0000000140)=0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:55 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = open(0x0, 0x1a3204, 0x143) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003200)={r5, 0x3}, &(0x7f0000003240)=0x8) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x4, 0x529d, 0x80000000, 0xfff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) [ 691.396365] ? sys_vfork+0x30/0x30 [ 691.396380] do_syscall_64+0x1e8/0x640 [ 691.396390] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:35:55 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) r4 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x6, 0x7fffffff, 0x2, [{0x2, 0xefe, 0x9, 0x0, 0x0, 0x2a5d190e82acaf8f}, {0xf8, 0x80000001, 0x1, 0x0, 0x0, 0x80}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 691.396409] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 691.396418] RIP: 0033:0x459f39 [ 691.396424] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 691.396435] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 691.396441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 691.396446] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 691.396452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 691.396457] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:55 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) socket$caif_stream(0x25, 0x1, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:55 executing program 4 (fault-call:3 fault-nth:19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:55 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd}}, 0x90) 03:35:55 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) recvfrom$rxrpc(r3, &(0x7f0000000280)=""/62, 0x3e, 0x1, &(0x7f00000002c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @rand_addr="44f96f9e506ee222c25a95c089fe16b4", 0x8}}, 0x24) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x69) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r9, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0)={0xffffffffffffffff}, 0x3, r9, 0x8, 0x0, @ib={0x1b, 0x27, 0x4, {"ff26a3b03b23488f75d851ba8ba2a644"}, 0xfff, 0x80, 0x4}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r10}}, 0x18) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000) ioctl$IOC_PR_RESERVE(r12, 0x401070c9, &(0x7f0000000140)={0x7f, 0x2, 0x1}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r14, 0x407, 0x0) write(r14, &(0x7f0000000340), 0x41395527) r15 = openat(r14, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r15, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:55 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000003200)={r3, 0x3}, &(0x7f0000003240)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x17, "8051ad4f81b98bf22e58dc4619f6c00c6e498d905bf5bb41e028a4a29e0b2d52b1e969db54aeb19ffe2a2d63cd29368a11799031d73806c2772705006d28293c70a2d827b1a098dafd35ab70d2cb4f7cc1a6b8943810915d829cae1f4f04b550b026850a8306d9c1e7a97547f719f9021dd1a0e77294301d6e0994d3d2e07679"}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r2 = accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) write$P9_RUNLINKAT(r1, &(0x7f0000001480)={0x7, 0x4d, 0x2}, 0x7) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r2, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)="928c36337953598613a4722b5e0399e48f838631736a81a5c7ad3ffc466dfefb035e339c59f8edcb7e789a41a4aba3291ec3df136cd1486e139cdbee6ebddc66614abbd230ae274196b865c748ea953ef2cdb8c401fd6ef5477a8a6fe4c238b63a87f469df27d7d6a1eb1257c9377a8398fd51f445901fd1f24be028b0ccd570edc4d3a18e274585d315906058b6d29e5addf8240c7297cdf4017c50e517db75b49372bc0591", 0xa6}, {&(0x7f0000000380)="6eaa2d829c7687591fc8cd98260c4cbbe1553fdc2b95c7326b96bb178ae156ae97627ab400f4af4fbf30092c9612a4ea28cbb5792c4217cd4b7254f8d52f52feb1a71b8a584c67f0d72f9e6fd1f7f5358dd22bdb964e1a2cee73e60a96a4b9f9309eb77bb4481eeb5314355029fc4af1f1cac8a9305fe525c1ba83843758a68846143d18ebf9e1764828b8fc7759448650d981d9cda6186189cc5a4b81f756926d69c3cd9a896c84d245933079a9b9df650c579822e504e9473ed067e77481f187fe71746ad40529d9b0", 0xca}, {&(0x7f0000000480)="fb82a3b0462aa90a50dc94b60241718982ff1c79dbb6f5add2cf0ef75524c490503924fd6f3869391c9156bda18823d344002a76c3e7f8e52938725eb8c24b70b4a93237d8ac4dc130c0865597c4cd734e043d50f1796e34a4dd510d6247868986fc8a0ed79c1e93df9efd1d1041b8f2a8d1cda744afd5f354b289c1883b830a5f67b1b88398bdbbeb95825cc9ffdf77167e4aa1d464e2a4bc888d25e9f13f45451330ce5ac19c1738a789ae88278131f0840fbb4b95fbca830a6ad7f524b56da6539644d1828082d538590e0ccf1968eb4f2d8b96248d421b9d3eff805a8d7659baad1eb4858c37411cf8ba05bfe78affbd5d52906b5b310675887079b13ae88d3b2f318445de7265d8635c760ada34247afb3ef1ebd64d336e9f74ca6e13baf7969cf7674a74d2143319c9ca85d3ebd1e6f28ac5b722ff780e5f0e81a28691c88b7bb4e6a7aa309c64c067c797e922475695458ea2e4c744c9bdd74add55ed4541501d79a24543a491a125aff16ecc0e5a121b6f2f53f131397bf6411db350c09dd24af82ac6b1690946fc7e8dcd9a942ad65ce50535344244b54a2a6126ecc3d25f9fe0b190786beef423e0007c219cf4ab93490fc190c78867b9b7b5be94d5daadda71c4c13ee25056dc2ceef9e5c0a5053e5f5bdbcdeac61088ac7ca1105d20ddffb771badb5d478bb1e58af0312f52ea4bd52f3ad4552c6f0def55e8e3d4f1ae281a3a9cba172c3742f3fde9938e1681446f9d30d754db208c1572813478abcad4c0cbb87c6695f76cce15f00b108a0305bb35e5fe3e98055f5dfbfe7da4b14bffe15dda080361569ddfe98afa13ba137a255a127e35c53e704a0df0e4a4ea07db6f38ac34a4d980bf19bc66d8ed61bb2cd46e501713b289f64a7381be0632578153d8696f8288f71c7e64f1f851ea139631f00ff0eadb67febec9fe8243c761af0933c665f4c89a4d0ff7d475f1002251184ee53455bdfb566a678a021e2702822f68a3a12ec4a578fa70a76665a382f28947b816f16b12de18b0f9594d715e88d61d17c6626c23d9888cf3b78ea7c1b16499157664ea6c75a325d036456020450c7247727cdfdbf7357187d868e3adfabd16041fc581042c66a96a8fe6255a53c7ef1f060faeea2c5b2edb6c84a53760f84d0dd41aa49478c65c8c49c5bda8b88b476c261a37530a1e4485fe3a0203dc6a3d8fe07d8bd1d04e19d1173642ec98bf04cd77569822b47a2441155e9f29f9c64686dfa3434e4a2e2d765e6e895822764840644b2c7c547c1d5f52a5f8bd1d3876d8e17ee19779be05f6ba83cd9ff93edb21ac54aa422e96a7eb45d8d80cf051edfb0b2fb1a0e42a65e419b6421e9cf35e928ac6f6e2ab47d833995d304271b28259d4daa9bae696aec0680438ed7b1c50f8211f3768906ce54a8d8323cd448d0b51590b17b64d3aae79b68aee47a263f5118165590d4d761f466c2af0f36a55ce020efbe49992adf3055db315be1ebe7f55e6701b5e301b608e2a35eb64baafa2bc09cc1f3797a8fc3e388d61a5eed2b3296b1ba6557902b78ebb9cb0097ee8c51bc25389444360062859efe92b1e1607f7a60db5cec4cd37ac602eb8875b35efdb225377253726fc59bac02874e9c47fc3ec749baf1d601f3887e8728f13585c467ffd508cd94f7a9b0403f1f79e7a127edc42d47e766249ff09759747c454505a5671921b8c3c878b9030e0b47c29fd229fe5af71baa1913dd27a716ef20a4376a53d50ed2d1ec9973accb5b1964a1bf2db5dd2c6394b87a6125317ce1f6c2c40e2fd873627596a678e54e4d3d67754714522a564c6450e236ab7ac3f60f14829673e61b078b4012264932c7323d2f86f30d3a05c9403545a6a00350748657795465282f976e114b9db9c93743ad7c6691f75eff8bf249cb4cde04f130a87e82a8d55881cf99fd2edd41cbdf515f0303798a12e817ab4e8de903d9de3e8341a26bd2811e2346d38c79386890b4e4b54f6ebd03ea480660268dd60f7896c37d253dd900913767aec69fe45912b1a5ac48260b6515aaa1ed579d50707cd62db0af3fc6713a4cd8f3360364c612f07c922c8b1ef944696b17e9cea305ad97bc2afddc5e333fa9fe817efac5bd294e53b4aa8c1d2baa4694b7d1b3d3289d2ea0c23fc70bdf44b853e41412adff2110cfb8dd8948d40b5ccce45b0406761d524c47260a0f7c38a8f2b2a27daadd64932be83d3f05e210cf751e89a7f94d69e26a52ccd4ada8d87f342c3bc5ea2edb124985d99b57dbb12655c2ba13cff6ad70146292074372c3d336e9d523ebb28f176ff99698fe763d59218e53f18c50f274ae4f33f327d3ac02e6dba4591a5fcbba268890197d88642fd94fc63fc7fea43baf0085ec20b07d54d7da53af53e06e65b1f603d6f83e683162e08a805ae4e0f14df7687d5e9fb94bbb0462f68bf3225e369d3b100b136d872043c948eeed3bd65f6a4441c2914cc6d920b395d12a4439dfa859b526192505bbf219fd81feae6ec4181c9a6125f94f4e4e6811f2e2a284dfd8bff3f443c6aadce3e4bb6c226b7665c55e34a26a8cdf2545ad6e1201bddfe22e6124550687e2b2069fca24c1bc95376352911404b4e2ac1e9226634466ce94197082a1ca0c6d37ae9d61076710d1d50d840973cb4e26cd0c4baf621d3414f56b76f43199cf3824191080aebfb88e2bf2900a8f097dc8a943a49d2453933fa42532412d3dacfc483c82545c7ad44211afed0531ad2fd23124ed80090f3251b815a27d4b204c6fae931721b4551116e4349ee93f79fdf22e91cddc5c2a4640044170f28046b7549a38fd66c05a31a5afe9091da12946b46abccd01b17fa2108b9ed90145acd94326ffbe899559b117b6f4e622c5b7509ca47281fe5694a0540b1c4e180f76c09b2c95dbc8926fb8d0457f1876753e909fae12f749818f22d80882407d3df6d3f7f70f044063bf996a0adffacf5784a08674310155774e001049e1ef7fccbe5b599a8dc2655f00730790c3e07c51f67260515bc14b502877d08ab296dcdd7f280b1b180042157f6f705c2b6586606a32b1fac696cb5e0342d476692195ec9fd8f2d732fbadda8e45fd826109dfe9f5bcd11874026c73379d1dc7fb3b34d0e2d385a4fb38ad86a68f56b45a1ce5e00ef3734973c702e4336c81107add9d6f7cd32f7072834a2d5eaee48f4834a8c63c499e303e8217c68c14582e3ff286961549200420fc850055bb5121018af9b1b301a11d7aaf027a03bf731dcadbee612de8b37d3f02ecd33795ee4b7389acb7c8c28baf8f8c67bbb4cdff6d709f2399d2c5c0e3775bd636cd5572425cd4130e7abdad28aaa4e57ab7f97912549520d88c8a5c788e2e834425bcd438568c5095b5fda9a802afc558018542e040b7e4c018a14f4436072d6dcb9eeda5e8f739376a4e4d40c8761253c34f51aebd4fca9ce85ce4c88a90bb8d1a987a47c90a35aaa182850179695ef2315cda0702e3ab99f662e47fb5e509c39409722b5bf4af001f199081e09aaacababb74c23b4e4e8faf47278c6a0465b29cc19873a0855c96dd358c63250fb79db08e4319c18961d6632891cab282ee929ade26081b453423c5e78a44e1b0f59442a77366c38ec619fe22a04434ac53579b1a93a7aca40b685f2017553b0b5f171987aa3fcc6619e36f1d5cb49ce65cc1fd5a6de8769e304ce087207da0891d55e8dde1111b5e19bfe7cdd49cd7243a3f3bdfa07e08875ad829193edf0a7c7527f479c7e0767e8bd766511a3f83cb323510d1cab1f8c72d1360b85f523b8f88ac8093976ff65625200b62455c5508e9d1fd3d4a31a98c974f3d6ec125c9e018098d3ad26c3738c6f4060b2d02d3eeb85f6548edadf77f45921c56b430310135224b649424b228d22e382a24a88232b01a2a3b079037c1aeb8b26131ee23256269057137f1a54671fc7fc01cbf5ec2ea35d3be00b423a1735783344115dd2f06262fa8a61133401626f74b9c757d8f379c13996bcd73b96ed51d617c240b378096c41c2b1e853a13883b8e9089d88538adb60e16e264652c563d0d5d8b36b4bce8d64588adeafd244596008b516a358963113a0ee29c150fdcc198db5f3bd99e4deeaeed6b49e6e888c0ec966de1f75fbcbde2c53b7a13264499e1f0a9cbfb86e6f3004f4b412c610fd9219bc6be11b6460202e5f43409649fedb88aeff13a8391cb765faec6ca6513d999e75f545d243dc6616328e887ce8ce1afa32fb29936b9e4a8393e65dc4f6e435baafa376e6ef0c1290a7d1bfb603c7c857aed1ea49673698bd9c4eff25e9715a729bc8eeeb27cf17fb900fbdaf1237ef4c19618bdb52b82bdc503a7cf4b79ca77b406fad6e29a3f91c3f205e250353087cd8d101859f247886ba71bc2391e1c34fdd62860ea2d585c8fdb93d1d0e0bdb7e1c5998012f92c0927d86bd64b9f8ecec8000e254747b70c4d93e31f10ea3d10457d025fc9cc1a9490d271523f0e0f61dd1ffb9f31295882569a1f554f47a8d831c179310e6944681281a184069561e6969d9028bd744150e8b5d971694186f9af4c4fcb779f23e31401425db94c5dc24552043b79bf716be4583621928e3d0878f1cbd98528b78e41e9a7745f34de0bef26faf4de479baf6a21f592ffb01692bdd679c01aff946898f0c3312b7b9eb1e1dff6087693b0a3bd834177419c05d6ccf39c96f83fb7c3ebf039c2def72e9c079574d11d2a74706bbc82ed6157d08ea7f50820093dfec3c6862ad800886f65305fbfc032742d5f289368ba7afb7f4e13210b8ac9ef9e904e251215ce40a0da77409873c5f6a73cbd4b79df2dded3dfd4a52f044b66e05d1d80e409461835c995c30c49fbdd658652148be0274c6f7b85d8478c3605358390dbc422dd8ac649621a46a1eec4775b4a86e6cdea3392bf61dd424d0193c9da0ed3b30dc70f42125b1971d93e88d932d5a026522a8ad53911813ba289686e5ed72e3f2eaa637ac3765ae92b86330b7cb9bc0ccdc8e916cea5bb1271dbc157daeaab5e6692c8e1a2697bf830161cf28a5cdd0a27d109241991e31a79aa420a0052844da69b2b35ed361140c0c4bea11afcc478084fb0a6c1cbba3eab8af1c2adaed198c24ba4b37b78ef637720ca670930d2718b147d1dea425ef456439c0007140885c7518092a90aa20fbe07cb6f57914a0013394d457260800e5d9f48b46c30651ab548f84687d6cf7c119e7b08b44f2363443e86aff346a5eb563c4365c12d7dd6c4fe43716d51be3931a98e51c56f34ada5139b42b80efb9a69ab1add9f33a65d226d68f26acf7ff28984b890077de1f2c3f7f42f978f6d794b95592d6a0546f2555039eca2491d206ccbe1eab4e8f6837e66534bac94ef9bf784daab1dfe5b4003633adfad5c45d3dfe62d223080c42cb7a829c280eeb9376fdf4a00069baf2ac3743ecb697ba62e84391bbdee5888b5e034d833aeef01eac5f98c3ce2f49448d73d1dcc95f8b6af0ce316a12cdfa464888262476151e2af7e66c522f00a04139cf6b33effba48577ae9f44fbd9a658fd75357676f9ca738f7fdbf8f5b47cb0cef1a67d94d17e5511b7803c92028b3427c1d2976ee8ceeff755f9d3ecf3a6a0b73dcadebd04306761dda69929e54962841b07d91948e6d390321381eaffa715a7bf5b475b9f8976f506052478aeabd858af13138d70ffe744de07505bd9861eb38ec2dbdb55a9ba76528fadf7f8e91272991cfb5728a9099566201657b90bd2950f93c9cadb6eb918acc0c25e5a4e5292a36f5fa318aae82d563a", 0x1000}, {&(0x7f0000000040)="433c1f3c6fa4c2daa608275f8a88cd5b6b", 0x11}], 0x4) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r3, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd}}, 0x90) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r5 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r5, 0x8007ffc) sendfile(r4, r5, 0x0, 0xffff) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000014c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001500)=0x10) r8 = getpgrp(0x0) tkill(r8, 0x41) [ 691.956776] FAULT_INJECTION: forcing a failure. [ 691.956776] name failslab, interval 1, probability 0, space 0, times 0 [ 692.009297] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 692.009297] program syz-executor.3 not setting count and/or reply_len properly [ 692.042013] CPU: 1 PID: 8893 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 692.049004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:35:55 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 692.058376] Call Trace: [ 692.060988] dump_stack+0x138/0x197 [ 692.064658] should_fail.cold+0x10f/0x159 [ 692.068857] should_failslab+0xdb/0x130 [ 692.068874] kmem_cache_alloc+0x2d7/0x780 [ 692.068888] ? retire_userns_sysctls+0x90/0x90 03:35:56 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100000e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:56 executing program 4 (fault-call:3 fault-nth:20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 692.068897] ? lock_downgrade+0x740/0x740 [ 692.068909] copy_pid_ns+0x1ae/0xa40 [ 692.068919] ? refcount_inc+0x1f/0x40 [ 692.068934] create_new_namespaces+0x267/0x720 [ 692.068947] copy_namespaces+0x284/0x310 03:35:56 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 692.068959] copy_process.part.0+0x2603/0x6a00 [ 692.068971] ? trace_hardirqs_on+0x10/0x10 [ 692.068978] ? save_trace+0x290/0x290 [ 692.068988] ? check_preemption_disabled+0x3c/0x250 [ 692.069004] ? __cleanup_sighand+0x50/0x50 [ 692.069020] ? _raw_spin_unlock_irq+0x28/0x90 [ 692.069037] _do_fork+0x19e/0xce0 [ 692.069050] ? finish_task_switch+0x14d/0x650 [ 692.069061] ? fork_idle+0x280/0x280 [ 692.069069] ? __schedule+0x7c0/0x1cd0 [ 692.069081] ? pci_mmcfg_check_reserved+0x150/0x150 [ 692.069092] SyS_clone+0x37/0x50 [ 692.069099] ? sys_vfork+0x30/0x30 [ 692.069110] do_syscall_64+0x1e8/0x640 [ 692.069118] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:35:56 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = semget(0x1, 0x0, 0x2) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x8001, 0x745e, 0x2]) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r5 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r5, 0x8007ffc) sendfile(r4, r5, 0x0, 0xffff) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d7d", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r7}, &(0x7f0000000300)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r10, @ANYBLOB="1000060000006c4c1b6c400b1b47039e"], 0x2c, 0x0) r11 = geteuid() r12 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r12}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r13 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r14, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r14, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r16, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r13, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r12, 0x0, r16}}, 0x8b) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r16}, {0x2, 0x1, 0x3ff, 0x20, 0x0, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x7}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) r17 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r18, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="a50e3d", @ANYRESHEX=r18, @ANYBLOB=',rootmode=00545364174366130723734,user_id=', @ANYRESDEC=r19, @ANYBLOB="2c673d000000e0ff0000", @ANYBLOB]) write$P9_RSTATu(r17, &(0x7f0000000680)={0x8b, 0x7d, 0x1, {{0x0, 0x6b, 0x0, 0x1, {0x0, 0x1, 0x1}, 0x4000000, 0x7, 0x0, 0x3, 0x9, 'threaded\x00', 0x12, '\\posix_acl_access*', 0xa, '/dev/ptmx\x00', 0x13, 'ppp0wlan0\\}-&%.eth1'}, 0xb, '/dev/loop#\x00', r11, 0x0, r19}}, 0x8b) r20 = getegid() semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000340)={{0x7fff, r8, r10, r19, r20, 0x180, 0x8001}, 0x7, 0x4, 0xffffffffffffffff}) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r21 = socket(0x2, 0x3, 0xff) connect$inet(r21, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r22 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r22, 0x8007ffc) sendfile(r21, r22, 0x0, 0xffff) r23 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r23, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r24 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r24, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r25 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r25, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r24, 0x8004e500, &(0x7f0000000240)=r25) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR], @ANYBLOB="f13dfca4c71450ebc731842f91488ddd568f4a0c7dd2f866269cf2ca13c0f9cb1b9fc4837bcd0c6bd2aff877d080b5e1d4c6", @ANYRESOCT=r1, @ANYRESHEX, @ANYRES64=r23, @ANYRESOCT=r24], 0x7}}, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r28 = dup3(r26, r27, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r28, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x2, 0x0, 0x0, 0x91f1}, 0x20) [ 692.069130] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 692.069137] RIP: 0033:0x459f39 [ 692.069142] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 692.069151] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 692.069156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 692.069160] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 692.069165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 692.069169] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 692.278254] FAULT_INJECTION: forcing a failure. [ 692.278254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.390634] CPU: 1 PID: 8920 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 692.390643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.406913] Call Trace: [ 692.409505] dump_stack+0x138/0x197 [ 692.413148] should_fail.cold+0x10f/0x159 [ 692.417305] __alloc_pages_nodemask+0x1d6/0x7a0 [ 692.422006] ? fs_reclaim_acquire+0x20/0x20 [ 692.426341] ? __alloc_pages_slowpath+0x2930/0x2930 [ 692.431722] cache_grow_begin+0x80/0x400 [ 692.435787] kmem_cache_alloc+0x6a6/0x780 [ 692.439936] ? retire_userns_sysctls+0x90/0x90 [ 692.444522] copy_pid_ns+0x1ae/0xa40 [ 692.448233] ? refcount_inc+0x1f/0x40 [ 692.452036] create_new_namespaces+0x267/0x720 [ 692.456647] copy_namespaces+0x284/0x310 [ 692.460710] copy_process.part.0+0x2603/0x6a00 [ 692.465317] ? proc_fail_nth_write+0x7d/0x180 [ 692.469811] ? proc_cwd_link+0x1b0/0x1b0 [ 692.473906] ? __cleanup_sighand+0x50/0x50 [ 692.478142] ? lock_downgrade+0x740/0x740 [ 692.482300] _do_fork+0x19e/0xce0 [ 692.485769] ? fork_idle+0x280/0x280 [ 692.489490] ? fput+0xd4/0x150 [ 692.492705] ? SyS_write+0x15e/0x230 03:35:56 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:56 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 692.492718] SyS_clone+0x37/0x50 [ 692.492725] ? sys_vfork+0x30/0x30 [ 692.492738] do_syscall_64+0x1e8/0x640 03:35:56 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x4, 0x1f, 0xffffffc0, 0xbb9e, 0x0, [{0x7, 0x20, 0x1, [], 0x1}, {0x1f, 0x36, 0x7, [], 0x1}, {0x7, 0x7, 0x6, [], 0x7}, {0x4, 0x8, 0x80, [], 0x7}, {0x1, 0x4, 0x5, [], 0x3}, {0x0, 0x2, 0xfb}, {0x7f, 0x80, 0xff, [], 0x4}, {0x1f, 0x1, 0x6}, {0x4, 0x7f, 0x2b, [], 0x8}, {0x3, 0x3a, 0x0, [], 0x8f}, {0x3, 0x5, 0x20, [], 0x81}, {0x3, 0x3f, 0x40, [], 0x76}, {0x3f, 0x9, 0x3f, [], 0x4}, {0x10, 0x4, 0x0, [], 0xa7}, {0x4, 0xb5, 0x3, [], 0x3b}, {0x2, 0x0, 0x9, [], 0x9}, {0x5, 0x7f, 0xc7, [], 0x40}, {0x9, 0x5, 0x14, [], 0x8}, {0x6, 0x3f, 0xff, [], 0x1}, {0x2, 0xd6, 0xff, [], 0x7}, {0xff, 0x0, 0x1, [], 0x6}, {0x0, 0xff, 0x1, [], 0xe0}, {0x6, 0xf9, 0x3}, {0x81, 0x2, 0x1, [], 0x81}]}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:56 executing program 4 (fault-call:3 fault-nth:21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 692.492745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 692.492760] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 692.492768] RIP: 0033:0x459f39 [ 692.492773] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 692.492783] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 692.492788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 692.492792] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 692.492797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 692.492802] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 692.677175] FAULT_INJECTION: forcing a failure. [ 692.677175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.677186] CPU: 1 PID: 8940 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 692.677191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:35:56 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:56 executing program 4 (fault-call:3 fault-nth:22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) [ 692.677195] Call Trace: [ 692.677207] dump_stack+0x138/0x197 [ 692.677224] should_fail.cold+0x10f/0x159 [ 692.677238] __alloc_pages_nodemask+0x1d6/0x7a0 [ 692.677250] ? fs_reclaim_acquire+0x20/0x20 [ 692.677261] ? __alloc_pages_slowpath+0x2930/0x2930 [ 692.677280] cache_grow_begin+0x80/0x400 [ 692.677292] kmem_cache_alloc_trace+0x6b2/0x790 [ 692.677300] ? kmem_cache_alloc+0x611/0x780 [ 692.677315] copy_pid_ns+0x1f4/0xa40 [ 692.677323] ? refcount_inc+0x1f/0x40 [ 692.677337] create_new_namespaces+0x267/0x720 [ 692.677350] copy_namespaces+0x284/0x310 [ 692.677362] copy_process.part.0+0x2603/0x6a00 [ 692.677379] ? proc_fail_nth_write+0x7d/0x180 [ 692.677388] ? proc_cwd_link+0x1b0/0x1b0 [ 692.677407] ? __cleanup_sighand+0x50/0x50 [ 692.677417] ? lock_downgrade+0x740/0x740 [ 692.677444] _do_fork+0x19e/0xce0 [ 692.677456] ? fork_idle+0x280/0x280 [ 692.677468] ? fput+0xd4/0x150 [ 692.677478] ? SyS_write+0x15e/0x230 [ 692.677490] SyS_clone+0x37/0x50 [ 692.677498] ? sys_vfork+0x30/0x30 [ 692.677508] do_syscall_64+0x1e8/0x640 [ 692.677516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 692.677529] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 692.677536] RIP: 0033:0x459f39 [ 692.677541] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 692.677551] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 692.677556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 692.677561] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 692.677566] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 692.677593] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 692.849726] FAULT_INJECTION: forcing a failure. [ 692.849726] name failslab, interval 1, probability 0, space 0, times 0 [ 692.849738] CPU: 0 PID: 8946 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 692.849744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.849748] Call Trace: [ 692.849767] dump_stack+0x138/0x197 [ 692.849784] should_fail.cold+0x10f/0x159 [ 692.849801] should_failslab+0xdb/0x130 [ 692.849812] kmem_cache_alloc_trace+0x2e9/0x790 [ 692.849824] ? debug_smp_processor_id+0x1c/0x20 [ 692.849834] ? __radix_tree_preload+0x1d2/0x260 [ 692.849845] ida_pre_get+0xee/0x110 [ 692.849852] ida_simple_get+0xaf/0x190 [ 692.849862] ? ida_remove+0x230/0x230 [ 692.849872] ? wait_for_completion+0x420/0x420 [ 692.849888] proc_alloc_inum+0x27/0x80 [ 692.849900] copy_pid_ns+0x35b/0xa40 [ 692.849908] ? refcount_inc+0x1f/0x40 [ 692.849922] create_new_namespaces+0x267/0x720 [ 692.849936] copy_namespaces+0x284/0x310 [ 692.849948] copy_process.part.0+0x2603/0x6a00 [ 692.849965] ? proc_fail_nth_write+0x7d/0x180 [ 692.849975] ? proc_cwd_link+0x1b0/0x1b0 [ 692.849994] ? __cleanup_sighand+0x50/0x50 [ 692.850005] ? lock_downgrade+0x740/0x740 [ 692.850019] _do_fork+0x19e/0xce0 [ 692.850032] ? fork_idle+0x280/0x280 [ 692.850045] ? fput+0xd4/0x150 [ 692.850055] ? SyS_write+0x15e/0x230 [ 692.850069] SyS_clone+0x37/0x50 [ 692.850077] ? sys_vfork+0x30/0x30 [ 692.850089] do_syscall_64+0x1e8/0x640 [ 692.850097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 692.850112] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 692.850120] RIP: 0033:0x459f39 [ 692.850126] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 692.850138] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 692.850145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 692.850154] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:35:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x7, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xffffffffffffffdb) prctl$PR_SET_TIMERSLACK(0x1d, 0x1) 03:35:57 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x541000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:57 executing program 4 (fault-call:3 fault-nth:23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d4960d000000000000b81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000003200)={r8, 0x3}, &(0x7f0000003240)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRESDEC=r6, @ANYRESHEX=0x0, @ANYRESOCT=r9], @ANYRES32=0x0, @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r10 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4a20, 0x68, 0x0, 0x81, 0x2, 0x20, 0x5f1d2c19c975df09, 0x0, 0x0, r10}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0x800fff}, 0x0, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in6=@remote, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) r14 = openat(r13, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r14, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:57 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e00000010000000000000000000000000000b700000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000b25cfa2448796e5c80a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e626335aefd054133f0ac284c19d992e39a161a43e78af7c8babba3d3a21d40c6761095278d7019c00f6532188cc6f0c7e2cbcb842228946a9a1fe2e487b82d231a65a9f6d05604745958f185556de3e33ea1cc81359cbc41dd3f9ed4a4560b31befbb2b4f29ed9da5450c4a9dc482327c0277a495e50e1f52db3279cd8f4de9f1edc93d01e350216265953c284a5496fdf0f3a54f0ab52d1d604387d89b9b823754c7a49a22e3ca3e28a7558060894316121cd36663d2aaffeeb8c6eb5af0afbf998ae06b0aa4477bc42"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 692.850161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 692.850168] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:57 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 693.421962] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 693.421962] program syz-executor.3 not setting count and/or reply_len properly [ 693.424220] FAULT_INJECTION: forcing a failure. [ 693.424220] name failslab, interval 1, probability 0, space 0, times 0 [ 693.509675] CPU: 0 PID: 8962 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 693.516666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.526027] Call Trace: [ 693.528629] dump_stack+0x138/0x197 [ 693.532278] should_fail.cold+0x10f/0x159 [ 693.536424] should_failslab+0xdb/0x130 [ 693.540393] kmem_cache_alloc+0x2d7/0x780 [ 693.544536] ? refcount_inc+0x1f/0x40 [ 693.548353] alloc_pid+0x5d/0xc70 [ 693.551800] ? copy_thread_tls+0x3c8/0x7a0 [ 693.556026] copy_process.part.0+0x272f/0x6a00 [ 693.560614] ? proc_fail_nth_write+0x7d/0x180 [ 693.565089] ? proc_cwd_link+0x1b0/0x1b0 [ 693.569138] ? __cleanup_sighand+0x50/0x50 [ 693.573365] ? lock_downgrade+0x740/0x740 [ 693.577510] _do_fork+0x19e/0xce0 [ 693.580949] ? fork_idle+0x280/0x280 [ 693.584647] ? fput+0xd4/0x150 [ 693.587832] ? SyS_write+0x15e/0x230 [ 693.591563] SyS_clone+0x37/0x50 [ 693.594953] ? sys_vfork+0x30/0x30 [ 693.598501] do_syscall_64+0x1e8/0x640 [ 693.602390] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:35:57 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) r3 = open(0x0, 0x1a3204, 0x143) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000003200)={r6, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r6, 0x2}, &(0x7f0000000140)=0x8) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000280)=r7) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@flushpolicy={0xcc, 0x1d, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@policy={0xac, 0x7, {{@in=@remote, @in6=@loopback, 0x4e23, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x80, 0x3a, 0x0, r2}, {0x2, 0x7, 0x40, 0xff, 0x3ff, 0x2, 0x5, 0x3ff}, {0x80000000, 0x6, 0x1ff, 0x2a}, 0x100, 0x6e2bb8, 0x1, 0x1, 0x2, 0x2}}, @etimer_thresh={0x8, 0xc, 0x4}, @proto={0x8, 0x19, 0x2b}]}, 0xcc}}, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 693.607218] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 693.612395] RIP: 0033:0x459f39 [ 693.615572] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 693.623262] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 693.630519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 693.637798] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 693.645060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 693.652315] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:57 executing program 0: socket$inet6(0xa, 0x80002, 0x0) open(0x0, 0x1a3204, 0x143) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:57 executing program 4 (fault-call:3 fault-nth:24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:57 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:57 executing program 0: socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:57 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) recvfrom$packet(r0, &(0x7f00000000c0)=""/139, 0x8b, 0x2000, &(0x7f0000000040)={0x11, 0x8, r4, 0x1, 0x7f, 0x6, @local}, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) r7 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r8 = accept4$inet(r7, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r8, 0x0) getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x38c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000001000000090000001000000079b1766574683000000000000000000000007663616e300000000000000000000000687773696d30000000000000000000006970365f767469300000000000000000aaaaaaaaaa2100ff007fffffaaaaaaaaaaaa0000ff0000ffde000000560100008601000071756f74610000000000000000000000000000000000000000000000000000001800000000000000000000000000000001000000000000007e74000000000000766c616e00000000000000000000000000000000000000000000000000000000080000000000000002000200883e01066e666c6f6700000000000000000000000000000000000000000000000000000050000000000000000700000009007f000000000089ff4e1eef022b4ef540e13f7f5ecf2eac382837013f8ee0526f00796bd764db72b151929e705903d18e24c9ec1579c4c18c66d1a73e3dc68771bbb0b616dde800000000000000000000000000000000000000000000000000000000000000000000000008000000000000001f2732a00000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000005000000000000008847766c616e30000000000000000000000076657468305f746f5f7465616d0000007665746831000000000000000000000076657468315f746f5f626f6e64000000aaaaaaaaaa2700ff00feff00aaaaaaaaaabbffff0080ff00be0000003e0100007601000068656c7065720000000000000000000000000000000000000000000000000000280000000000000000000000616d616e6461000000000000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb00003f547e47000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000aa94fb762ead513517c3e03ef820df0198a6d2cde41e9d9d355a12b0719700006d61726b000000000000000000000000000000000000000000000000000010000000000000000000000000000000fdffffff00000000"]}, 0x402) write$FUSE_ENTRY(r6, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x90) 03:35:57 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000001540)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d34d00000000000000000000000000000000000000f1ffffbfffffffff00"/114], 0xb8}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0x1024) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x1a0, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x792b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xe}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xcce4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x7b4000db240368af}, 0x40) [ 693.803409] FAULT_INJECTION: forcing a failure. [ 693.803409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 693.874744] CPU: 1 PID: 8992 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 693.881712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.881718] Call Trace: [ 693.881734] dump_stack+0x138/0x197 [ 693.881749] should_fail.cold+0x10f/0x159 [ 693.901442] ? __might_sleep+0x93/0xb0 [ 693.905343] __alloc_pages_nodemask+0x1d6/0x7a0 [ 693.905358] ? __alloc_pages_slowpath+0x2930/0x2930 [ 693.905378] alloc_pages_current+0xec/0x1e0 [ 693.905392] __get_free_pages+0xf/0x40 [ 693.923266] get_zeroed_page+0x11/0x20 [ 693.927159] mount_fs+0x1cc/0x2a1 [ 693.930613] vfs_kern_mount.part.0+0x5e/0x3d0 [ 693.930643] ? rcu_read_lock_sched_held+0x110/0x130 [ 693.930657] kern_mount_data+0x56/0xc0 [ 693.930670] pid_ns_prepare_proc+0x1e/0x90 [ 693.930681] alloc_pid+0x9ef/0xc70 [ 693.930700] copy_process.part.0+0x272f/0x6a00 [ 693.940224] ? proc_fail_nth_write+0x7d/0x180 [ 693.940247] ? proc_cwd_link+0x1b0/0x1b0 [ 693.940270] ? __cleanup_sighand+0x50/0x50 [ 693.940281] ? lock_downgrade+0x740/0x740 [ 693.940296] _do_fork+0x19e/0xce0 [ 693.940311] ? fork_idle+0x280/0x280 [ 693.948422] ? fput+0xd4/0x150 [ 693.948435] ? SyS_write+0x15e/0x230 [ 693.948451] SyS_clone+0x37/0x50 [ 693.948458] ? sys_vfork+0x30/0x30 [ 693.948470] do_syscall_64+0x1e8/0x640 [ 693.956571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 693.956589] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 693.956597] RIP: 0033:0x459f39 [ 693.956602] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 693.956613] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 693.956621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 693.965152] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 693.965158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 693.965164] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:58 executing program 4 (fault-call:3 fault-nth:25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606be1673998b9d364851cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000140)=0x4) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000280)='net/ip_tables_names\x00') accept4$inet(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0), 0x93baae53c03814c0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cb3302e61d3fcffffff705f69643d", @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r7) r8 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r8}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r11, 0x407, 0x0) write(r11, &(0x7f0000000340), 0x41395527) r12 = openat(r11, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r1, 0x0) 03:35:58 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 694.262200] FAULT_INJECTION: forcing a failure. [ 694.262200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.292708] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 694.292708] program syz-executor.3 not setting count and/or reply_len properly [ 694.303282] CPU: 0 PID: 9015 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 694.315577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.324936] Call Trace: [ 694.324961] dump_stack+0x138/0x197 [ 694.324984] should_fail.cold+0x10f/0x159 [ 694.331172] ? __might_sleep+0x93/0xb0 [ 694.331189] __alloc_pages_nodemask+0x1d6/0x7a0 [ 694.331202] ? check_preemption_disabled+0x3c/0x250 [ 694.331214] ? __alloc_pages_slowpath+0x2930/0x2930 [ 694.331225] ? rcu_lockdep_current_cpu_online+0xf2/0x140 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 694.331234] ? __alloc_pages_nodemask+0x639/0x7a0 [ 694.331250] alloc_pages_current+0xec/0x1e0 [ 694.331265] __get_free_pages+0xf/0x40 [ 694.331274] get_zeroed_page+0x11/0x20 [ 694.377021] selinux_sb_copy_data+0x2a/0x390 [ 694.381454] security_sb_copy_data+0x75/0xb0 [ 694.385882] mount_fs+0x1ec/0x2a1 [ 694.389356] vfs_kern_mount.part.0+0x5e/0x3d0 [ 694.393857] ? rcu_read_lock_sched_held+0x110/0x130 [ 694.398902] kern_mount_data+0x56/0xc0 [ 694.402875] pid_ns_prepare_proc+0x1e/0x90 [ 694.407100] alloc_pid+0x9ef/0xc70 [ 694.410652] copy_process.part.0+0x272f/0x6a00 [ 694.415259] ? proc_fail_nth_write+0x7d/0x180 [ 694.419765] ? proc_cwd_link+0x1b0/0x1b0 [ 694.423862] ? __cleanup_sighand+0x50/0x50 [ 694.423888] ? lock_downgrade+0x740/0x740 [ 694.423903] _do_fork+0x19e/0xce0 [ 694.435731] ? fork_idle+0x280/0x280 [ 694.439451] ? fput+0xd4/0x150 [ 694.442652] ? SyS_write+0x15e/0x230 [ 694.446370] SyS_clone+0x37/0x50 [ 694.449733] ? sys_vfork+0x30/0x30 [ 694.453280] do_syscall_64+0x1e8/0x640 [ 694.457167] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 694.462020] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 694.467211] RIP: 0033:0x459f39 [ 694.470402] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 694.478123] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 694.485408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 694.492689] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 694.500079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 03:35:58 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 694.507363] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:58 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:58 executing program 4 (fault-call:3 fault-nth:26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:58 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x7fffffff}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, r2, 0xffffffff}}}, 0x90) [ 694.808377] FAULT_INJECTION: forcing a failure. [ 694.808377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.832510] CPU: 1 PID: 9048 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 694.839492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.848846] Call Trace: [ 694.848873] dump_stack+0x138/0x197 [ 694.848896] should_fail.cold+0x10f/0x159 [ 694.848908] ? __might_sleep+0x93/0xb0 [ 694.848928] __alloc_pages_nodemask+0x1d6/0x7a0 [ 694.867805] ? __alloc_pages_slowpath+0x2930/0x2930 [ 694.872969] alloc_pages_current+0xec/0x1e0 [ 694.872990] __get_free_pages+0xf/0x40 [ 694.873000] get_zeroed_page+0x11/0x20 [ 694.873010] mount_fs+0x1cc/0x2a1 [ 694.873024] vfs_kern_mount.part.0+0x5e/0x3d0 [ 694.873035] ? rcu_read_lock_sched_held+0x110/0x130 [ 694.873046] kern_mount_data+0x56/0xc0 [ 694.873061] pid_ns_prepare_proc+0x1e/0x90 [ 694.873075] alloc_pid+0x9ef/0xc70 [ 694.873094] copy_process.part.0+0x272f/0x6a00 [ 694.873111] ? proc_fail_nth_write+0x7d/0x180 [ 694.873120] ? proc_cwd_link+0x1b0/0x1b0 [ 694.873139] ? __cleanup_sighand+0x50/0x50 [ 694.873152] ? lock_downgrade+0x740/0x740 [ 694.873166] _do_fork+0x19e/0xce0 [ 694.873179] ? fork_idle+0x280/0x280 [ 694.938661] ? fput+0xd4/0x150 [ 694.941863] ? SyS_write+0x15e/0x230 [ 694.945575] SyS_clone+0x37/0x50 [ 694.948959] ? sys_vfork+0x30/0x30 [ 694.952492] do_syscall_64+0x1e8/0x640 [ 694.956363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 694.961211] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 694.966397] RIP: 0033:0x459f39 [ 694.969626] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 694.977321] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 694.984583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 694.991853] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 694.999135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 695.006391] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:58 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x2, 0x0}}}, 0x20) 03:35:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 03:35:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:58 executing program 4 (fault-call:3 fault-nth:27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x14002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x6, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x3, 0x6, 0x6, 0x8}, &(0x7f0000000300)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x86}}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x1, 0x10000) write$FUSE_IOCTL(r7, &(0x7f0000000680)={0x20, 0x0, 0x3, {0x1, 0x4, 0x8, 0x2}}, 0x20) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = openat(r10, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r11, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd}}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x18, r4, 0x5, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x2ac, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @rand_addr="c89ffb4901e77a48548d28bb842b34fc", 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3f, @local, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'brdce0\x00\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f78, @remote, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffd, @local, 0x4455153f}}}}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x72}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x1bb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x857}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x179bc0fa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0xd}, 0x10) 03:35:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 695.142691] FAULT_INJECTION: forcing a failure. [ 695.142691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:35:59 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:59 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev, 0xfffffffe}, 0x20) [ 695.183006] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 695.183006] program syz-executor.3 not setting count and/or reply_len properly [ 695.237092] CPU: 1 PID: 9066 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 695.244251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.253623] Call Trace: [ 695.256238] dump_stack+0x138/0x197 [ 695.259895] should_fail.cold+0x10f/0x159 [ 695.264060] ? __might_sleep+0x93/0xb0 [ 695.267991] __alloc_pages_nodemask+0x1d6/0x7a0 [ 695.272680] ? __alloc_pages_slowpath+0x2930/0x2930 [ 695.277718] ? ____cache_alloc_node+0x1be/0x1d0 [ 695.282425] ? cache_grow_begin+0x335/0x400 [ 695.286766] cache_grow_begin+0x80/0x400 [ 695.290832] ? __cpuset_node_allowed+0xff/0x450 [ 695.295502] fallback_alloc+0x1fd/0x2c0 [ 695.299594] ____cache_alloc_node+0x1be/0x1d0 [ 695.299609] kmem_cache_alloc_trace+0x213/0x790 [ 695.308784] ? kmem_cache_alloc+0x611/0x780 [ 695.313121] copy_pid_ns+0x1f4/0xa40 [ 695.316837] ? refcount_inc+0x1f/0x40 [ 695.320647] create_new_namespaces+0x267/0x720 [ 695.325231] copy_namespaces+0x284/0x310 [ 695.329431] copy_process.part.0+0x2603/0x6a00 [ 695.334052] ? proc_fail_nth_write+0x7d/0x180 [ 695.338535] ? proc_cwd_link+0x1b0/0x1b0 [ 695.342586] ? __cleanup_sighand+0x50/0x50 [ 695.346825] ? lock_downgrade+0x740/0x740 [ 695.350969] _do_fork+0x19e/0xce0 [ 695.354426] ? fork_idle+0x280/0x280 [ 695.358144] ? fput+0xd4/0x150 [ 695.361335] ? SyS_write+0x15e/0x230 [ 695.365041] SyS_clone+0x37/0x50 [ 695.368432] ? sys_vfork+0x30/0x30 [ 695.371991] do_syscall_64+0x1e8/0x640 [ 695.376013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 695.380859] entry_SYSCALL_64_after_hwframe+0x42/0xb7 03:35:59 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc84cd206ea9984db95cb44830c37ea39aaff43cd4f63378f2d75a26e789a8b37c8276478dcc83fca76008fa1d670bc71e848d5f13e9a63832298cc0db71fdd85f252240d45e462d59b56d8ea96542f4c2a99406685472ff0e1fc37325a6615f19884f0372b1e29966475c1161fdff141435671021b8feb51f664dd674b"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:59 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 695.386056] RIP: 0033:0x459f39 [ 695.389227] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 695.396916] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 695.404170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 695.411428] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 695.418723] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 695.425978] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:59 executing program 4 (fault-call:3 fault-nth:28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:59 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 03:35:59 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100e8ff0000000000000000000001e000000100000000000000000000000000000000000000000a000000000000002dcf801fb26100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) [ 695.573719] FAULT_INJECTION: forcing a failure. [ 695.573719] name failslab, interval 1, probability 0, space 0, times 0 [ 695.606007] CPU: 1 PID: 9100 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 695.612974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.622324] Call Trace: [ 695.624919] dump_stack+0x138/0x197 [ 695.628571] should_fail.cold+0x10f/0x159 [ 695.632737] should_failslab+0xdb/0x130 [ 695.636720] kmem_cache_alloc_trace+0x2e9/0x790 [ 695.641387] ? lock_downgrade+0x740/0x740 [ 695.645536] ? trace_hardirqs_on_caller+0x400/0x590 [ 695.650562] sget_userns+0xfe/0xc30 [ 695.654177] ? set_anon_super+0x20/0x20 [ 695.658135] ? get_empty_filp.cold+0x3b/0x3b [ 695.662524] mount_ns+0x6d/0x190 [ 695.665873] ? proc_get_inode+0x620/0x620 [ 695.670005] proc_mount+0x6a/0xa0 [ 695.673457] mount_fs+0x97/0x2a1 [ 695.676816] vfs_kern_mount.part.0+0x5e/0x3d0 [ 695.681406] ? rcu_read_lock_sched_held+0x110/0x130 [ 695.686405] kern_mount_data+0x56/0xc0 [ 695.690284] pid_ns_prepare_proc+0x1e/0x90 [ 695.694511] alloc_pid+0x9ef/0xc70 [ 695.698114] copy_process.part.0+0x272f/0x6a00 [ 695.702687] ? proc_fail_nth_write+0x7d/0x180 [ 695.707166] ? proc_cwd_link+0x1b0/0x1b0 [ 695.711234] ? __cleanup_sighand+0x50/0x50 [ 695.715462] ? lock_downgrade+0x740/0x740 [ 695.719597] _do_fork+0x19e/0xce0 [ 695.723036] ? fork_idle+0x280/0x280 [ 695.726732] ? fput+0xd4/0x150 [ 695.729907] ? SyS_write+0x15e/0x230 [ 695.733616] SyS_clone+0x37/0x50 [ 695.736977] ? sys_vfork+0x30/0x30 [ 695.740511] do_syscall_64+0x1e8/0x640 [ 695.744475] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 695.749308] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 695.754504] RIP: 0033:0x459f39 [ 695.757681] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 695.765368] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 695.772624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 695.779881] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 695.787147] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 695.794399] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:35:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 03:35:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd}}, 0x90) 03:35:59 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:59 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="9d633d9dacc212a277c72cfddae3ce027021c8bfce273ef40ed691", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000240)=r5) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESHEX=r3, @ANYPTR64, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESDEC=r5, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR64, @ANYBLOB="4e41023beda3", @ANYRESDEC=r0, @ANYRES32=0x0], @ANYBLOB="589212e591f1afff758a1beccca2004663ae5d099013537e2409a0bfd612daa42f78b0331e33c1cd8e7d", @ANYBLOB="500e1482cd069acfad8d040d9ad50d95c70120594fc3ce5e1fb2f471b190d568fca13be4e4c085aed788", @ANYPTR], @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000240)=r3) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000000)={0x313, 0x80, "ffcb1041810656a5b27fa91ffdf63e9bd95e0bf02d7c3ae285faeb82577b3888", 0x80000001, 0x101, 0x6, 0x8, 0x91}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:35:59 executing program 4 (fault-call:3 fault-nth:29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:35:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="a33a7832348e6c03653d30ff30300900000000000000757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in=@remote, 0x4e20, 0x68, 0x100, 0x81, 0x2, 0x0, 0x20, 0x0, r9, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x80000000, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x21}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x40001}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) r13 = openat(r12, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r13, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) r14 = socket(0x2, 0x3, 0xff) connect$inet(r14, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r15 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r15, 0x8007ffc) sendfile(r14, r15, 0x0, 0xffff) ioctl$SIOCX25GCAUSEDIAG(r14, 0x89e6, &(0x7f0000000040)={0x6, 0x8}) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:35:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 03:35:59 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:35:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) [ 696.036319] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 696.036319] program syz-executor.3 not setting count and/or reply_len properly [ 696.039800] FAULT_INJECTION: forcing a failure. [ 696.039800] name failslab, interval 1, probability 0, space 0, times 0 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 696.174624] CPU: 0 PID: 9125 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 696.181616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.190966] Call Trace: [ 696.190984] dump_stack+0x138/0x197 [ 696.191000] should_fail.cold+0x10f/0x159 [ 696.191014] should_failslab+0xdb/0x130 [ 696.191025] __kmalloc+0x2f0/0x7a0 [ 696.191040] ? __list_lru_init+0x6b/0x660 [ 696.191052] __list_lru_init+0x6b/0x660 [ 696.191067] sget_userns+0x4e0/0xc30 [ 696.191076] ? set_anon_super+0x20/0x20 03:36:00 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x100, 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'ppp0cgroup'}, {0x20, '&-$'}, {0x20, 'fou\x00'}, {0x20, '/dev/net/tun\x00'}, {0x20, 'fou\x00'}, {0x20, 'fou\x00'}, {0x20, '/dev/net/tun\x00'}, {0x20, '/dev/net/tun\x00'}, {0x20, 'fou\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "72233144177be76b172c8501f42d8e3fb676cd34aa7b9171f358597bdd63584f4fc1d4f1a8134a"}, 0x8d) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r6, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x605400, 0x0) ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f0000000280)={0x2, 0x7, 0x8}) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010100}, 0x172, &(0x7f0000000180)={&(0x7f0000000040)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10000020) 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 696.191089] ? get_empty_filp.cold+0x3b/0x3b [ 696.191102] mount_ns+0x6d/0x190 [ 696.201437] ? proc_get_inode+0x620/0x620 [ 696.201450] proc_mount+0x6a/0xa0 [ 696.201460] mount_fs+0x97/0x2a1 [ 696.201476] vfs_kern_mount.part.0+0x5e/0x3d0 [ 696.201487] ? rcu_read_lock_sched_held+0x110/0x130 [ 696.201499] kern_mount_data+0x56/0xc0 [ 696.256938] pid_ns_prepare_proc+0x1e/0x90 [ 696.261178] alloc_pid+0x9ef/0xc70 [ 696.264727] copy_process.part.0+0x272f/0x6a00 [ 696.264745] ? proc_fail_nth_write+0x7d/0x180 [ 696.273815] ? proc_cwd_link+0x1b0/0x1b0 [ 696.273837] ? __cleanup_sighand+0x50/0x50 [ 696.273849] ? lock_downgrade+0x740/0x740 [ 696.273867] _do_fork+0x19e/0xce0 [ 696.273880] ? fork_idle+0x280/0x280 [ 696.273898] ? fput+0xd4/0x150 [ 696.296610] ? SyS_write+0x15e/0x230 [ 696.300332] SyS_clone+0x37/0x50 [ 696.303719] ? sys_vfork+0x30/0x30 [ 696.307268] do_syscall_64+0x1e8/0x640 [ 696.311157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 696.316025] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 696.321212] RIP: 0033:0x459f39 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:36:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd}}, 0x90) r2 = fanotify_init(0x1a, 0x101600) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) 03:36:00 executing program 4 (fault-call:3 fault-nth:30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 696.324393] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 696.332177] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 696.332182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 696.332187] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 696.332192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 696.332197] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 696.449588] FAULT_INJECTION: forcing a failure. [ 696.449588] name failslab, interval 1, probability 0, space 0, times 0 [ 696.500726] CPU: 0 PID: 9160 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 696.507699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.507704] Call Trace: [ 696.507723] dump_stack+0x138/0x197 [ 696.507740] should_fail.cold+0x10f/0x159 [ 696.507755] should_failslab+0xdb/0x130 [ 696.531386] __kmalloc+0x2f0/0x7a0 [ 696.534929] ? __list_lru_init+0x6b/0x660 [ 696.534944] __list_lru_init+0x6b/0x660 [ 696.534960] sget_userns+0x500/0xc30 [ 696.534968] ? set_anon_super+0x20/0x20 [ 696.534982] ? get_empty_filp.cold+0x3b/0x3b [ 696.555130] mount_ns+0x6d/0x190 [ 696.558503] ? proc_get_inode+0x620/0x620 [ 696.562646] proc_mount+0x6a/0xa0 [ 696.566090] mount_fs+0x97/0x2a1 [ 696.569464] vfs_kern_mount.part.0+0x5e/0x3d0 [ 696.573961] ? rcu_read_lock_sched_held+0x110/0x130 [ 696.578970] kern_mount_data+0x56/0xc0 [ 696.582852] pid_ns_prepare_proc+0x1e/0x90 [ 696.587076] alloc_pid+0x9ef/0xc70 [ 696.590617] copy_process.part.0+0x272f/0x6a00 [ 696.595191] ? proc_fail_nth_write+0x7d/0x180 [ 696.599669] ? proc_cwd_link+0x1b0/0x1b0 [ 696.603719] ? __cleanup_sighand+0x50/0x50 [ 696.607965] ? lock_downgrade+0x740/0x740 [ 696.612101] _do_fork+0x19e/0xce0 [ 696.615539] ? fork_idle+0x280/0x280 [ 696.619236] ? fput+0xd4/0x150 [ 696.622411] ? SyS_write+0x15e/0x230 [ 696.626120] SyS_clone+0x37/0x50 [ 696.629484] ? sys_vfork+0x30/0x30 [ 696.633016] do_syscall_64+0x1e8/0x640 [ 696.636885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 696.641723] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 696.646896] RIP: 0033:0x459f39 [ 696.650067] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 696.657845] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 696.665110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 696.672360] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 696.679615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 696.686866] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 03:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) 03:36:00 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) io_setup(0x100, &(0x7f0000000000)=0x0) r6 = open(0x0, 0x1a3204, 0x143) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000003200)={r9, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r9, 0x2}, &(0x7f0000000140)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_submit(r5, 0x2, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xb0, r4, &(0x7f0000000180)="1454d872f6b4327b72bd892522dc5304c031651f5758094b49c7535d4029fca88d0d7cb164d2293e655696bcd62dbb6b7b3b30d878c50c3fee414a62822b55f0938a7228e7d9e06a4139767721f888c9beb41023555b6f7111221c01b2916993aee581125c53e0169bf8011c5e685e0aef5a09b3fe3cc6d185e88b55cefc0a9510d1b8689d3cac827671318beacba314ac544a581e0614905be13f3cee90b502", 0xa0, 0xffffffffffffffe1, 0x0, 0x1, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x14, 0x7, r10, &(0x7f0000000340)="9798e3125f3c406e012fe55835a3423ae6383953ced808abdd6d46d27b87aa069897788642181ae94f4dc1f4dc0d9b71bf68962095d6c8f6282e14fdfffc5120de4504c05af2fda237456e51bd5a67ee5ada1b21479a667ebe4b36dc5eb9f1799f49e2954a15dd2e2465a145b3d6e9319711f8889e410a8475d755eb2bee118a4dd48d809a23b8ab63380e1a966f3443c792cc5eef732959c234bd0adfc712130b0781f575414dab8cd9a48d9f3ca54e09a029e984d0980e3ebc2dfb1f733f0e1270ee253bb26ed0f5a2f81c2c6ae239ae2305b2648bdc0537ab6b83677eb293", 0xe0, 0x2}]) 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:36:00 executing program 4 (fault-call:3 fault-nth:31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:36:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x6c, &(0x7f0000000100)="a935d1d2074b45f3e47836bee49c78f8e4869505ee74396e54e6ee5cfc4c043c01b508b3c29a6f84dc62ac9a311f851bd95d12c5e7a3e2cd0759b4f28d9ce13b244625181d3f5e462e88366099344f85c6e194eb29a12780a14b0cfaaaf023396b69ecaa012bd5686b42c693", 0xa8, 0x0, &(0x7f00000002c0)="7fde94b0edb7f223bbd220a1443d3b08db75c5d8fb2fdf0896ff379e687a2e67ca2c8d57b9475f22633609db5b8462ef26f387ee89d96c72a6f45c597e0262d84455ff804bfd9396ec760bd2f24fb7105713a77b2b0680b0ce3dccca25a24deabc48fc72a1d6d9eeff62554afdf554a2bc75a6ec45f36316207842d5dff489c07f61f1448d47539010169d66410da0a5c38a82c795c041ea54d452af456d1f3c6ebb30105a5c4dfc"}) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd}}, 0xfffffffffffffdfc) 03:36:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d50104000000e7002efe0000dcd86c68f379241a3384baa5b5db070000006827b5010000000021096ea8945d8102e6cd3d616bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d0000000dc80d30fc46c9ddf29fe"], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r4) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r5}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r7 = open(0x0, 0x1a3204, 0x143) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000003200)={r10, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r10, 0x2}, &(0x7f0000000140)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) splice(r6, 0x0, r3, 0x0, 0x8, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) r14 = openat(r13, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r14, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 696.869356] FAULT_INJECTION: forcing a failure. [ 696.869356] name failslab, interval 1, probability 0, space 0, times 0 [ 696.904807] CPU: 0 PID: 9177 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 696.911774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.921119] Call Trace: [ 696.921136] dump_stack+0x138/0x197 [ 696.921153] should_fail.cold+0x10f/0x159 [ 696.921169] should_failslab+0xdb/0x130 [ 696.921184] __kmalloc+0x2f0/0x7a0 [ 696.939024] ? __list_lru_init+0x6b/0x660 [ 696.943182] __list_lru_init+0x6b/0x660 [ 696.947166] sget_userns+0x500/0xc30 [ 696.950882] ? set_anon_super+0x20/0x20 [ 696.954888] ? get_empty_filp.cold+0x3b/0x3b [ 696.957265] sg_write: data in/out 262577/26 bytes for SCSI command 0xb5-- guessing data in; [ 696.957265] program syz-executor.3 not setting count and/or reply_len properly [ 696.959294] mount_ns+0x6d/0x190 [ 696.959305] ? proc_get_inode+0x620/0x620 [ 696.959315] proc_mount+0x6a/0xa0 [ 696.959328] mount_fs+0x97/0x2a1 [ 696.989586] vfs_kern_mount.part.0+0x5e/0x3d0 [ 696.989599] ? rcu_read_lock_sched_held+0x110/0x130 [ 696.999102] kern_mount_data+0x56/0xc0 [ 697.002994] pid_ns_prepare_proc+0x1e/0x90 [ 697.007232] alloc_pid+0x9ef/0xc70 [ 697.010780] copy_process.part.0+0x272f/0x6a00 [ 697.015371] ? proc_fail_nth_write+0x7d/0x180 [ 697.019870] ? proc_cwd_link+0x1b0/0x1b0 [ 697.023945] ? __cleanup_sighand+0x50/0x50 [ 697.028176] ? lock_downgrade+0x740/0x740 [ 697.032322] _do_fork+0x19e/0xce0 [ 697.032336] ? fork_idle+0x280/0x280 [ 697.032352] ? fput+0xd4/0x150 [ 697.042691] ? SyS_write+0x15e/0x230 [ 697.046412] SyS_clone+0x37/0x50 [ 697.049782] ? sys_vfork+0x30/0x30 [ 697.053352] do_syscall_64+0x1e8/0x640 [ 697.057247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 697.062095] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 697.067281] RIP: 0033:0x459f39 03:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 03:36:00 executing program 4 (fault-call:3 fault-nth:32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:36:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 697.070469] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 697.078180] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 697.078186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 697.078191] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 697.078197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 697.078203] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 697.186155] FAULT_INJECTION: forcing a failure. [ 697.186155] name failslab, interval 1, probability 0, space 0, times 0 [ 697.228728] CPU: 1 PID: 9210 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 697.235702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.245079] Call Trace: [ 697.245097] dump_stack+0x138/0x197 [ 697.245114] should_fail.cold+0x10f/0x159 [ 697.245130] should_failslab+0xdb/0x130 [ 697.245144] kmem_cache_alloc+0x2d7/0x780 [ 697.245155] ? proc_parse_options+0x232/0x2b0 [ 697.251376] ? proc_i_callback+0x30/0x30 [ 697.251387] proc_alloc_inode+0x1c/0x1a0 [ 697.251398] alloc_inode+0x64/0x180 [ 697.251409] new_inode_pseudo+0x19/0xf0 [ 697.251422] proc_get_inode+0x20/0x620 [ 697.251444] proc_fill_super+0x1f3/0x2e6 [ 697.251454] mount_ns+0xec/0x190 [ 697.251461] ? proc_get_inode+0x620/0x620 [ 697.251472] proc_mount+0x6a/0xa0 [ 697.251481] mount_fs+0x97/0x2a1 [ 697.251495] vfs_kern_mount.part.0+0x5e/0x3d0 [ 697.251506] ? rcu_read_lock_sched_held+0x110/0x130 [ 697.251517] kern_mount_data+0x56/0xc0 [ 697.251526] pid_ns_prepare_proc+0x1e/0x90 [ 697.323648] alloc_pid+0x9ef/0xc70 [ 697.327192] copy_process.part.0+0x272f/0x6a00 [ 697.331780] ? proc_fail_nth_write+0x7d/0x180 [ 697.336267] ? proc_cwd_link+0x1b0/0x1b0 [ 697.340329] ? __cleanup_sighand+0x50/0x50 [ 697.344553] ? lock_downgrade+0x740/0x740 [ 697.348686] _do_fork+0x19e/0xce0 [ 697.352129] ? fork_idle+0x280/0x280 [ 697.355834] ? fput+0xd4/0x150 [ 697.359061] ? SyS_write+0x15e/0x230 [ 697.362772] SyS_clone+0x37/0x50 [ 697.366136] ? sys_vfork+0x30/0x30 [ 697.369670] do_syscall_64+0x1e8/0x640 [ 697.373544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 697.378385] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 697.383577] RIP: 0033:0x459f39 [ 697.386750] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 697.394446] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 697.401706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 697.408973] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 697.416252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 697.423506] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 697.431189] proc_fill_super: get root inode failed 03:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) 03:36:01 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9f0000, 0x8, 0x7dc8203b, [], &(0x7f00000000c0)={0x9909d5, 0x2, [], @ptr=0x10000}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xfffffffffffffffd}}, 0x90) 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:36:01 executing program 4 (fault-call:3 fault-nth:33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 03:36:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd6850789073e03f81cefc3a30c85ebda2e1f614b6954707f101a700fcf467d74d000"/101], 0x4a) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r2 = getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) accept4$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000280)={0x7f, 0xfe3ef80889b57f21, "3ad7f15017cf303cc24d2b4482af3492625d7d7b8a118883b02bc9cdd5fff1df", 0x1, 0xc0, 0x67e3ae64, 0xfffffc00, 0x82}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000240)=r5) r6 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x68, 0x0, 0x81, 0x2, 0x0, 0x20, 0x0, 0x0, r6}, {0x2, 0x1, 0x3ff, 0x20, 0x3, 0xc1, 0x0, 0x7}, {0x8, 0xffffffffffffff87, 0x0, 0xfff}, 0x4074ddd4, 0x6e6bba, 0x1, 0x0, 0x5}, {{@in6=@dev={0xfe, 0x80, [], 0x27}, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x6efe7d2bef4e23ef, 0x2, 0x7, 0x9, 0xfffffff7, 0x1}}, 0xe8) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat(r9, &(0x7f0000000740)='./file0\x00', 0x8000, 0x8) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000780)=@ccm_128={{0x303}, "c46d30cb719760f5", "67924bbe911fb4deb2fb0b852fc31ff6", "77c933a0", "1156b03994182d88"}, 0x28) syz_open_procfs(r2, &(0x7f0000000000)='comm\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 697.783434] FAULT_INJECTION: forcing a failure. [ 697.783434] name failslab, interval 1, probability 0, space 0, times 0 [ 697.822057] CPU: 1 PID: 9222 Comm: syz-executor.4 Not tainted 4.14.150 #0 03:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) [ 697.829011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.829017] Call Trace: [ 697.829033] dump_stack+0x138/0x197 [ 697.829053] should_fail.cold+0x10f/0x159 [ 697.829069] should_failslab+0xdb/0x130 [ 697.829079] __kmalloc+0x2f0/0x7a0 [ 697.829092] ? lock_downgrade+0x740/0x740 [ 697.860526] ? register_shrinker+0xbd/0x220 [ 697.864849] register_shrinker+0xbd/0x220 [ 697.864861] sget_userns+0x9bf/0xc30 [ 697.864871] ? set_anon_super+0x20/0x20 [ 697.864886] ? get_empty_filp.cold+0x3b/0x3b 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 697.864896] mount_ns+0x6d/0x190 [ 697.864907] ? proc_get_inode+0x620/0x620 [ 697.881133] proc_mount+0x6a/0xa0 [ 697.881146] mount_fs+0x97/0x2a1 [ 697.881162] vfs_kern_mount.part.0+0x5e/0x3d0 [ 697.881174] ? rcu_read_lock_sched_held+0x110/0x130 [ 697.881188] kern_mount_data+0x56/0xc0 [ 697.881198] pid_ns_prepare_proc+0x1e/0x90 [ 697.881211] alloc_pid+0x9ef/0xc70 [ 697.881231] copy_process.part.0+0x272f/0x6a00 [ 697.895535] ? proc_fail_nth_write+0x7d/0x180 [ 697.895545] ? proc_cwd_link+0x1b0/0x1b0 [ 697.895569] ? __cleanup_sighand+0x50/0x50 03:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 697.895579] ? lock_downgrade+0x740/0x740 [ 697.895593] _do_fork+0x19e/0xce0 [ 697.941612] ? fork_idle+0x280/0x280 [ 697.945342] ? fput+0xd4/0x150 [ 697.948535] ? SyS_write+0x15e/0x230 [ 697.952256] SyS_clone+0x37/0x50 [ 697.955623] ? sys_vfork+0x30/0x30 [ 697.959167] do_syscall_64+0x1e8/0x640 [ 697.963054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 697.967905] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 697.973098] RIP: 0033:0x459f39 [ 697.976325] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 697.984032] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 697.991391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 697.998665] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 698.005931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 698.005938] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 698.021021] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 698.021021] program syz-executor.3 not setting count and/or reply_len properly 03:36:01 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x100, 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'ppp0cgroup'}, {0x20, '&-$'}, {0x20, 'fou\x00'}, {0x20, '/dev/net/tun\x00'}, {0x20, 'fou\x00'}, {0x20, 'fou\x00'}, {0x20, '/dev/net/tun\x00'}, {0x20, '/dev/net/tun\x00'}, {0x20, 'fou\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "72233144177be76b172c8501f42d8e3fb676cd34aa7b9171f358597bdd63584f4fc1d4f1a8134a"}, 0x8d) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r6, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x605400, 0x0) ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f0000000280)={0x2, 0x7, 0x8}) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010100}, 0x172, &(0x7f0000000180)={&(0x7f0000000040)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10000020) 03:36:01 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 03:36:01 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100e8ff0000000000000000000001e000000100000000000000000000000000000000000000000a000000000000002dcf801fb26100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f00000000c0)={@dev}, 0x20) 03:36:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000001ad984d092917373038a059e1aa5c4b928ce2e01a2077b3e50429eef1bc989a7ea4da94bd3fd9b2ffff5aa48e56c4d081f13ba7b5af43d58ed74d6412667a92828370f5824c144b90e"], 0x2c, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x4, {0xfefffffffffffffd, 0x0, 0x0, 0x10001, 0x0, 0x0, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x9, 0x3, 0x0, r2, 0x4, 0xfffffffc}}}, 0x90) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x8, @remote, 0x5}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x6048, @mcast2, 0xfffffff8}], 0x58) 03:36:02 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) [ 698.305479] refcount_t: underflow; use-after-free. [ 698.328144] ------------[ cut here ]------------ [ 698.332944] WARNING: CPU: 0 PID: 9222 at lib/refcount.c:187 refcount_sub_and_test.cold+0x18/0x22 [ 698.341886] Kernel panic - not syncing: panic_on_warn set ... [ 698.341886] [ 698.349249] CPU: 0 PID: 9222 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 698.356174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.365523] Call Trace: [ 698.368115] dump_stack+0x138/0x197 [ 698.371746] panic+0x1f9/0x42d [ 698.374941] ? add_taint.cold+0x16/0x16 [ 698.378922] ? refcount_sub_and_test.cold+0x18/0x22 [ 698.383940] ? __warn.cold+0x14/0x2f [ 698.387657] ? refcount_sub_and_test.cold+0x18/0x22 [ 698.392672] __warn.cold+0x2f/0x2f [ 698.396214] ? ist_end_non_atomic+0x10/0x10 [ 698.400535] ? refcount_sub_and_test.cold+0x18/0x22 [ 698.405552] report_bug+0x216/0x254 [ 698.409186] do_error_trap+0x1bb/0x310 [ 698.413076] ? math_error+0x360/0x360 [ 698.416885] ? vprintk_emit+0x21c/0x600 [ 698.420867] ? vprintk_emit+0x171/0x600 [ 698.424849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 698.429695] do_invalid_op+0x1b/0x20 [ 698.433411] invalid_op+0x1b/0x40 [ 698.436866] RIP: 0010:refcount_sub_and_test.cold+0x18/0x22 [ 698.442482] RSP: 0018:ffff8882110cfaf8 EFLAGS: 00010286 [ 698.447844] RAX: 0000000000000026 RBX: 0000000000000000 RCX: 0000000000000000 [ 698.455112] RDX: 0000000000040000 RSI: ffffffff814b3f65 RDI: ffffed1042219f55 [ 698.462379] RBP: ffff8882110cfb20 R08: 0000000000000026 R09: 0000000000000000 [ 698.469656] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888057f45570 [ 698.476934] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000034004102 [ 698.484226] ? vprintk_func+0x65/0x159 [ 698.488122] ? refcount_sub_and_test.cold+0x18/0x22 [ 698.493147] refcount_dec_and_test+0x1b/0x20 [ 698.497565] put_pid_ns+0x55/0x110 [ 698.501116] free_nsproxy+0x103/0x200 [ 698.504927] switch_task_namespaces+0x98/0xb0 [ 698.509426] exit_task_namespaces+0x18/0x20 [ 698.513750] copy_process.part.0+0x3b59/0x6a00 [ 698.518342] ? proc_fail_nth_write+0x7d/0x180 [ 698.522947] ? proc_cwd_link+0x1b0/0x1b0 [ 698.527022] ? __cleanup_sighand+0x50/0x50 [ 698.531261] ? lock_downgrade+0x740/0x740 [ 698.535419] _do_fork+0x19e/0xce0 [ 698.538876] ? fork_idle+0x280/0x280 [ 698.542594] ? fput+0xd4/0x150 [ 698.545786] ? SyS_write+0x15e/0x230 [ 698.549502] SyS_clone+0x37/0x50 [ 698.552869] ? sys_vfork+0x30/0x30 [ 698.556414] do_syscall_64+0x1e8/0x640 [ 698.560308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 698.565160] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 698.570345] RIP: 0033:0x459f39 [ 698.573535] RSP: 002b:00007f569841fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 698.581242] RAX: ffffffffffffffda RBX: 00007f569841fc90 RCX: 0000000000459f39 [ 698.588511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000034004102 [ 698.595778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 698.603060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56984206d4 [ 698.610326] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000005 [ 698.618738] Kernel Offset: disabled [ 698.622515] Rebooting in 86400 seconds..