4, &(0x7f0000000080), 0x80000003) 05:04:15 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x10000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = dup2(r0, r0) flock(r1, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r2, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000140)) sendfile(r2, r4, &(0x7f0000000080), 0x80000003) 05:04:15 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x10000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = dup2(r0, r0) flock(r1, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r2, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000140)) sendfile(r2, r4, &(0x7f0000000080), 0x80000003) 05:04:15 executing program 3: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d80)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@dev, @random="247db6f041fb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x9]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r3 = socket(0x40000000002, 0x3, 0x2) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12400) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xfffffffffffffd6e, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9, 0x121800) [ 325.848370] audit: type=1800 audit(1541567055.831:41): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16904 res=0 [ 325.964427] audit: type=1804 audit(1541567055.901:42): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir960120423/syzkaller.rE5pPV/106/file0" dev="sda1" ino=16904 res=1 05:04:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a04e400000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96e0275b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e4842edf230018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c\x00'}, &(0x7f0000000700)}) 05:04:16 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'irlan0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, r0) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={"ffffff"}, &(0x7f0000000a00)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x4c1, r0) keyctl$read(0xb, r1, &(0x7f0000005340)=""/4096, 0xd900) 05:04:16 executing program 4: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d80)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@dev, @random="247db6f041fb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x9]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r3 = socket(0x40000000002, 0x3, 0x2) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12400) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xfffffffffffffd6e, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9, 0x121800) 05:04:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a04e400000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96e0275b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e4842edf230018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c\x00'}, &(0x7f0000000700)}) [ 326.303996] audit: type=1800 audit(1541567056.291:43): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16895 res=0 [ 326.344278] audit: type=1804 audit(1541567056.331:44): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir986876124/syzkaller.OdBxlp/113/file0" dev="sda1" ino=16895 res=1 05:04:16 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x4) 05:04:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a04e400000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96e0275b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e4842edf230018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c\x00'}, &(0x7f0000000700)}) [ 326.926307] tmpfs: No value for mount option './file0' 05:04:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) 05:04:17 executing program 1: memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c15576382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d101546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e279352337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000000000000000000000000000000000000000000000000000", 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) 05:04:17 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) 05:04:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) 05:04:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a04e400000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96e0275b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e4842edf230018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c\x00'}, &(0x7f0000000700)}) 05:04:17 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) 05:04:17 executing program 1: memfd_create(&(0x7f0000000380)="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", 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) 05:04:17 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) 05:04:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) 05:04:17 executing program 4: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d80)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@dev, @random="247db6f041fb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x9]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r3 = socket(0x40000000002, 0x3, 0x2) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12400) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xfffffffffffffd6e, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9, 0x121800) 05:04:17 executing program 3: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d80)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@dev, @random="247db6f041fb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x9]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r3 = socket(0x40000000002, 0x3, 0x2) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12400) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xfffffffffffffd6e, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9, 0x121800) [ 327.664489] audit: type=1800 audit(1541567057.651:45): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16907 res=0 05:04:17 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) 05:04:17 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) [ 327.708951] audit: type=1804 audit(1541567057.691:46): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir986876124/syzkaller.OdBxlp/114/file0" dev="sda1" ino=16907 res=1 [ 327.798300] audit: type=1800 audit(1541567057.781:47): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16769 res=0 05:04:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) 05:04:18 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) 05:04:18 executing program 1: memfd_create(&(0x7f0000000380)="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", 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) 05:04:18 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) 05:04:18 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) 05:04:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) 05:04:18 executing program 1: memfd_create(&(0x7f0000000380)="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", 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) 05:04:18 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x100, 0x7ff, 0x2, 0x3, 0x0, 0x9, 0x183, 0x5, 0x4e2a3a01, 0x1, 0x1, 0xffffffffffffffe0, 0x2, 0x1, 0x7, 0x9, 0x0, 0x10000, 0x0, 0x4, 0x5440e06f, 0x0, 0x7, 0x0, 0x8, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffffffff9f62, 0x3, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) setpriority(0x1, 0x0, 0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 05:04:19 executing program 4: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d80)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@dev, @random="247db6f041fb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x9]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r3 = socket(0x40000000002, 0x3, 0x2) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12400) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xfffffffffffffd6e, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9, 0x121800) [ 329.136629] kauditd_printk_skb: 1 callbacks suppressed [ 329.136642] audit: type=1800 audit(1541567059.121:49): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16907 res=0 [ 329.169991] audit: type=1804 audit(1541567059.131:50): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir986876124/syzkaller.OdBxlp/115/file0" dev="sda1" ino=16907 res=1 05:04:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) 05:04:19 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) 05:04:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x1000000080081) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) mmap$xdp(&(0x7f0000cf5000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'ip6gretap0\x00', r1}) getsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000300)=""/100, 0x64}, &(0x7f0000000380), 0x1}, 0x20) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) 05:04:19 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x100, 0x7ff, 0x2, 0x3, 0x0, 0x9, 0x183, 0x5, 0x4e2a3a01, 0x1, 0x1, 0xffffffffffffffe0, 0x2, 0x1, 0x7, 0x9, 0x0, 0x10000, 0x0, 0x4, 0x5440e06f, 0x0, 0x7, 0x0, 0x8, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffffffff9f62, 0x3, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) setpriority(0x1, 0x0, 0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 05:04:19 executing program 3: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d80)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@dev, @random="247db6f041fb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x9]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r3 = socket(0x40000000002, 0x3, 0x2) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12400) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xfffffffffffffd6e, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9, 0x121800) [ 329.406782] audit: type=1800 audit(1541567059.391:51): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16921 res=0 05:04:19 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2}) [ 329.575584] audit: type=1804 audit(1541567059.521:52): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir960120423/syzkaller.rE5pPV/108/file0" dev="sda1" ino=16921 res=1 05:04:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) 05:04:19 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x100, 0x7ff, 0x2, 0x3, 0x0, 0x9, 0x183, 0x5, 0x4e2a3a01, 0x1, 0x1, 0xffffffffffffffe0, 0x2, 0x1, 0x7, 0x9, 0x0, 0x10000, 0x0, 0x4, 0x5440e06f, 0x0, 0x7, 0x0, 0x8, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffffffff9f62, 0x3, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) setpriority(0x1, 0x0, 0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 05:04:20 executing program 0: request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0) 05:04:20 executing program 5: mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) open(&(0x7f0000000000)='./control\x00', 0xc40beb2474dfd22a, 0xf6ffffff) 05:04:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x2, 0x40, 0x2, 0x3f, 0xfff, {0x3, 0x20, 0x200, 0x8, 0x2, 0x7fffffff, 0x100000001, 0x8, 0x8001, 0x6, 0x1, r1, r2, 0x2, 0xff}}, {0x0, 0x2}}}, 0xa0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 05:04:20 executing program 5: mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) open(&(0x7f0000000000)='./control\x00', 0xc40beb2474dfd22a, 0xf6ffffff) 05:04:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x3}) 05:04:20 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x100, 0x7ff, 0x2, 0x3, 0x0, 0x9, 0x183, 0x5, 0x4e2a3a01, 0x1, 0x1, 0xffffffffffffffe0, 0x2, 0x1, 0x7, 0x9, 0x0, 0x10000, 0x0, 0x4, 0x5440e06f, 0x0, 0x7, 0x0, 0x8, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffffffff9f62, 0x3, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) setpriority(0x1, 0x0, 0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 05:04:20 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x100, 0x7ff, 0x2, 0x3, 0x0, 0x9, 0x183, 0x5, 0x4e2a3a01, 0x1, 0x1, 0xffffffffffffffe0, 0x2, 0x1, 0x7, 0x9, 0x0, 0x10000, 0x0, 0x4, 0x5440e06f, 0x0, 0x7, 0x0, 0x8, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffffffff9f62, 0x3, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) setpriority(0x1, 0x0, 0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) [ 330.619349] llc_conn_state_process: llc_conn_service failed 05:04:20 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000140)}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)=[{0x18, 0x0, 0x7, "8307"}], 0x18}, 0x0) [ 330.770137] llc_conn_state_process: llc_conn_service failed 05:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x2, 0x40, 0x2, 0x3f, 0xfff, {0x3, 0x20, 0x200, 0x8, 0x2, 0x7fffffff, 0x100000001, 0x8, 0x8001, 0x6, 0x1, r1, r2, 0x2, 0xff}}, {0x0, 0x2}}}, 0xa0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 05:04:21 executing program 5: mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) open(&(0x7f0000000000)='./control\x00', 0xc40beb2474dfd22a, 0xf6ffffff) 05:04:21 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x100, 0x7ff, 0x2, 0x3, 0x0, 0x9, 0x183, 0x5, 0x4e2a3a01, 0x1, 0x1, 0xffffffffffffffe0, 0x2, 0x1, 0x7, 0x9, 0x0, 0x10000, 0x0, 0x4, 0x5440e06f, 0x0, 0x7, 0x0, 0x8, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffffffff9f62, 0x3, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) setpriority(0x1, 0x0, 0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 05:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x2, 0x40, 0x2, 0x3f, 0xfff, {0x3, 0x20, 0x200, 0x8, 0x2, 0x7fffffff, 0x100000001, 0x8, 0x8001, 0x6, 0x1, r1, r2, 0x2, 0xff}}, {0x0, 0x2}}}, 0xa0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 05:04:21 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x100, 0x7ff, 0x2, 0x3, 0x0, 0x9, 0x183, 0x5, 0x4e2a3a01, 0x1, 0x1, 0xffffffffffffffe0, 0x2, 0x1, 0x7, 0x9, 0x0, 0x10000, 0x0, 0x4, 0x5440e06f, 0x0, 0x7, 0x0, 0x8, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xffffffffffff9f62, 0x3, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) setpriority(0x1, 0x0, 0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 05:04:21 executing program 5: mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) open(&(0x7f0000000000)='./control\x00', 0xc40beb2474dfd22a, 0xf6ffffff) 05:04:21 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000000004c, &(0x7f0000000080)=0x1000000, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffba73, 0x4800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x15001, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 05:04:21 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) pipe(&(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc), 0x4) [ 331.231504] llc_conn_state_process: llc_conn_service failed [ 331.235538] llc_conn_state_process: llc_conn_service failed 05:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x2, 0x40, 0x2, 0x3f, 0xfff, {0x3, 0x20, 0x200, 0x8, 0x2, 0x7fffffff, 0x100000001, 0x8, 0x8001, 0x6, 0x1, r1, r2, 0x2, 0xff}}, {0x0, 0x2}}}, 0xa0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 05:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x2, 0x40, 0x2, 0x3f, 0xfff, {0x3, 0x20, 0x200, 0x8, 0x2, 0x7fffffff, 0x100000001, 0x8, 0x8001, 0x6, 0x1, r1, r2, 0x2, 0xff}}, {0x0, 0x2}}}, 0xa0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 05:04:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0xc) 05:04:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0xc) 05:04:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r1, &(0x7f00000000c0)="c4", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='syz"q1'], 0x6) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0x7, 0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) accept4(r0, 0x0, &(0x7f0000000080), 0x0) [ 331.599670] llc_conn_state_process: llc_conn_service failed 05:04:21 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) pipe(&(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc), 0x4) 05:04:21 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, [{}], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040)) 05:04:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0xc) 05:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x2, 0x40, 0x2, 0x3f, 0xfff, {0x3, 0x20, 0x200, 0x8, 0x2, 0x7fffffff, 0x100000001, 0x8, 0x8001, 0x6, 0x1, r1, r2, 0x2, 0xff}}, {0x0, 0x2}}}, 0xa0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 331.711570] llc_conn_state_process: llc_conn_service failed 05:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x3, 0x2, 0x40, 0x2, 0x3f, 0xfff, {0x3, 0x20, 0x200, 0x8, 0x2, 0x7fffffff, 0x100000001, 0x8, 0x8001, 0x6, 0x1, r1, r2, 0x2, 0xff}}, {0x0, 0x2}}}, 0xa0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 05:04:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000b7ff8)={0x0, 0x269}, &(0x7f0000000000)=0xa80) 05:04:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0xc) 05:04:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, &(0x7f00000001c0)="d82d95ea6e8e67cc61b1de0a3d6465b2772731281d3003091bb509d1f48a0e95024b19ba5a2e0b1d223e5d7d3edc4f7ef1e961cd21753c16541e904bf86539da0e1028ef355ef42335c73a52658e5d390d4ecf66db9df9e27d2fc2754b3cfef6a0dd9e316e0e43431af75dc51432aa1016a6773dae4b0f3cc8afa0000000fb4279", 0x81, 0x810, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x401, 0xf9b, 0x0, @random="0387945b9f37"}, 0x10) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x101a40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 05:04:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) [ 331.992643] llc_conn_state_process: llc_conn_service failed 05:04:22 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000040)) [ 332.093573] llc_conn_state_process: llc_conn_service failed 05:04:22 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000040)) 05:04:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, &(0x7f00000001c0)="d82d95ea6e8e67cc61b1de0a3d6465b2772731281d3003091bb509d1f48a0e95024b19ba5a2e0b1d223e5d7d3edc4f7ef1e961cd21753c16541e904bf86539da0e1028ef355ef42335c73a52658e5d390d4ecf66db9df9e27d2fc2754b3cfef6a0dd9e316e0e43431af75dc51432aa1016a6773dae4b0f3cc8afa0000000fb4279", 0x81, 0x810, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x401, 0xf9b, 0x0, @random="0387945b9f37"}, 0x10) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x101a40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 05:04:22 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) pipe(&(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc), 0x4) 05:04:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) 05:04:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x23c, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) 05:04:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000000)='S', 0x1}], 0x1, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340), 0x0) write$P9_RSTAT(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='E'], 0x1) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x350, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 05:04:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x0) 05:04:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, &(0x7f00000001c0)="d82d95ea6e8e67cc61b1de0a3d6465b2772731281d3003091bb509d1f48a0e95024b19ba5a2e0b1d223e5d7d3edc4f7ef1e961cd21753c16541e904bf86539da0e1028ef355ef42335c73a52658e5d390d4ecf66db9df9e27d2fc2754b3cfef6a0dd9e316e0e43431af75dc51432aa1016a6773dae4b0f3cc8afa0000000fb4279", 0x81, 0x810, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x401, 0xf9b, 0x0, @random="0387945b9f37"}, 0x10) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x101a40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 05:04:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000000)='S', 0x1}], 0x1, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340), 0x0) write$P9_RSTAT(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='E'], 0x1) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x350, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 05:04:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) 05:04:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, &(0x7f00000001c0)="d82d95ea6e8e67cc61b1de0a3d6465b2772731281d3003091bb509d1f48a0e95024b19ba5a2e0b1d223e5d7d3edc4f7ef1e961cd21753c16541e904bf86539da0e1028ef355ef42335c73a52658e5d390d4ecf66db9df9e27d2fc2754b3cfef6a0dd9e316e0e43431af75dc51432aa1016a6773dae4b0f3cc8afa0000000fb4279", 0x81, 0x810, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x401, 0xf9b, 0x0, @random="0387945b9f37"}, 0x10) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x101a40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 05:04:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sysfs$1(0xffffff1f, &(0x7f0000000180)="27776c6107000000627f101247f3c801232fd1bc878bc1cd407ada812f6cdd754d70aabdbd12c2e1d159a6e21938d7c416d55cfffc2afef91dbb2ff58ed474a3899edcbfecfaf6c22f4098c81b7a56766ef6fc1c1c8d3b76a0efe978ca17fd59214f7fbf816d2fcab0874a15d53058434c") 05:04:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x23c, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) 05:04:22 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x23c, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) 05:04:22 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) pipe(&(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc), 0x4) 05:04:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000000)='S', 0x1}], 0x1, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340), 0x0) write$P9_RSTAT(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='E'], 0x1) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x350, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 05:04:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6d6f64653d313137373737373737373737373793"]) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f0000000180)) 05:04:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) 05:04:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x23c, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) 05:04:22 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x23c, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) 05:04:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000000)='S', 0x1}], 0x1, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340), 0x0) write$P9_RSTAT(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='E'], 0x1) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x350, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) [ 332.931759] tmpfs: Bad value '11777777777777“' for mount option 'mode' 05:04:23 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x23c, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) 05:04:23 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8dc, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 333.037411] tmpfs: Bad value '11777777777777“' for mount option 'mode' 05:04:23 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00000000c0)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) 05:04:23 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x400) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) execveat(r1, &(0x7f0000000140)='\x00', &(0x7f0000000380), &(0x7f0000000100), 0x1000) 05:04:23 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x23c, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) 05:04:23 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 05:04:23 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x400) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) execveat(r1, &(0x7f0000000140)='\x00', &(0x7f0000000380), &(0x7f0000000100), 0x1000) [ 333.317387] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:04:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x2, 0x86}]}}}]}, 0x3c}}, 0x0) 05:04:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000005060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) [ 333.382095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 333.406454] netlink: 'syz-executor2': attribute type 5 has an invalid length. 05:04:23 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 05:04:23 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x400) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) execveat(r1, &(0x7f0000000140)='\x00', &(0x7f0000000380), &(0x7f0000000100), 0x1000) 05:04:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) getpid() getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) [ 333.426635] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 333.439224] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 333.442040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 333.452278] netlink: 'syz-executor2': attribute type 5 has an invalid length. 05:04:23 executing program 0: socketpair(0x0, 0x0, 0x7, &(0x7f0000002880)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x1200000000000000, 0x297ef) 05:04:23 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00000000c0)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) 05:04:23 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x2, &(0x7f0000000080), 0x4) 05:04:23 executing program 1: fsetxattr(0xffffffffffffffff, &(0x7f0000001640)=ANY=[], &(0x7f0000000180)="766574000000000000000000bd6800", 0xf, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100"}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) [ 333.617698] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 333.663530] netlink: 'syz-executor2': attribute type 5 has an invalid length. 05:04:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) getpid() getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) 05:04:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) getpid() getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) 05:04:23 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x400) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) execveat(r1, &(0x7f0000000140)='\x00', &(0x7f0000000380), &(0x7f0000000100), 0x1000) 05:04:23 executing program 0: socketpair(0x0, 0x0, 0x7, &(0x7f0000002880)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x1200000000000000, 0x297ef) 05:04:23 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00000000c0)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) 05:04:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) getpid() getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) 05:04:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) getpid() getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) 05:04:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 333.949024] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:04:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) getpid() getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) 05:04:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) getpid() getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) [ 334.035156] netlink: 'syz-executor2': attribute type 5 has an invalid length. 05:04:24 executing program 4: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 05:04:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 05:04:24 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00000000c0)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) 05:04:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xa, 0x800, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000011c0)=""/4096}, 0x18) 05:04:24 executing program 0: socketpair(0x0, 0x0, 0x7, &(0x7f0000002880)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x1200000000000000, 0x297ef) 05:04:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) [ 334.309526] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:04:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 05:04:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x3) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 334.358558] netlink: 'syz-executor2': attribute type 5 has an invalid length. 05:04:24 executing program 5: add_key(&(0x7f0000000480)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0x0) 05:04:24 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x100070000000000, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 05:04:24 executing program 0: socketpair(0x0, 0x0, 0x7, &(0x7f0000002880)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x1200000000000000, 0x297ef) 05:04:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffffffffdab, @broadcast}, 0x7) 05:04:25 executing program 4: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 05:04:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 05:04:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_ifreq(r1, 0x89bb, &(0x7f0000000080)={"7465616d5f73000100", @ifru_flags}) 05:04:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)={[{@codepage={'codepage', 0x3d, 'ascii'}}, {@codepage={'codepage', 0x3d, 'utf8'}}]}) 05:04:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x6}}) 05:04:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={"626f6e643000000001feffff00"}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f00000000c0)={'bond0\x00', 0xfff}) fsetxattr(r1, &(0x7f0000000400)=@known='trusted.overlay.nlink\x00', &(0x7f0000000540)="626f6e643000000001feffff00", 0xd, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r1}) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f00000005c0)={0x0, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="fcff020000000000000008000000"], 0x1}}, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x10000, 0x55bcbb2a, 0x3, 0xffffffffffff0000, 0x1}, &(0x7f0000000840)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000880)={0xfffffffffffffbff, 0x8200, 0xffffffffffffff01, 0x2, r4}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000008c0)=0x66) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x84) syncfs(r0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80002) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x1}}, 0x18) connect$l2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x3, 0x0, {0xa, 0x4e23, 0x101, @remote, 0x6}}}, 0x32) ioctl$RTC_WIE_OFF(r5, 0x7010) ioctl$TIOCNOTTY(r5, 0x5422) 05:04:25 executing program 2: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 335.133533] hfs: unable to change codepage [ 335.137949] hfs: unable to parse mount options 05:04:25 executing program 3: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 05:04:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x27, 0xaff, 0x0, 0x0, {0x3}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @binary}]}]}, 0x1fd}}, 0x0) [ 335.280149] hfs: unable to change codepage [ 335.290759] hfs: unable to parse mount options 05:04:25 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000480)=""/204, 0xcc, 0x0) 05:04:25 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000480)=""/204, 0xcc, 0x0) 05:04:25 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000480)=""/204, 0xcc, 0x0) 05:04:26 executing program 4: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 05:04:26 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000480)=""/204, 0xcc, 0x0) 05:04:26 executing program 2: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 337.970282] ÿ: renamed from bond0 05:04:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)={[{@codepage={'codepage', 0x3d, 'ascii'}}, {@codepage={'codepage', 0x3d, 'utf8'}}]}) 05:04:28 executing program 3: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 338.140918] hfs: unable to change codepage [ 338.145777] hfs: unable to parse mount options 05:04:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={"626f6e643000000001feffff00"}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f00000000c0)={'bond0\x00', 0xfff}) fsetxattr(r1, &(0x7f0000000400)=@known='trusted.overlay.nlink\x00', &(0x7f0000000540)="626f6e643000000001feffff00", 0xd, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r1}) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f00000005c0)={0x0, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="fcff020000000000000008000000"], 0x1}}, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x10000, 0x55bcbb2a, 0x3, 0xffffffffffff0000, 0x1}, &(0x7f0000000840)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000880)={0xfffffffffffffbff, 0x8200, 0xffffffffffffff01, 0x2, r4}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000008c0)=0x66) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x84) syncfs(r0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80002) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x1}}, 0x18) connect$l2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x3, 0x0, {0xa, 0x4e23, 0x101, @remote, 0x6}}}, 0x32) ioctl$RTC_WIE_OFF(r5, 0x7010) ioctl$TIOCNOTTY(r5, 0x5422) 05:04:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000640), 0x2e2, &(0x7f0000000180)=[{0x12, 0x84, 0x6}], 0x20}, 0x0) 05:04:28 executing program 2: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 05:04:28 executing program 4: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 05:04:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)={[{@codepage={'codepage', 0x3d, 'ascii'}}, {@codepage={'codepage', 0x3d, 'utf8'}}]}) [ 338.513080] hfs: unable to change codepage [ 338.546068] hfs: unable to parse mount options 05:04:28 executing program 1: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000015c0)=[{&(0x7f0000001780)="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", 0x1ff, 0x1}], 0x0, &(0x7f0000000240)) 05:04:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)={[{@codepage={'codepage', 0x3d, 'ascii'}}, {@codepage={'codepage', 0x3d, 'utf8'}}]}) 05:04:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={"626f6e643000000001feffff00"}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f00000000c0)={'bond0\x00', 0xfff}) fsetxattr(r1, &(0x7f0000000400)=@known='trusted.overlay.nlink\x00', &(0x7f0000000540)="626f6e643000000001feffff00", 0xd, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r1}) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f00000005c0)={0x0, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="fcff020000000000000008000000"], 0x1}}, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x10000, 0x55bcbb2a, 0x3, 0xffffffffffff0000, 0x1}, &(0x7f0000000840)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000880)={0xfffffffffffffbff, 0x8200, 0xffffffffffffff01, 0x2, r4}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000008c0)=0x66) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x84) syncfs(r0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80002) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x1}}, 0x18) connect$l2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x3, 0x0, {0xa, 0x4e23, 0x101, @remote, 0x6}}}, 0x32) ioctl$RTC_WIE_OFF(r5, 0x7010) ioctl$TIOCNOTTY(r5, 0x5422) [ 339.007612] hfs: unable to change codepage [ 339.012241] XFS (loop1): Invalid superblock magic number [ 339.019266] hfs: unable to parse mount options 05:04:29 executing program 3: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f00000001c0)=@ipx, &(0x7f0000001100)=0x37e, 0x80800) shmget(0x2, 0x4000, 0x210, &(0x7f0000ffc000/0x4000)=nil) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff0000, @local, 0x9}, 0x1c) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000780)) geteuid() fstat(r1, &(0x7f00000007c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x7) setresuid(0x0, 0x0, 0x0) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) getpriority(0x3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 05:04:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000540)=@newspdinfo={0x14}, 0x14}}, 0x40000) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 05:04:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x5, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 05:04:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={"626f6e643000000001feffff00"}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f00000000c0)={'bond0\x00', 0xfff}) fsetxattr(r1, &(0x7f0000000400)=@known='trusted.overlay.nlink\x00', &(0x7f0000000540)="626f6e643000000001feffff00", 0xd, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r1}) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f00000005c0)={0x0, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="fcff020000000000000008000000"], 0x1}}, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x10000, 0x55bcbb2a, 0x3, 0xffffffffffff0000, 0x1}, &(0x7f0000000840)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000880)={0xfffffffffffffbff, 0x8200, 0xffffffffffffff01, 0x2, r4}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000008c0)=0x66) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x84) syncfs(r0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80002) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x1}}, 0x18) connect$l2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x3, 0x0, {0xa, 0x4e23, 0x101, @remote, 0x6}}}, 0x32) ioctl$RTC_WIE_OFF(r5, 0x7010) ioctl$TIOCNOTTY(r5, 0x5422) 05:04:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b70200000722ae00bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0xd7, &(0x7f0000000080)="3c2dbcd4057b6c6a639a2f0086dd", &(0x7f0000000500)=""/215, 0x3ffe}, 0x28) 05:04:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34003}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, 0x28, 0x829, 0x0, 0x0, {0xa}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) 05:04:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 05:04:29 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) geteuid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, &(0x7f0000000200), 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r4, &(0x7f0000011fd2), 0xffffffee) read(r3, &(0x7f0000000000)=""/126, 0xfffffeab) 05:04:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @rand_addr}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x20000000000001a6, 0x0) 05:04:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0xd, 0x1, &(0x7f0000519fa8)=ANY=[@ANYBLOB="1860000000000000"], &(0x7f00005fc000)='GPL\x00', 0x800a, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) 05:04:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x400000000005, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_stats={0x4b, 0x1, [0x0]}}) 05:04:29 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/143) connect$unix(r0, &(0x7f0000000100)=@file={0x0, "e91f7189591e9233614b00"}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') 05:04:30 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/143) connect$unix(r0, &(0x7f0000000100)=@file={0x0, "e91f7189591e9233614b00"}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') 05:04:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd63012c"], &(0x7f00000002c0)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x184, &(0x7f0000000300)=""/187}, 0x48) 05:04:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x400000000005, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_stats={0x4b, 0x1, [0x0]}}) 05:04:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @rand_addr}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x20000000000001a6, 0x0) 05:04:30 executing program 3: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x400000000005, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_stats={0x4b, 0x1, [0x0]}}) 05:04:30 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x0, {{0x0, 0x0, 0x6}}}, 0x18) 05:04:30 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/143) connect$unix(r0, &(0x7f0000000100)=@file={0x0, "e91f7189591e9233614b00"}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') 05:04:30 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) geteuid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, &(0x7f0000000200), 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r4, &(0x7f0000011fd2), 0xffffffee) read(r3, &(0x7f0000000000)=""/126, 0xfffffeab) 05:04:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x400000000005, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_stats={0x4b, 0x1, [0x0]}}) 05:04:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @rand_addr}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x20000000000001a6, 0x0) 05:04:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000061c0)={'bridge_slave_0\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x100000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x7}, 0x2, 0x0, 0x2, 0x0, 0x2}, {{@in6=@loopback}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) clock_gettime(0x0, &(0x7f0000000540)={0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580)={{r2}, {0x77359400}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000012c0)={'bridge_slave_0\x00l', 0x2000000c0ffffff}) 05:04:30 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/143) connect$unix(r0, &(0x7f0000000100)=@file={0x0, "e91f7189591e9233614b00"}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') 05:04:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth1\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x4}}) 05:04:30 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, &(0x7f0000000000)) 05:04:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @rand_addr}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x20000000000001a6, 0x0) [ 340.882096] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.892159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 05:04:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000400)=0xfffffffffffffe00, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 05:04:30 executing program 5: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) wait4(r2, &(0x7f0000000480), 0x7, &(0x7f00000004c0)) fcntl$setstatus(r0, 0x4, 0x0) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8000, 0x4, 0xfffffffffffffffa, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x3, 0x1, &(0x7f0000000280)='sit0\x00', 0x0, 0x7f}) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000400)=[{r1, 0x80a0}, {r3, 0x2000}, {0xffffffffffffffff, 0x410}, {r4, 0x1000}], 0x4, 0x6) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0x5) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) 05:04:30 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) geteuid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, &(0x7f0000000200), 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r4, &(0x7f0000011fd2), 0xffffffee) read(r3, &(0x7f0000000000)=""/126, 0xfffffeab) 05:04:30 executing program 3: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:30 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="3f00000000000000000000000000000007000000ac1414bbe00000024e234e2400000000000000000000000000000000000000000000000000000000000000000000000000000000d5cf2b8bd055b5d2000000000002000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000000000000000000d853aaaaaaaaaab1fffa6079011f2216000800000000000600008000000000000400000000000000010000000000000004000000050000000600edfffbffffff08000000"]}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="dc809496bc3302b5fd6481bf00ffffffe500000000000000000055122acc6ee0bf14c9a8c7c4050d163bdbb5b49617bf2b8d7bc4a7c1d3e254c56af64a95c3f3818438e976e0ce13fb3dbf8c1add340a63ec26b47c9a72a2723fdab6a4b10194200855a9184c16dcbf924601184838c4f13831e9f1050073791925f22fc213d4b8ad7dbda7d4"], &(0x7f0000000880)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x101000000000}, 0x5ea813bad44acf26) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x1000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="066de332000094560836e90615353200"], 0x1) listen(r1, 0xfffffffffffffe14) r3 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000100)=0x80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40008, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880), 0x336) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(r3, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) [ 341.104517] bridge0: port 1(bridge_slave_0) entered disabled state 05:04:31 executing program 0: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000400)=0xfffffffffffffe00, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 05:04:31 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="3f00000000000000000000000000000007000000ac1414bbe00000024e234e2400000000000000000000000000000000000000000000000000000000000000000000000000000000d5cf2b8bd055b5d2000000000002000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000000000000000000d853aaaaaaaaaab1fffa6079011f2216000800000000000600008000000000000400000000000000010000000000000004000000050000000600edfffbffffff08000000"]}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="dc809496bc3302b5fd6481bf00ffffffe500000000000000000055122acc6ee0bf14c9a8c7c4050d163bdbb5b49617bf2b8d7bc4a7c1d3e254c56af64a95c3f3818438e976e0ce13fb3dbf8c1add340a63ec26b47c9a72a2723fdab6a4b10194200855a9184c16dcbf924601184838c4f13831e9f1050073791925f22fc213d4b8ad7dbda7d4"], &(0x7f0000000880)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x101000000000}, 0x5ea813bad44acf26) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x1000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="066de332000094560836e90615353200"], 0x1) listen(r1, 0xfffffffffffffe14) r3 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000100)=0x80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40008, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880), 0x336) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(r3, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) 05:04:32 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="3f00000000000000000000000000000007000000ac1414bbe00000024e234e2400000000000000000000000000000000000000000000000000000000000000000000000000000000d5cf2b8bd055b5d2000000000002000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000000000000000000d853aaaaaaaaaab1fffa6079011f2216000800000000000600008000000000000400000000000000010000000000000004000000050000000600edfffbffffff08000000"]}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="dc809496bc3302b5fd6481bf00ffffffe500000000000000000055122acc6ee0bf14c9a8c7c4050d163bdbb5b49617bf2b8d7bc4a7c1d3e254c56af64a95c3f3818438e976e0ce13fb3dbf8c1add340a63ec26b47c9a72a2723fdab6a4b10194200855a9184c16dcbf924601184838c4f13831e9f1050073791925f22fc213d4b8ad7dbda7d4"], &(0x7f0000000880)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x101000000000}, 0x5ea813bad44acf26) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x1000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="066de332000094560836e90615353200"], 0x1) listen(r1, 0xfffffffffffffe14) r3 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000100)=0x80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40008, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880), 0x336) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(r3, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) 05:04:32 executing program 3: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000400)=0xfffffffffffffe00, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 05:04:32 executing program 0: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:32 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) geteuid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, &(0x7f0000000200), 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r4, &(0x7f0000011fd2), 0xffffffee) read(r3, &(0x7f0000000000)=""/126, 0xfffffeab) 05:04:32 executing program 5: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) wait4(r2, &(0x7f0000000480), 0x7, &(0x7f00000004c0)) fcntl$setstatus(r0, 0x4, 0x0) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8000, 0x4, 0xfffffffffffffffa, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x3, 0x1, &(0x7f0000000280)='sit0\x00', 0x0, 0x7f}) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000400)=[{r1, 0x80a0}, {r3, 0x2000}, {0xffffffffffffffff, 0x410}, {r4, 0x1000}], 0x4, 0x6) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0x5) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) 05:04:32 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="3f00000000000000000000000000000007000000ac1414bbe00000024e234e2400000000000000000000000000000000000000000000000000000000000000000000000000000000d5cf2b8bd055b5d2000000000002000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000000000000000000d853aaaaaaaaaab1fffa6079011f2216000800000000000600008000000000000400000000000000010000000000000004000000050000000600edfffbffffff08000000"]}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="dc809496bc3302b5fd6481bf00ffffffe500000000000000000055122acc6ee0bf14c9a8c7c4050d163bdbb5b49617bf2b8d7bc4a7c1d3e254c56af64a95c3f3818438e976e0ce13fb3dbf8c1add340a63ec26b47c9a72a2723fdab6a4b10194200855a9184c16dcbf924601184838c4f13831e9f1050073791925f22fc213d4b8ad7dbda7d4"], &(0x7f0000000880)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x101000000000}, 0x5ea813bad44acf26) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x1000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="066de332000094560836e90615353200"], 0x1) listen(r1, 0xfffffffffffffe14) r3 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000100)=0x80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40008, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880), 0x336) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(r3, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) 05:04:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000400)=0xfffffffffffffe00, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 05:04:32 executing program 5: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) wait4(r2, &(0x7f0000000480), 0x7, &(0x7f00000004c0)) fcntl$setstatus(r0, 0x4, 0x0) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8000, 0x4, 0xfffffffffffffffa, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x3, 0x1, &(0x7f0000000280)='sit0\x00', 0x0, 0x7f}) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000400)=[{r1, 0x80a0}, {r3, 0x2000}, {0xffffffffffffffff, 0x410}, {r4, 0x1000}], 0x4, 0x6) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0x5) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) 05:04:33 executing program 3: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:33 executing program 2: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) wait4(r2, &(0x7f0000000480), 0x7, &(0x7f00000004c0)) fcntl$setstatus(r0, 0x4, 0x0) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8000, 0x4, 0xfffffffffffffffa, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x3, 0x1, &(0x7f0000000280)='sit0\x00', 0x0, 0x7f}) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000400)=[{r1, 0x80a0}, {r3, 0x2000}, {0xffffffffffffffff, 0x410}, {r4, 0x1000}], 0x4, 0x6) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0x5) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) 05:04:33 executing program 5: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) wait4(r2, &(0x7f0000000480), 0x7, &(0x7f00000004c0)) fcntl$setstatus(r0, 0x4, 0x0) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8000, 0x4, 0xfffffffffffffffa, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x3, 0x1, &(0x7f0000000280)='sit0\x00', 0x0, 0x7f}) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000400)=[{r1, 0x80a0}, {r3, 0x2000}, {0xffffffffffffffff, 0x410}, {r4, 0x1000}], 0x4, 0x6) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0x5) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) 05:04:33 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="3f00000000000000000000000000000007000000ac1414bbe00000024e234e2400000000000000000000000000000000000000000000000000000000000000000000000000000000d5cf2b8bd055b5d2000000000002000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000000000000000000d853aaaaaaaaaab1fffa6079011f2216000800000000000600008000000000000400000000000000010000000000000004000000050000000600edfffbffffff08000000"]}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="dc809496bc3302b5fd6481bf00ffffffe500000000000000000055122acc6ee0bf14c9a8c7c4050d163bdbb5b49617bf2b8d7bc4a7c1d3e254c56af64a95c3f3818438e976e0ce13fb3dbf8c1add340a63ec26b47c9a72a2723fdab6a4b10194200855a9184c16dcbf924601184838c4f13831e9f1050073791925f22fc213d4b8ad7dbda7d4"], &(0x7f0000000880)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x101000000000}, 0x5ea813bad44acf26) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x1000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="066de332000094560836e90615353200"], 0x1) listen(r1, 0xfffffffffffffe14) r3 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000100)=0x80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40008, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880), 0x336) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(r3, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) 05:04:33 executing program 0: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000400)=0xfffffffffffffe00, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 05:04:33 executing program 1: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000400)=0xfffffffffffffe00, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 05:04:33 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="3f00000000000000000000000000000007000000ac1414bbe00000024e234e2400000000000000000000000000000000000000000000000000000000000000000000000000000000d5cf2b8bd055b5d2000000000002000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000000000000000000d853aaaaaaaaaab1fffa6079011f2216000800000000000600008000000000000400000000000000010000000000000004000000050000000600edfffbffffff08000000"]}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="dc809496bc3302b5fd6481bf00ffffffe500000000000000000055122acc6ee0bf14c9a8c7c4050d163bdbb5b49617bf2b8d7bc4a7c1d3e254c56af64a95c3f3818438e976e0ce13fb3dbf8c1add340a63ec26b47c9a72a2723fdab6a4b10194200855a9184c16dcbf924601184838c4f13831e9f1050073791925f22fc213d4b8ad7dbda7d4"], &(0x7f0000000880)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x101000000000}, 0x5ea813bad44acf26) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x1000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="066de332000094560836e90615353200"], 0x1) listen(r1, 0xfffffffffffffe14) r3 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000100)=0x80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40008, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880), 0x336) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(r3, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) 05:04:33 executing program 2: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) wait4(r2, &(0x7f0000000480), 0x7, &(0x7f00000004c0)) fcntl$setstatus(r0, 0x4, 0x0) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8000, 0x4, 0xfffffffffffffffa, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x3, 0x1, &(0x7f0000000280)='sit0\x00', 0x0, 0x7f}) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000400)=[{r1, 0x80a0}, {r3, 0x2000}, {0xffffffffffffffff, 0x410}, {r4, 0x1000}], 0x4, 0x6) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0x5) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) 05:04:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000400)=0xfffffffffffffe00, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 05:04:34 executing program 3: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:34 executing program 2: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) wait4(r2, &(0x7f0000000480), 0x7, &(0x7f00000004c0)) fcntl$setstatus(r0, 0x4, 0x0) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8000, 0x4, 0xfffffffffffffffa, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x3, 0x1, &(0x7f0000000280)='sit0\x00', 0x0, 0x7f}) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xfffffffffffffffe, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000400)=[{r1, 0x80a0}, {r3, 0x2000}, {0xffffffffffffffff, 0x410}, {r4, 0x1000}], 0x4, 0x6) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0x5) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) 05:04:34 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="3f00000000000000000000000000000007000000ac1414bbe00000024e234e2400000000000000000000000000000000000000000000000000000000000000000000000000000000d5cf2b8bd055b5d2000000000002000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000000000000000000d853aaaaaaaaaab1fffa6079011f2216000800000000000600008000000000000400000000000000010000000000000004000000050000000600edfffbffffff08000000"]}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="dc809496bc3302b5fd6481bf00ffffffe500000000000000000055122acc6ee0bf14c9a8c7c4050d163bdbb5b49617bf2b8d7bc4a7c1d3e254c56af64a95c3f3818438e976e0ce13fb3dbf8c1add340a63ec26b47c9a72a2723fdab6a4b10194200855a9184c16dcbf924601184838c4f13831e9f1050073791925f22fc213d4b8ad7dbda7d4"], &(0x7f0000000880)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x101000000000}, 0x5ea813bad44acf26) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x1000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="066de332000094560836e90615353200"], 0x1) listen(r1, 0xfffffffffffffe14) r3 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000100)=0x80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40008, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) setsockopt$inet_group_source_req(r5, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880), 0x336) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(r3, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) 05:04:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af14, &(0x7f0000000040)) 05:04:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000004000000600", 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r1) close(r2) 05:04:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="cb"], 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, r3, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002400), 0x21c, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) 05:04:34 executing program 1: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c", 0x2d, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x5, 0x10000, [{0x0, 0x0, 0x3ff}, {0x3, 0x0, 0x6}, {0x3ff, 0x0, 0x4}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x7ff}]}) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 05:04:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086610, &(0x7f0000000040)) 05:04:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x1e2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0xfffffffffffffff9}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:04:34 executing program 4: r0 = memfd_create(&(0x7f0000000400)='bcsf0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) [ 344.754260] sctp: [Deprecated]: syz-executor0 (pid 10863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.754260] Use struct sctp_sack_info instead [ 344.783260] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) [ 344.836275] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted 05:04:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 05:04:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) 05:04:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x0, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x4e, &(0x7f0000000680), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000780), 0x4) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 05:04:35 executing program 3: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 05:04:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) [ 345.092432] sctp: [Deprecated]: syz-executor0 (pid 10878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.092432] Use struct sctp_sack_info instead 05:04:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0xffff8001, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x11, 0x9effffff], [], @remote}}]}]}, 0x2c}}, 0x0) 05:04:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c", 0x2d, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x5, 0x10000, [{0x0, 0x0, 0x3ff}, {0x3, 0x0, 0x6}, {0x3ff, 0x0, 0x4}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x7ff}]}) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 05:04:35 executing program 1: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) [ 345.455163] Started in network mode [ 345.474772] Own node identity ff000000, cluster identity 4711 [ 345.525678] 32-bit node address hash set to ff000000 [ 345.559560] sctp: [Deprecated]: syz-executor0 (pid 10903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.559560] Use struct sctp_sack_info instead 05:04:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) 05:04:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) 05:04:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x0, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x4e, &(0x7f0000000680), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000780), 0x4) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 05:04:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c", 0x2d, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x5, 0x10000, [{0x0, 0x0, 0x3ff}, {0x3, 0x0, 0x6}, {0x3ff, 0x0, 0x4}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x7ff}]}) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 05:04:36 executing program 3: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x1000, 0x5, 0x100, 0x7f, 0x7, 0xfcda, 0x0, 0x8, 0x0, 0x8, 0xff, 0x4}, {0x5, 0x0, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x7ff, 0x4, 0x2, 0xcad0, 0x3, 0x6}, {0x10000, 0x4, 0x9, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0xffffffffffffff6a, 0x6}], 0x2}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) read$FUSE(r3, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) [ 346.156937] sctp: [Deprecated]: syz-executor0 (pid 10927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.156937] Use struct sctp_sack_info instead 05:04:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x0, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x4e, &(0x7f0000000680), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000780), 0x4) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 05:04:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) 05:04:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) 05:04:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c", 0x2d, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x5, 0x10000, [{0x0, 0x0, 0x3ff}, {0x3, 0x0, 0x6}, {0x3ff, 0x0, 0x4}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x7ff}]}) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 05:04:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) [ 346.819014] sctp: [Deprecated]: syz-executor0 (pid 10947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.819014] Use struct sctp_sack_info instead 05:04:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c", 0x2d, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x5, 0x10000, [{0x0, 0x0, 0x3ff}, {0x3, 0x0, 0x6}, {0x3ff, 0x0, 0x4}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x7ff}]}) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 05:04:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x0, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x4e, &(0x7f0000000680), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000780), 0x4) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) [ 347.471095] sctp: [Deprecated]: syz-executor3 (pid 10957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.471095] Use struct sctp_sack_info instead 05:04:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) 05:04:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) 05:04:37 executing program 0: open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000140)=0xe00000000000000, 0x0) 05:04:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) [ 347.830397] audit: type=1804 audit(1541567077.821:53): pid=10970 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir667372255/syzkaller.jmP5pY/134/file0" dev="sda1" ino=17010 res=1 05:04:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) [ 347.992141] audit: type=1804 audit(1541567077.851:54): pid=10972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir667372255/syzkaller.jmP5pY/134/file0" dev="sda1" ino=17010 res=1 05:04:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c", 0x2d, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x5, 0x10000, [{0x0, 0x0, 0x3ff}, {0x3, 0x0, 0x6}, {0x3ff, 0x0, 0x4}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x7ff}]}) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 05:04:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x28, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0xffffff85, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb), 0x0, 0xfffffe21, &(0x7f00001a7f05)=""/251}, 0x18) [ 348.357573] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(132989055687892) <= P.seqno(0) <= S.SWH(132989055687966)) and (P.ackno exists or LAWL(106961438405898) <= P.ackno(106961438405899) <= S.AWH(106961438405899), sending SYNC... 05:04:38 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x10000030}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0) 05:04:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x73e0) 05:04:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c", 0x2d, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x5, 0x10000, [{0x0, 0x0, 0x3ff}, {0x3, 0x0, 0x6}, {0x3ff, 0x0, 0x4}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x7ff}]}) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) [ 348.668523] dccp_close: ABORT with 1061 bytes unread 05:04:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000017c0)=0x98) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) accept(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0xfffffffffffffe3a) socket$inet6(0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 05:04:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x8004510a, &(0x7f0000000040)={0x0, 0x8000000}) 05:04:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) [ 348.795826] sctp: [Deprecated]: syz-executor3 (pid 11006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.795826] Use struct sctp_sack_info instead 05:04:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, r1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) socket$inet6_dccp(0xa, 0x6, 0x0) 05:04:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) 05:04:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) 05:04:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfffffffffffffffd, 0x401, 0x0, 0x8, 0x6, 0x0, 0x7, 0x9, 0x300000000, 0x11b}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x0, @multicast2}}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="286db4276c7501ab5fbcff"], 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) close(r4) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x0) setgid(0x0) r5 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x30e, 0x40800) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r5, 0x80000) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000300)=""/233) 05:04:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) 05:04:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000017c0)=0x98) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) accept(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0xfffffffffffffe3a) socket$inet6(0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 05:04:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000017c0)=0x98) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) accept(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0xfffffffffffffe3a) socket$inet6(0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 05:04:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) [ 350.097315] dccp_close: ABORT with 1061 bytes unread [ 350.121695] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(277962765720839) <= P.seqno(0) <= S.SWH(277962765720913)) and (P.ackno exists or LAWL(115660622522130) <= P.ackno(115660622522132) <= S.AWH(115660622522132), sending SYNC... 05:04:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) 05:04:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) 05:04:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000017c0)=0x98) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) accept(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0xfffffffffffffe3a) socket$inet6(0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) [ 350.575779] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(80473231437966) <= P.seqno(0) <= S.SWH(80473231438040)) and (P.ackno exists or LAWL(100280384429924) <= P.ackno(100280384429925) <= S.AWH(100280384429925), sending SYNC... 05:04:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) [ 350.740626] dccp_close: ABORT with 1061 bytes unread 05:04:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000017c0)=0x98) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) accept(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0xfffffffffffffe3a) socket$inet6(0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 05:04:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000040200037e2683dd6b3d58f8c7b0fc1f5a709cedc75a51f59d49106021529cb3b93c47a65a35af4a883f987e43a436ab432401f304d56a6ea3d885d8ac779cd257cbc676f59c2346d2ee2ba74d3e0a805e483752b52830b60ca0bdfdc27141e12c4b93317b1a79c86ace30d753a3d2a97aa22d68cc9486deae0fe337333d0909b974c6bfa9fd0cd27c027c0d24d49368c882db5eae4528fc4eb6465d2649846f0adf9596b157aa9e2ef4d1719caf939fbe4a517e6c8f1c94c0aa5aa67c1502d9107e0b413fe8b0ec8e37a50572378e3a5408456"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x4000) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r5, r6, r7}, 0xc) r8 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) 05:04:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000017c0)=0x98) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) accept(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0xfffffffffffffe3a) socket$inet6(0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) [ 351.173811] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(21259169826546) <= P.seqno(0) <= S.SWH(21259169826620)) and (P.ackno exists or LAWL(193572735232377) <= P.ackno(193572735232378) <= S.AWH(193572735232378), sending SYNC... [ 351.339990] dccp_close: ABORT with 1061 bytes unread 05:04:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfffffffffffffffd, 0x401, 0x0, 0x8, 0x6, 0x0, 0x7, 0x9, 0x300000000, 0x11b}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x0, @multicast2}}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="286db4276c7501ab5fbcff"], 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) close(r4) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x0) setgid(0x0) r5 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x30e, 0x40800) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r5, 0x80000) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000300)=""/233) 05:04:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d6, @mcast1, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0x10}], 0x10}}], 0x4000350, 0x0) 05:04:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 05:04:42 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000b707000001000000487000000000e0ff50000000000000009500000000000000"], &(0x7f00000000c0)="47504c02"}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xf, 0x65, &(0x7f00000002c0)="020000b89d0014ed00598008492642", &(0x7f0000000200)=""/101}, 0x28) 05:04:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000017c0)=0x98) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) accept(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0xfffffffffffffe3a) socket$inet6(0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 05:04:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000280)='vmnet0selinux/user]]#.(@\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f0000000740)="b8e3000f00d83ef30f11bb2ce80f01cf66b9bd0200000f320f320fc76b6d260f2391650f01b8ec0066b9800000c00f326635010000000f3036f20f01df", 0x3d}], 0x1, 0x0, &(0x7f00000007c0), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ec0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000240), 0xfffffffffffffdf) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:04:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 05:04:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002540)={r0, &(0x7f0000000340)='U', &(0x7f0000002440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r0, &(0x7f0000000640)='\a', &(0x7f0000000700)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100)='\x009', &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000280)="eb", &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='+', &(0x7f00000002c0)}, 0x20) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0xc3, 0xdd, 0x81}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000100), &(0x7f0000000840)=""/4096}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000001440)}, 0x20) [ 352.410365] binder: 11152:11154 BC_FREE_BUFFER u0000000000000000 no match 05:04:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000040)=@nl, 0xfffffede, &(0x7f0000000180), 0x0, &(0x7f0000001540)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 05:04:42 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) [ 352.511269] binder: send failed reply for transaction 5 to 11152:11154 [ 352.525606] binder: undelivered TRANSACTION_COMPLETE 05:04:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000280)='vmnet0selinux/user]]#.(@\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f0000000740)="b8e3000f00d83ef30f11bb2ce80f01cf66b9bd0200000f320f320fc76b6d260f2391650f01b8ec0066b9800000c00f326635010000000f3036f20f01df", 0x3d}], 0x1, 0x0, &(0x7f00000007c0), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ec0)={"55c990aa4964e82a3ec457f4c7d69681319b32c4fe546fdaa52a7f1ee7a27d5f71fb895c4bf21bf0301d2a160f646d230ecc224077896302fd1e64ad393ef24145492c44f164e53100dc89f52d25895dcd4320f649fc784145767a5224088c492511d0a5d7bb0c0176706c238dfeee9caae8811ba9d2ec92a4a340c091647ae36123d290d72c375af37957c01aa945bdb6a7a6870069350c7c2ac6b9c032e80d8150743be19fbaf9447badcc1908d174e06fd466e64e24e3c892ee52a4b31338ad67030baeffa5bfa701c1e7bfbd8fd016d87018d05ab11f9e813877bd9cdf0884cbaabe09190f95550884f8a1e6510f6bbe96f86859597bf89741aea068e55b938ebee9d9bff58478513c4b72edbf79f75431b54743ab05d3980b30b2127cf13bf94beba0828a4bb1848bc1f862fac00698e4bd2f4bde3bb35107056c4147c0ed8d7d588ba03c37b82ea384d1db706a8b46ee351812ad747d1045540a48b542996812548270c5af5d27ff72920bebd8371348c7f55a953e236ac13fe737a81bd9b61e30a5e9c526cf61862f5a0a90963c73febe3b66ab29f17b6da74b7647bcc4e527356d57fa1fe3f3dffab39df7b353eda6b839decb4484939f4fc0c84bda1c964941ccf4db1ca0d2c152fd356ac66441c8b68755d533b416d9f7999678227c7a69db08e997252dd6a38fc458d93fac9f1f14f49b7ca4a0b0c8b538d2f30c34503a0975506ae9004b3e5c3d2469cf4e03d9b79dc1499647b5b680a02bdc56c18782c48120dee663918288f068c49d85355d114cfe0c5d1405cf5e37b181f296fa7dc9af116fbe220121fe139739226eefce468f27f5d21ab51ef0e26134c5341cf13799003ceb38d4050c2ba1c9e6decc2d11a8f14a6adadd45e615106b5dd4c07093ba114ac55b4e80d1a3545ab6e8fbf796b908ecc244340fc06e4d4bd6e069b7f0232198ab067a709bcdd4d41500e5dc7032e5993f965d4603033fe61cc523937d7345df42b4f1b62c4daf64f6c29eb2f214b88680bfe19252b67719ccea37d19fe3bfb0c8ad0bd6f4a1df532ec9220269453df5144ff48f63c2ad655b8f20db01b3af95c11f4e7de2bd0a47d47b08b620589a33327bef9ee310505c1736510e88b74281f098099c753d30fcf32f31a0521e32407d689b093f24d07049682ff4662b5b94616699fd704589c0edb02cf3e622088c685564b0c166f9f3cdb12dd8a70684ac6e24570191dda2db2b1965d2397a45060f834405b81fa79204e029b7cd93333dfbef669f3e480fd071f5b87e9fdf984dfe176353ed12ea15484366548336f540a5f1e8b9e19bdeb8d71dce9ecf03d09515bc4bcf7be382176e7e12395ee0f795f76695d0d90eee181d300deb89d7098403ac76309e63f6ca3eade1ce57dcd9de56e24610ed5c470d5540e9f50d068ee8a1431bb3216ae99b18"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000240), 0xfffffffffffffdf) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 352.561275] binder: undelivered TRANSACTION_ERROR: 29189 05:04:42 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) [ 352.823811] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 05:04:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfffffffffffffffd, 0x401, 0x0, 0x8, 0x6, 0x0, 0x7, 0x9, 0x300000000, 0x11b}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x0, @multicast2}}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="286db4276c7501ab5fbcff"], 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) close(r4) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x0) setgid(0x0) r5 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x30e, 0x40800) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r5, 0x80000) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000300)=""/233) 05:04:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000040)=@nl, 0xfffffede, &(0x7f0000000180), 0x0, &(0x7f0000001540)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 05:04:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000280)='vmnet0selinux/user]]#.(@\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f0000000740)="b8e3000f00d83ef30f11bb2ce80f01cf66b9bd0200000f320f320fc76b6d260f2391650f01b8ec0066b9800000c00f326635010000000f3036f20f01df", 0x3d}], 0x1, 0x0, &(0x7f00000007c0), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ec0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000240), 0xfffffffffffffdf) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:04:43 executing program 4: mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x80, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x0) 05:04:43 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="6365706800e993000056b741d1e0f62a0c9a60e76130f91c17a16f8a5437c9680aad3b4e45eddd76aab71a9e975d0144faffff8bc8f9d30f9c55ced1150431a9b1a839bbf3f467d3c0acde4e07a4ba536d54200f4e4dc3b02679197d7ba36309981462765060c41372bfb4f51c4a130a10ce0ac1731ce47f5ba461f37619f3ad2f00f19a93b6f27a14fbfbec7c5373c0ebc09635adcddfca4f93c509d545d61fa5709bd17e803195711a64cb2ce69fde25ca87e550d13393bc940545a7ef2fa9c0039e7a306d1210c286934192dfe5ecc4e2988d60a5d3e078b18955c779f9292f7b3e223bcb978f7ca1cfe8388f97bdf7adf81db314c17f57fb4f4db4d3713a5ec3da5a57aac2418385e87c4ac81c5650676b06f397b359ccc0d7094a48ab721fe8bdf7813e1dc11e635fb51a8311242c886531b0a19c11", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) [ 353.336097] FAT-fs (loop5): bogus number of reserved sectors [ 353.348405] FAT-fs (loop5): Can't find a valid FAT filesystem 05:04:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000040)=@nl, 0xfffffede, &(0x7f0000000180), 0x0, &(0x7f0000001540)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 05:04:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000280)='vmnet0selinux/user]]#.(@\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f0000000740)="b8e3000f00d83ef30f11bb2ce80f01cf66b9bd0200000f320f320fc76b6d260f2391650f01b8ec0066b9800000c00f326635010000000f3036f20f01df", 0x3d}], 0x1, 0x0, &(0x7f00000007c0), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ec0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000240), 0xfffffffffffffdf) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 353.661816] overlayfs: failed to resolve './file1': -2 [ 353.747714] overlayfs: './file0' not a directory 05:04:43 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="6365706800e993000056b741d1e0f62a0c9a60e76130f91c17a16f8a5437c9680aad3b4e45eddd76aab71a9e975d0144faffff8bc8f9d30f9c55ced1150431a9b1a839bbf3f467d3c0acde4e07a4ba536d54200f4e4dc3b02679197d7ba36309981462765060c41372bfb4f51c4a130a10ce0ac1731ce47f5ba461f37619f3ad2f00f19a93b6f27a14fbfbec7c5373c0ebc09635adcddfca4f93c509d545d61fa5709bd17e803195711a64cb2ce69fde25ca87e550d13393bc940545a7ef2fa9c0039e7a306d1210c286934192dfe5ecc4e2988d60a5d3e078b18955c779f9292f7b3e223bcb978f7ca1cfe8388f97bdf7adf81db314c17f57fb4f4db4d3713a5ec3da5a57aac2418385e87c4ac81c5650676b06f397b359ccc0d7094a48ab721fe8bdf7813e1dc11e635fb51a8311242c886531b0a19c11", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) 05:04:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000040)=@nl, 0xfffffede, &(0x7f0000000180), 0x0, &(0x7f0000001540)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 354.030643] overlayfs: failed to resolve './file1': -2 05:04:44 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) 05:04:44 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) 05:04:44 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) [ 354.353893] overlayfs: failed to resolve './file1': -2 05:04:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfffffffffffffffd, 0x401, 0x0, 0x8, 0x6, 0x0, 0x7, 0x9, 0x300000000, 0x11b}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x0, @multicast2}}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="286db4276c7501ab5fbcff"], 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) close(r4) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x0) setgid(0x0) r5 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x30e, 0x40800) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r5, 0x80000) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000300)=""/233) 05:04:44 executing program 4: mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x80, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x0) 05:04:44 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="6365706800e993000056b741d1e0f62a0c9a60e76130f91c17a16f8a5437c9680aad3b4e45eddd76aab71a9e975d0144faffff8bc8f9d30f9c55ced1150431a9b1a839bbf3f467d3c0acde4e07a4ba536d54200f4e4dc3b02679197d7ba36309981462765060c41372bfb4f51c4a130a10ce0ac1731ce47f5ba461f37619f3ad2f00f19a93b6f27a14fbfbec7c5373c0ebc09635adcddfca4f93c509d545d61fa5709bd17e803195711a64cb2ce69fde25ca87e550d13393bc940545a7ef2fa9c0039e7a306d1210c286934192dfe5ecc4e2988d60a5d3e078b18955c779f9292f7b3e223bcb978f7ca1cfe8388f97bdf7adf81db314c17f57fb4f4db4d3713a5ec3da5a57aac2418385e87c4ac81c5650676b06f397b359ccc0d7094a48ab721fe8bdf7813e1dc11e635fb51a8311242c886531b0a19c11", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) 05:04:44 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) 05:04:44 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) [ 354.661264] overlayfs: failed to resolve './file1': -2 [ 354.751789] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 354.822070] overlayfs: failed to resolve './file1': -2 05:04:44 executing program 1: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) 05:04:44 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) [ 354.873880] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 05:04:44 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) [ 355.184861] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 355.307329] overlayfs: failed to resolve './file1': -2 05:04:45 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) [ 355.376055] FAT-fs (loop5): bogus number of reserved sectors [ 355.386166] FAT-fs (loop5): Can't find a valid FAT filesystem 05:04:45 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) 05:04:45 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) 05:04:45 executing program 4: mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x80, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x0) [ 355.833688] FAT-fs (loop1): bogus number of reserved sectors [ 355.851395] FAT-fs (loop1): Can't find a valid FAT filesystem [ 355.881238] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 356.003339] FAT-fs (loop2): bogus number of reserved sectors [ 356.023024] FAT-fs (loop2): Can't find a valid FAT filesystem [ 356.023354] overlayfs: failed to resolve './file1': -2 05:04:46 executing program 1: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) 05:04:46 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) [ 356.072607] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 356.131483] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 05:04:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000180)) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$can_bcm(r6, &(0x7f0000000200), 0xfffffffffffffe40) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000480)={{0x4000, 0x0, 0xf, 0x8001, 0x4, 0x0, 0x545, 0x5, 0xdf9, 0x4, 0x3, 0x5}, {0xd004, 0xf000, 0x18, 0x5, 0x4, 0x0, 0x9, 0x5, 0x7, 0x9}, {0x2000, 0xf000, 0x0, 0x6, 0x6, 0x7fffffff, 0x2, 0x3, 0xfffffffffffffc00, 0x2225, 0x8, 0x2}, {0x6000, 0x5000, 0xd, 0x2, 0x4, 0xa400000000000, 0x80, 0x700000000000000, 0xb4, 0xdf1, 0x7, 0xffffffffffffff85}, {0xb6012b6a06814110, 0xf001, 0xf, 0x1, 0x1, 0x5, 0x2, 0x1, 0x1f, 0x4, 0x7fffffff, 0x6}, {0x6000, 0x1002, 0xd, 0x9, 0xbd, 0xcf, 0xfff, 0x7, 0xa0, 0x80000000, 0x2, 0x2}, {0x2000, 0x10000, 0x8, 0x0, 0x2, 0x7, 0x8, 0x6, 0xad2, 0x8, 0x40, 0x100000001}, {0x3000, 0x1000, 0x4, 0x9, 0xff0e, 0x4, 0x5, 0x3, 0x3a2, 0x8, 0x20, 0x1a7}, {0x4, 0x2}, {0xd000, 0x6000}, 0x0, 0x0, 0x100000, 0x4, 0xe, 0x100, 0x1004, [0x7, 0x7, 0x100, 0x4]}) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) accept4(r0, 0x0, &(0x7f00000000c0), 0x3) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000200)={0x3}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x6, 0x401, 0x4, 0x7f]}) 05:04:46 executing program 4: mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x80, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x0) [ 356.386509] FAT-fs (loop5): bogus number of reserved sectors [ 356.387202] mmap: syz-executor3 (11369) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 356.404091] FAT-fs (loop5): Can't find a valid FAT filesystem 05:04:46 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) [ 356.442682] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 05:04:46 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)=ANY=[@ANYBLOB="a10000003078866d44a74468edf1c7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000000000000"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) fallocate(r2, 0x40080000004, 0x55c1d054, 0x1001000f4) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) 05:04:46 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) [ 356.698447] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 356.845306] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 05:04:46 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)={[{@resize={'resize'}, 0x64}]}) [ 356.954567] overlayfs: failed to resolve './file1': -2 05:04:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab7d, 0x0, &(0x7f0000000080), 0x111) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x80000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 357.059671] FAT-fs (loop1): bogus number of reserved sectors [ 357.089323] FAT-fs (loop1): Can't find a valid FAT filesystem [ 357.147796] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 05:04:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x4002}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)="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") write$cgroup_pid(r0, &(0x7f0000000080), 0xff89) [ 357.247032] FAT-fs (loop2): bogus number of reserved sectors [ 357.321662] FAT-fs (loop2): Can't find a valid FAT filesystem 05:04:47 executing program 1: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) [ 357.391804] device nr0 entered promiscuous mode 05:04:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x1, 0xfffffffbfffffffc, &(0x7f0000000280), 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300455781130000b08ad4a1d70fcd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 357.592004] FAT-fs (loop5): bogus number of reserved sectors [ 357.618304] FAT-fs (loop5): Can't find a valid FAT filesystem 05:04:47 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r1 = getpid() ioctl$NBD_CLEAR_QUE(r0, 0xab05) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)="003e7bbb044fa408fbbd824d1be13659165a1bb3c9a0711e39dd2f4e8f993f2b893d154b8e4a492fca59642b23177477524ff755d9be8c24cce036be8934a2c01e5134b45dfeb3490010597d35b5a0ea931165559928e7f4e964ed4a", 0x5c, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x900000000000, 0x0, 0x6, 'queue1\x00'}) fallocate(0xffffffffffffffff, 0x40, 0x44, 0x81000f3) r2 = socket(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r3 = dup2(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x80000001, @remote, 0x1000000000000}, r4}}, 0x30) getdents(0xffffffffffffffff, &(0x7f0000001580)=""/227, 0xe3) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1174) 05:04:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000180)) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$can_bcm(r6, &(0x7f0000000200), 0xfffffffffffffe40) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000480)={{0x4000, 0x0, 0xf, 0x8001, 0x4, 0x0, 0x545, 0x5, 0xdf9, 0x4, 0x3, 0x5}, {0xd004, 0xf000, 0x18, 0x5, 0x4, 0x0, 0x9, 0x5, 0x7, 0x9}, {0x2000, 0xf000, 0x0, 0x6, 0x6, 0x7fffffff, 0x2, 0x3, 0xfffffffffffffc00, 0x2225, 0x8, 0x2}, {0x6000, 0x5000, 0xd, 0x2, 0x4, 0xa400000000000, 0x80, 0x700000000000000, 0xb4, 0xdf1, 0x7, 0xffffffffffffff85}, {0xb6012b6a06814110, 0xf001, 0xf, 0x1, 0x1, 0x5, 0x2, 0x1, 0x1f, 0x4, 0x7fffffff, 0x6}, {0x6000, 0x1002, 0xd, 0x9, 0xbd, 0xcf, 0xfff, 0x7, 0xa0, 0x80000000, 0x2, 0x2}, {0x2000, 0x10000, 0x8, 0x0, 0x2, 0x7, 0x8, 0x6, 0xad2, 0x8, 0x40, 0x100000001}, {0x3000, 0x1000, 0x4, 0x9, 0xff0e, 0x4, 0x5, 0x3, 0x3a2, 0x8, 0x20, 0x1a7}, {0x4, 0x2}, {0xd000, 0x6000}, 0x0, 0x0, 0x100000, 0x4, 0xe, 0x100, 0x1004, [0x7, 0x7, 0x100, 0x4]}) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) accept4(r0, 0x0, &(0x7f00000000c0), 0x3) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000200)={0x3}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x6, 0x401, 0x4, 0x7f]}) 05:04:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x28, 0x13, 0x129, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 357.996274] FAT-fs (loop1): bogus number of reserved sectors [ 358.016746] FAT-fs (loop1): Can't find a valid FAT filesystem 05:04:48 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4e) setresuid(0x0, r1, 0x0) mlockall(0x3) 05:04:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x4002}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3dad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88bc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e57e43a3e36bd48d2a85bf4fd4a804e83f2f3cf378a435af5e287d4e27337b4ada11b26219832ec6b2b38446b3b95fe3771e9f42ca30fb21e12f0a3d8bc2d85454af9fcc0232d8fd909448b01f46c593d31ea1c926465e35a4199079c3ca41128b17cb01fbf5b522be0fd02022ada37fecc14b6c8c8831883b85a1106f2f867020d529f17a350f20dd3bf51a98cfda70c2e3638a483fd3f87940bb478b07c4c110394c0093d17955089f2ca97bbe075124c9b1ff6500d536a95d96f03d48596e008bf0a028b539cec796cec9bf585eb80fe3e0d26") write$cgroup_pid(r0, &(0x7f0000000080), 0xff89) 05:04:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000007d80)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 05:04:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x1, 0xfffffffbfffffffc, &(0x7f0000000280), 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300455781130000b08ad4a1d70fcd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:04:48 executing program 1: accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000)=0x100000, 0x10000) [ 358.297002] device nr0 entered promiscuous mode 05:04:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000007d80)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 05:04:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000007d80)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 358.730080] FAT-fs (loop2): bogus number of reserved sectors [ 358.736098] FAT-fs (loop2): Can't find a valid FAT filesystem 05:04:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000007d80)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 05:04:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x100e}, {&(0x7f0000000240)=""/147, 0xe}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000006400)={0x77359400}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) 05:04:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x1, 0xfffffffbfffffffc, &(0x7f0000000280), 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300455781130000b08ad4a1d70fcd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:04:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000180)) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$can_bcm(r6, &(0x7f0000000200), 0xfffffffffffffe40) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000480)={{0x4000, 0x0, 0xf, 0x8001, 0x4, 0x0, 0x545, 0x5, 0xdf9, 0x4, 0x3, 0x5}, {0xd004, 0xf000, 0x18, 0x5, 0x4, 0x0, 0x9, 0x5, 0x7, 0x9}, {0x2000, 0xf000, 0x0, 0x6, 0x6, 0x7fffffff, 0x2, 0x3, 0xfffffffffffffc00, 0x2225, 0x8, 0x2}, {0x6000, 0x5000, 0xd, 0x2, 0x4, 0xa400000000000, 0x80, 0x700000000000000, 0xb4, 0xdf1, 0x7, 0xffffffffffffff85}, {0xb6012b6a06814110, 0xf001, 0xf, 0x1, 0x1, 0x5, 0x2, 0x1, 0x1f, 0x4, 0x7fffffff, 0x6}, {0x6000, 0x1002, 0xd, 0x9, 0xbd, 0xcf, 0xfff, 0x7, 0xa0, 0x80000000, 0x2, 0x2}, {0x2000, 0x10000, 0x8, 0x0, 0x2, 0x7, 0x8, 0x6, 0xad2, 0x8, 0x40, 0x100000001}, {0x3000, 0x1000, 0x4, 0x9, 0xff0e, 0x4, 0x5, 0x3, 0x3a2, 0x8, 0x20, 0x1a7}, {0x4, 0x2}, {0xd000, 0x6000}, 0x0, 0x0, 0x100000, 0x4, 0xe, 0x100, 0x1004, [0x7, 0x7, 0x100, 0x4]}) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) accept4(r0, 0x0, &(0x7f00000000c0), 0x3) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000200)={0x3}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x6, 0x401, 0x4, 0x7f]}) 05:04:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000080)={0x104, 0x0, 0x192, 0x0, @buffer={0x0, 0x0, &(0x7f0000000180)=""/109}, &(0x7f0000000100), &(0x7f0000000100)=""/71, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 05:04:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x4002}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3dad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88bc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e57e43a3e36bd48d2a85bf4fd4a804e83f2f3cf378a435af5e287d4e27337b4ada11b26219832ec6b2b38446b3b95fe3771e9f42ca30fb21e12f0a3d8bc2d85454af9fcc0232d8fd909448b01f46c593d31ea1c926465e35a4199079c3ca41128b17cb01fbf5b522be0fd02022ada37fecc14b6c8c8831883b85a1106f2f867020d529f17a350f20dd3bf51a98cfda70c2e3638a483fd3f87940bb478b07c4c110394c0093d17955089f2ca97bbe075124c9b1ff6500d536a95d96f03d48596e008bf0a028b539cec796cec9bf585eb80fe3e0d26") write$cgroup_pid(r0, &(0x7f0000000080), 0xff89) 05:04:49 executing program 1: accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000)=0x100000, 0x10000) 05:04:49 executing program 5: accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000)=0x100000, 0x10000) 05:04:49 executing program 2: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000018f000/0x2000)=nil) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) [ 359.411049] device nr0 entered promiscuous mode 05:04:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x1, 0xfffffffbfffffffc, &(0x7f0000000280), 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300455781130000b08ad4a1d70fcd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:04:49 executing program 2: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000018f000/0x2000)=nil) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) 05:04:49 executing program 2: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000018f000/0x2000)=nil) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) 05:04:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000180)) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$can_bcm(r6, &(0x7f0000000200), 0xfffffffffffffe40) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000480)={{0x4000, 0x0, 0xf, 0x8001, 0x4, 0x0, 0x545, 0x5, 0xdf9, 0x4, 0x3, 0x5}, {0xd004, 0xf000, 0x18, 0x5, 0x4, 0x0, 0x9, 0x5, 0x7, 0x9}, {0x2000, 0xf000, 0x0, 0x6, 0x6, 0x7fffffff, 0x2, 0x3, 0xfffffffffffffc00, 0x2225, 0x8, 0x2}, {0x6000, 0x5000, 0xd, 0x2, 0x4, 0xa400000000000, 0x80, 0x700000000000000, 0xb4, 0xdf1, 0x7, 0xffffffffffffff85}, {0xb6012b6a06814110, 0xf001, 0xf, 0x1, 0x1, 0x5, 0x2, 0x1, 0x1f, 0x4, 0x7fffffff, 0x6}, {0x6000, 0x1002, 0xd, 0x9, 0xbd, 0xcf, 0xfff, 0x7, 0xa0, 0x80000000, 0x2, 0x2}, {0x2000, 0x10000, 0x8, 0x0, 0x2, 0x7, 0x8, 0x6, 0xad2, 0x8, 0x40, 0x100000001}, {0x3000, 0x1000, 0x4, 0x9, 0xff0e, 0x4, 0x5, 0x3, 0x3a2, 0x8, 0x20, 0x1a7}, {0x4, 0x2}, {0xd000, 0x6000}, 0x0, 0x0, 0x100000, 0x4, 0xe, 0x100, 0x1004, [0x7, 0x7, 0x100, 0x4]}) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) accept4(r0, 0x0, &(0x7f00000000c0), 0x3) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000200)={0x3}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x6, 0x401, 0x4, 0x7f]}) 05:04:50 executing program 1: accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000)=0x100000, 0x10000) 05:04:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x4002}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)="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") write$cgroup_pid(r0, &(0x7f0000000080), 0xff89) 05:04:50 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000018f000/0x2000)=nil) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) 05:04:50 executing program 5: accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000)=0x100000, 0x10000) 05:04:50 executing program 2: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000018f000/0x2000)=nil) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) [ 360.360194] device nr0 entered promiscuous mode 05:04:50 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000018f000/0x2000)=nil) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) 05:04:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x990001}) 05:04:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x990001}) 05:04:51 executing program 1: accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000)=0x100000, 0x10000) 05:04:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="93525dee82c23a5f343232506225f54686abe2410b3d9437643b43bde195f2720637663699f4e16c591093085ace99d5515e51b50a1c6a79bed44b01e9078b2bf230a125a6e746e9f2ac1bff56c58941b61bd9e8fa166bb9d5a257a838a628fc462e9637a4cb133f5b8fc5551b9079df49c166a95d5d199e0387913618f0121c0123c8991a6db280c22f5ee2da24503fde960b8ac1ebe12825f687e5a1544170d95c228b36d6288cfd5084611bfe7e20b3ccd2f25a070a79e3a11ad5ebb8fb1d41ea7a63a424b701"}) 05:04:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x990001}) 05:04:51 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000018f000/0x2000)=nil) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) 05:04:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000240), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000006}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000027, 0x0) 05:04:51 executing program 5: accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000)=0x100000, 0x10000) 05:04:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) 05:04:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x990001}) 05:04:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) poll(&(0x7f0000000100), 0x0, 0xfffffffffffffffe) 05:04:51 executing program 0: gettid() fcntl$getown(0xffffffffffffff9c, 0x9) gettid() fcntl$getown(0xffffffffffffff9c, 0x9) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000200)=0x0) sched_getscheduler(r0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000400)='ns/ipc\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0xb4200, 0x0) clone(0x402102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) r3 = getpid() r4 = fcntl$dupfd(r1, 0x0, r2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x5, 0x109}, &(0x7f0000000040)=0x90) sched_setscheduler(r3, 0x5, &(0x7f00000000c0)) ioctl$VT_WAITACTIVE(r4, 0xb704) 05:04:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) 05:04:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) 05:04:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) 05:04:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) 05:04:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) 05:04:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0xc008240a, 0x70eff8) 05:04:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) 05:04:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) 05:04:52 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) 05:04:52 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) 05:04:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) 05:04:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541e, &(0x7f00000000c0)) 05:04:52 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 0: socketpair$inet6(0xa, 0x80805, 0x101, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000004c0), 0x4000) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) rt_sigaction(0x2b, &(0x7f0000000500)={0x0, {0xa11}, 0xc8000006, 0x0}, &(0x7f0000000540), 0x8, &(0x7f0000000580)) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f0000000640)=0xc) get_robust_list(r2, &(0x7f0000000400)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000300)={0x1, 'syzkaller0\x00'}, 0x18) 05:04:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541e, &(0x7f00000000c0)) 05:04:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffff9c, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106}}, 0x20) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x5) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r1}}, 0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0x32, "ab0df7b7fbfb3dc5d493005d3319a81828dd521a9a55ef33d9ec1532335d0318d27fcc89a0807ca65ee7dda4bced3e11f436"}, &(0x7f0000000540)=0x3a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r4}, &(0x7f00000005c0)=0x8) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0x2, 0x0, 0x10000, 0xd6c, 0x0, 0xfff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) 05:04:52 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541e, &(0x7f00000000c0)) 05:04:52 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffff9c, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106}}, 0x20) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x5) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r1}}, 0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0x32, "ab0df7b7fbfb3dc5d493005d3319a81828dd521a9a55ef33d9ec1532335d0318d27fcc89a0807ca65ee7dda4bced3e11f436"}, &(0x7f0000000540)=0x3a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r4}, &(0x7f00000005c0)=0x8) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0x2, 0x0, 0x10000, 0xd6c, 0x0, 0xfff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) 05:04:52 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541e, &(0x7f00000000c0)) 05:04:52 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:52 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) [ 363.107699] overlayfs: filesystem on './file0' not supported as upperdir 05:04:53 executing program 0: socketpair$inet6(0xa, 0x80805, 0x101, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000004c0), 0x4000) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) rt_sigaction(0x2b, &(0x7f0000000500)={0x0, {0xa11}, 0xc8000006, 0x0}, &(0x7f0000000540), 0x8, &(0x7f0000000580)) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f0000000640)=0xc) get_robust_list(r2, &(0x7f0000000400)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000300)={0x1, 'syzkaller0\x00'}, 0x18) 05:04:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffff9c, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106}}, 0x20) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x5) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r1}}, 0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0x32, "ab0df7b7fbfb3dc5d493005d3319a81828dd521a9a55ef33d9ec1532335d0318d27fcc89a0807ca65ee7dda4bced3e11f436"}, &(0x7f0000000540)=0x3a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r4}, &(0x7f00000005c0)=0x8) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0x2, 0x0, 0x10000, 0xd6c, 0x0, 0xfff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) 05:04:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='binfmt_misc\x00', 0x0, 0x0) 05:04:53 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) 05:04:53 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) r2 = open(&(0x7f0000000680)='./file0\x00', 0x4002, 0x104) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = getpgrp(r3) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(r3, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/156, 0x9c}, {&(0x7f0000001b80)=""/117, 0x75}], 0x9, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000700)) init_module(&(0x7f0000000480)='/dev/rfkill\x00', 0xc, &(0x7f00000004c0)='/dev/sequencer2\x00') process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/239, 0xef}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000002080)=""/114, 0x72}], 0x5, 0x0) 05:04:53 executing program 3: r0 = fanotify_init(0x0, 0x0) readv(r0, &(0x7f0000004740)=[{&(0x7f0000000500)=""/149, 0x95}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = dup3(r1, r0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) shutdown(r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 05:04:53 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) 05:04:53 executing program 5: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8000000000044000) io_setup(0x9, &(0x7f0000000400)=0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000, 0x407000}]) lseek(r1, 0x0, 0x3) 05:04:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffff9c, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106}}, 0x20) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x5) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r1}}, 0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0x32, "ab0df7b7fbfb3dc5d493005d3319a81828dd521a9a55ef33d9ec1532335d0318d27fcc89a0807ca65ee7dda4bced3e11f436"}, &(0x7f0000000540)=0x3a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r4}, &(0x7f00000005c0)=0x8) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0x2, 0x0, 0x10000, 0xd6c, 0x0, 0xfff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) 05:04:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 05:04:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x61) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 05:04:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80000000000000a}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 05:04:54 executing program 0: socketpair$inet6(0xa, 0x80805, 0x101, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000004c0), 0x4000) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) rt_sigaction(0x2b, &(0x7f0000000500)={0x0, {0xa11}, 0xc8000006, 0x0}, &(0x7f0000000540), 0x8, &(0x7f0000000580)) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f0000000640)=0xc) get_robust_list(r2, &(0x7f0000000400)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000300)={0x1, 'syzkaller0\x00'}, 0x18) 05:04:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x3, &(0x7f0000000140)=0x6, 0x4) 05:04:54 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) 05:04:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000002c0)=""/255) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004880)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0xfffffffffffffffc, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) 05:04:54 executing program 5: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8000000000044000) io_setup(0x9, &(0x7f0000000400)=0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000, 0x407000}]) lseek(r1, 0x0, 0x3) 05:04:54 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000380)='./file2\x00') 05:04:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x2094, 0x301) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0xb) sendto$inet(r1, &(0x7f00000001c0)="d0", 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r1, &(0x7f0000000100), 0xffffffffffffffe8, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x709000) 05:04:54 executing program 5: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8000000000044000) io_setup(0x9, &(0x7f0000000400)=0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000, 0x407000}]) lseek(r1, 0x0, 0x3) 05:04:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0xfffffffd, 0x0, r0}, 0x2c) 05:04:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:54 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000380)='./file2\x00') 05:04:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 05:04:55 executing program 0: socketpair$inet6(0xa, 0x80805, 0x101, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000004c0), 0x4000) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) rt_sigaction(0x2b, &(0x7f0000000500)={0x0, {0xa11}, 0xc8000006, 0x0}, &(0x7f0000000540), 0x8, &(0x7f0000000580)) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f0000000640)=0xc) get_robust_list(r2, &(0x7f0000000400)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000300)={0x1, 'syzkaller0\x00'}, 0x18) 05:04:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000002c0)=""/255) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004880)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0xfffffffffffffffc, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) 05:04:55 executing program 5: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8000000000044000) io_setup(0x9, &(0x7f0000000400)=0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000, 0x407000}]) lseek(r1, 0x0, 0x3) 05:04:55 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000380)='./file2\x00') 05:04:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 05:04:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 05:04:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 05:04:55 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000380)='./file2\x00') 05:04:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000002c0)=""/255) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004880)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0xfffffffffffffffc, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) 05:04:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000002c0)=""/255) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004880)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0xfffffffffffffffc, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) 05:04:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f3248b800000000008000000f23d80f21f835000000800f23f848b86d980000000000000f23d80f21f835000000600f23f848b80e000000000000000f23d80f21f835000000000f23f80f0f6a3190c744240088a42236c7442402a19a83b3c7442406000000000f011424450fc76a218f6890a26d13ae0f3566baf80cb8e2e5bd81ef66bafc0c66ed", 0x8a}], 0x1, 0x0, &(0x7f0000000140), 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x80, 0x0, [0x48c, 0xffffffffffffffff]}) 05:04:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={&(0x7f00000001c0), 0xc, &(0x7f0000000740)={&(0x7f0000000440)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@ipv4={[], [], @loopback}}, 0xf000}}, 0x50}}, 0x0) 05:04:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:04:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:56 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x100000000000, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x3}) 05:04:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x10) 05:04:56 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f00000003c0)=0x98) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 05:04:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8040ae9f, &(0x7f0000000280)) 05:04:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xee01, 0xee00]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', r1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, &(0x7f0000000280)=0x190) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x100000001, 0xff, 0x80000001]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) 05:04:57 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001600)=""/4096, &(0x7f00000001c0)=0x1000) 05:04:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000f08b}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000140)=0xec16) 05:04:57 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="6601669b0f35c4e1fe16846ba49e0000b9940200000f32c4c23dad78e0b9670900000f32660f38827f95b0040f01d10fc71a", 0x32}], 0x1, 0x0, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000880)="b805000000b98b9400000f01c19a01000000b0000f43d1b8000000000f23d80f21f835800000900f23f80f060f2140b9800000c00f3235000800000f3066ba4300b8f1ffffffefb9800000c00f3235002000000f30c4c3295f4da400", 0x5c}], 0x1, 0x0, &(0x7f0000000040)=[@cstype3={0x5, 0xf}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 05:04:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000f08b}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000140)=0xec16) 05:04:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) 05:04:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, [0x0, 0xfffffffffffffffc]}) 05:04:59 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@deltaction={0xe0, 0x31, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x80000001}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x18, 0x8, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffbff}}, {0x10, 0xc, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) stat(&(0x7f0000000340)='./file1/file0\x00', &(0x7f00000005c0)) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000680)='./file2\x00') fsync(r0) 05:04:59 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="6601669b0f35c4e1fe16846ba49e0000b9940200000f32c4c23dad78e0b9670900000f32660f38827f95b0040f01d10fc71a", 0x32}], 0x1, 0x0, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000880)="b805000000b98b9400000f01c19a01000000b0000f43d1b8000000000f23d80f21f835800000900f23f80f060f2140b9800000c00f3235000800000f3066ba4300b8f1ffffffefb9800000c00f3235002000000f30c4c3295f4da400", 0x5c}], 0x1, 0x0, &(0x7f0000000040)=[@cstype3={0x5, 0xf}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:04:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:04:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:04:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:04:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000f08b}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000140)=0xec16) 05:04:59 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@deltaction={0xe0, 0x31, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x80000001}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x18, 0x8, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffbff}}, {0x10, 0xc, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) stat(&(0x7f0000000340)='./file1/file0\x00', &(0x7f00000005c0)) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000680)='./file2\x00') fsync(r0) 05:05:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000f08b}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000140)=0xec16) 05:05:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:00 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@deltaction={0xe0, 0x31, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x80000001}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x18, 0x8, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffbff}}, {0x10, 0xc, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) stat(&(0x7f0000000340)='./file1/file0\x00', &(0x7f00000005c0)) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000680)='./file2\x00') fsync(r0) 05:05:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:00 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@deltaction={0xe0, 0x31, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x80000001}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x18, 0x8, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffbff}}, {0x10, 0xc, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) stat(&(0x7f0000000340)='./file1/file0\x00', &(0x7f00000005c0)) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000680)='./file2\x00') fsync(r0) 05:05:00 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="6601669b0f35c4e1fe16846ba49e0000b9940200000f32c4c23dad78e0b9670900000f32660f38827f95b0040f01d10fc71a", 0x32}], 0x1, 0x0, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000880)="b805000000b98b9400000f01c19a01000000b0000f43d1b8000000000f23d80f21f835800000900f23f80f060f2140b9800000c00f3235000800000f3066ba4300b8f1ffffffefb9800000c00f3235002000000f30c4c3295f4da400", 0x5c}], 0x1, 0x0, &(0x7f0000000040)=[@cstype3={0x5, 0xf}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:05:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r5 = getuid() fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x8}, {0x80000001}], r5}, 0x18, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, &(0x7f0000002440), 0x2000005) fcntl$setsig(r2, 0xa, 0x0) 05:05:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:03 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="6601669b0f35c4e1fe16846ba49e0000b9940200000f32c4c23dad78e0b9670900000f32660f38827f95b0040f01d10fc71a", 0x32}], 0x1, 0x0, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000880)="b805000000b98b9400000f01c19a01000000b0000f43d1b8000000000f23d80f21f835800000900f23f80f060f2140b9800000c00f3235000800000f3066ba4300b8f1ffffffefb9800000c00f3235002000000f30c4c3295f4da400", 0x5c}], 0x1, 0x0, &(0x7f0000000040)=[@cstype3={0x5, 0xf}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:05:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r5 = getuid() fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x8}, {0x80000001}], r5}, 0x18, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, &(0x7f0000002440), 0x2000005) fcntl$setsig(r2, 0xa, 0x0) 05:05:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r5 = getuid() fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x8}, {0x80000001}], r5}, 0x18, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, &(0x7f0000002440), 0x2000005) fcntl$setsig(r2, 0xa, 0x0) 05:05:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000540)="2177cb8a5172c959fb7dc20378a4efe8db790149c1f83654c8a608cb24ef81925b027a7f6d20176368a334976bf4dcbd9312a4fcf13947f861da453671b7f4f1489758fd108e902db03981c7ecae", 0x4e, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000005c0)="ae49eba9b74487d630f6c94a86194878e81642dd3cc3920b84ae5791c665080a63d61ab3eb9f1028b308a9c6b03035e8abb2bf40cef7d7d8c5d6cc0e90f2e68a47d5c806531291c47312b19d58a8013cef6d32d4e1f6e08263eafb42cec60f8bfaa49518caf123ef5a987cbb0bd1189b976ae8f8cc21c23645609bfa6dbac732e91811abf3e94a81ace0528074683012708c6221be2808af2851cc9a00517dd64c7e556e290148203005d9d75c3d9faede3d4e0e9068ac22c0bb6314844ad0f03d9729bd5d3c753088bb39fc7fb1664de2c52c938b74f2598e9eb1447ad2c56a7514a174ffef6d3179a4c8a88cef6913e980cf5fc3976039", 0xf8) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r6 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r6, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000780)={r0, 0x80, 0x3c3f, 0x100000000}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') mq_notify(r7, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r7, 0x3fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00000000c0)={0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r8 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000009c0)=""/60) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="74a36c80405ebb9eb849e09eae72bce4252be4c4abe187f8fd3568bff212aebb0f2444caf5ecb00b3c859d52039c913ca7fe047f645124ac30c2e2d226d599dfb2bd208c70ca252ae91efb817c5435dd6e63c01a308c5e8bc67b92dfe1c234267e3c0c01ff080000fa6509f263784ad83f971ab9c53cc051e54b34e4c6299040d2153cc8"]) 05:05:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r5 = getuid() fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x8}, {0x80000001}], r5}, 0x18, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, &(0x7f0000002440), 0x2000005) fcntl$setsig(r2, 0xa, 0x0) 05:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r5 = getuid() fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x8}, {0x80000001}], r5}, 0x18, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, &(0x7f0000002440), 0x2000005) fcntl$setsig(r2, 0xa, 0x0) 05:05:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8b03}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0x400d}) 05:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r5 = getuid() fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x8}, {0x80000001}], r5}, 0x18, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, &(0x7f0000002440), 0x2000005) fcntl$setsig(r2, 0xa, 0x0) 05:05:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r5 = getuid() fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x8}, {0x80000001}], r5}, 0x18, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, &(0x7f0000002440), 0x2000005) fcntl$setsig(r2, 0xa, 0x0) 05:05:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x25}}) close(r2) close(r1) 05:05:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) 05:05:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/209) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 05:05:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195, 0x0, 0x0, [], 0x0, 0xfffffffffffffffc}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000008ffc)=0x57bd, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000300)=r1, 0x4) r3 = socket$inet(0x2, 0x200000002, 0x401) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000400)={'ip6tnl0\x00', @ifru_hwaddr=@remote}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xb) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000240)=@req) socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000040)=@unspec, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x8000, 0x3f}, 0x2c) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffffffffffae2f, &(0x7f0000000100)={0x77359400}) r7 = accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) fcntl$dupfd(r3, 0x406, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r9, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r8]}], 0x18}, 0x0) 05:05:04 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f0000001280)="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", 0x599, 0x8000, &(0x7f00000005c0)={0xa, 0x3, 0x0, @mcast2, 0x6}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000540)='\'\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000003c0)='g', 0x1) 05:05:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x40000000002}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0xfd, 0x4) sendto$inet6(r0, &(0x7f0000000440), 0xfeef, 0x20000007, &(0x7f0000000040)={0xa, 0x2}, 0x1c) 05:05:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0x18) 05:05:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/96, 0x4}, {&(0x7f00000012c0)=""/237, 0x446}], 0x2, 0x0) 05:05:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x0, [0x40000023]}) 05:05:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195, 0x0, 0x0, [], 0x0, 0xfffffffffffffffc}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000008ffc)=0x57bd, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000300)=r1, 0x4) r3 = socket$inet(0x2, 0x200000002, 0x401) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000400)={'ip6tnl0\x00', @ifru_hwaddr=@remote}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xb) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000240)=@req) socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000040)=@unspec, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x8000, 0x3f}, 0x2c) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffffffffffae2f, &(0x7f0000000100)={0x77359400}) r7 = accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) fcntl$dupfd(r3, 0x406, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r9, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r8]}], 0x18}, 0x0) 05:05:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgid(0x0) setpriority(0x1, r1, 0x0) 05:05:05 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) unshare(0x100000010900) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x2, 0xc65, 0x7, 0x9998, 0x6}) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x8809000) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x0, 0x10000, 0x2, 0x0, 0x3, r2}) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000280)={0xf, 0x1f, 0x0, 0x6}, 0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x9, @local, 0x5}], 0x1c) 05:05:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195, 0x0, 0x0, [], 0x0, 0xfffffffffffffffc}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000008ffc)=0x57bd, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000300)=r1, 0x4) r3 = socket$inet(0x2, 0x200000002, 0x401) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000400)={'ip6tnl0\x00', @ifru_hwaddr=@remote}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xb) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000240)=@req) socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000040)=@unspec, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x8000, 0x3f}, 0x2c) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffffffffffae2f, &(0x7f0000000100)={0x77359400}) r7 = accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) fcntl$dupfd(r3, 0x406, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r9, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r8]}], 0x18}, 0x0) 05:05:05 executing program 5: r0 = eventfd2(0x200000001, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0x4}], 0x2) 05:05:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) 05:05:05 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0xc0080, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0x4}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, {0x0, 0x3000000, 0x1, 0x4}]}, {0x56, 0x0, 0x0, {0x0, 0x3}, {}, @ramp}}) 05:05:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195, 0x0, 0x0, [], 0x0, 0xfffffffffffffffc}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000008ffc)=0x57bd, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000300)=r1, 0x4) r3 = socket$inet(0x2, 0x200000002, 0x401) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000400)={'ip6tnl0\x00', @ifru_hwaddr=@remote}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xb) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000240)=@req) socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000040)=@unspec, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x8000, 0x3f}, 0x2c) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffffffffffae2f, &(0x7f0000000100)={0x77359400}) r7 = accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) fcntl$dupfd(r3, 0x406, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r9, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r8]}], 0x18}, 0x0) 05:05:06 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) unshare(0x100000010900) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x2, 0xc65, 0x7, 0x9998, 0x6}) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x8809000) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x0, 0x10000, 0x2, 0x0, 0x3, r2}) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000280)={0xf, 0x1f, 0x0, 0x6}, 0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x9, @local, 0x5}], 0x1c) 05:05:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1fbd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a609"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) r3 = getpid() setpriority(0x2, r3, 0x2) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x2, 0x3, [0x8, 0x7f, 0x7, 0xfffffffffffffffc]}}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000a00)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$unix(r4, &(0x7f0000000680)="d43a27d18b3fd1be442d9bb57ee6d77ddbbb93e52292e2d67e17c1679a0c60b402406b1d49a0bad85d0be037ebd558f6cc7c9e9da773f033c9b2f877ea863a07c9d373ae806c8a56864d473d60d232409541450ef73136390ef6155b383dd4a67245dc510b97fb888f1221e120847a8a11cf411a78d46f38a3bd3e3d89b8703a48c208739567aeb16c6c0ca2b5b5404b301ca4850dae843ca5ff370cb45355041d52e9e62c9a36a4b9bb1581d82d", 0xae, 0x1, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:05:06 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) unshare(0x100000010900) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x2, 0xc65, 0x7, 0x9998, 0x6}) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x8809000) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x0, 0x10000, 0x2, 0x0, 0x3, r2}) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000280)={0xf, 0x1f, 0x0, 0x6}, 0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x9, @local, 0x5}], 0x1c) 05:05:06 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) unshare(0x100000010900) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x2, 0xc65, 0x7, 0x9998, 0x6}) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x8809000) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x0, 0x10000, 0x2, 0x0, 0x3, r2}) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000280)={0xf, 0x1f, 0x0, 0x6}, 0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x9, @local, 0x5}], 0x1c) 05:05:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0xe7030000}) 05:05:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000001c0)='/dev/binder#\x00', 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 376.767472] binder_alloc: binder_alloc_mmap_handler: 12176 20001000-20004000 already mapped failed -16 [ 376.777615] binder: BINDER_SET_CONTEXT_MGR already set [ 376.783121] binder: 12176:12177 ioctl 40046207 0 returned -16 [ 376.783739] binder_alloc: 12176: binder_alloc_buf, no vma [ 376.794913] binder: 12176:12178 transaction failed 29189/-3, size 24-8 line 2973 [ 376.803586] binder: 12176:12177 Release 1 refcount change on invalid ref 1 ret -22 05:05:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000001c0)='/dev/binder#\x00', 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 376.809702] binder: release 12176:12178 transaction 7 out, still active [ 376.819072] binder: send failed reply for transaction 7, target dead 05:05:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000001c0)='/dev/binder#\x00', 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 376.898528] binder: release 12180:12183 transaction 12 out, still active [ 376.910320] binder: send failed reply for transaction 12, target dead 05:05:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000001c0)='/dev/binder#\x00', 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 376.989472] binder: release 12186:12188 transaction 16 out, still active [ 377.002348] binder: send failed reply for transaction 16, target dead 05:05:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x86, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x8, 0x6ed, 0x2}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @random="1d5a57644a20"}, 0x0, {}, 'syz_tun\x00'}) [ 377.081175] binder: release 12191:12194 transaction 20 out, still active [ 377.110412] binder: send failed reply for transaction 20, target dead 05:05:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x20, @remote, 0xfffffffffffffffd}, r2}}, 0x30) 05:05:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x3, &(0x7f0000000040)="f03a00"}, 0x30) r3 = getpid() r4 = getpgrp(0xffffffffffffffff) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() r8 = getpgid(0xffffffffffffffff) getresuid(&(0x7f0000004ac0)=0x0, &(0x7f0000004b00), &(0x7f0000004b40)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004b80)={0x0, 0x0, 0x0}, &(0x7f0000004bc0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004c00)={0x0}, &(0x7f0000004c40)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004c80)={0x0, 0x0}, &(0x7f0000004cc0)=0xc) lstat(&(0x7f0000004d00)='./file0\x00', &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004e00)={0xffffffffffffffff, r0, 0x0, 0x17, &(0x7f0000004dc0)='eth0eth1.securitynodev\x00'}, 0x30) r15 = geteuid() getgroups(0x1, &(0x7f0000004e40)=[0xee01]) r17 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004e80)={{{@in6=@ipv4={[], [], @local}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000004f80)=0xe8) fstat(r0, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000005180)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004a80)=[{&(0x7f0000000140)={0x2274, 0x11, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@generic="9cd9446f53bf4a08b9cdcc6a845cc8db5ad24225dcce08d54e274fc33ede0584835bd6a2a8c358278ac8d619741c912827194cb6e2fcd65a538b4bc6ac9ffd28df11ba0076ad4f6a364da52554b7776894cd9820ec92459d7317789e41f27579202dd77228a9429fe6f6cad34562c195f0a7067591b50b7a65329d926f5072dc0fdcd4201d943ad8faa4a127a32f06aeaf48fd2d8d4f02189b91ece8b990724d2406352893be16625df52f7fcd29bdb1f3b1a419a2c7d13cbdea3bfc57cb7d2781404a05d8748b50434ba14966f676dc5cfdace77e7509f2190bf7925b8d2c4efdff9f1f7e526e6442a39efa4166854ebbadc7", @nested={0x14, 0x6f, [@typed={0x8, 0x58, @pid=r2}, @typed={0x8, 0x51, @pid=r3}]}, @typed={0x8, 0x93, @pid=r4}, @generic="017b37d631779516c08c9294c0f8c9ee30bea84fb3e817956a89abd400d70094cd742eea92d5f221d09d02c7bccc92b404643dc9ffc263dd97639ea7f73774e8e55207a937a985eec271dcac666ad48d3c1a9bd036413cde9f", @typed={0x8, 0x2, @str='\x00'}, @nested={0x10f4, 0x1c, [@generic="9310d2f1c553a001d083b2e7d26fcb8a3a0bb0ef48e94966ab816dd0981ecd05e7f400413528519a154ae7d15034ad14cc19d1b021fdc50915db39662882df7291a895b01239ea7867e5f431d047b89c009de9ccd86b513894bea90b6f152649c9a7675610ed932b8c4c620d910a062089eda9c289251a21a234eb75bb659ac4050acaab3dfee0f7920e5ae2d7e7ec3a7b79803850ccd4885dcb8e9deb6f7b487c1ff518101ba1cb5561c9455f602a7d25b70c197b92d8c5e59e40d7d323c416de9a52f78ac1357db67af728cb9ed541af452c8c5716b6a55fb4f1b72af2bde313e60d3219633720333e2da72a", @generic="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"]}, @generic="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"]}, 0x2274}, {&(0x7f0000002500)={0x2544, 0x24, 0x410, 0x70bd29, 0x25dfdbfc, "", [@nested={0x160, 0x60, [@generic="0b01e33f95bdb6a4cd01be64573693f793bef0e5981ed57f305b3616904969bec3c18e77f426694b29c584afc9a7d9955c9ce519b7a2a410cf1664491f0de6d8daeed8ca1f502fceaccd83793f25f4d03423c96dc0dfb82bf3dc860c67f817eb302207443ee37d1599a7cd0101d63727302ba019c22bc489c1129b5612664e596c311c9a9f8d47fe2b358c3ba1ddc3089632ff9589783f9d6f8c64fd31230228dbd8b6c6a22b62f1394a937fd3fce30567343401fc177f27e707d896425a737d08a1d42b7c55ee4a50f122984d51f866e909ba1e67cd3a26ef61fbd8f6af3b94fa372ee08ba8f873ee9022ec87", @typed={0x8, 0x6c, @uid=r5}, @generic="8d68a800c776107d71317ac7e0a3f2fdb2f81d2d16dfdb6791b6d7754c427bf7f44a50e39e73fa0ff459a5cb635cd01cbcaffca8f5adccfc891e86d5d97cb5544ad9a4dccd9ae2555bf0bc2d939d48ea03aea6c613d5cc5966a7bc2ffdccd5d56551dc1d81a6"]}, @nested={0xb8, 0x62, [@typed={0x8, 0x8e, @ipv4=@loopback}, @generic="7b2ffe886a4f122f825e3c9af8d54105a00b82b849132d55eb6c753f36f161867638484aa17cc5521347dc9ae5ea7ed081f4489f25482f2f2588e0f734e1cc2bcc3484e197c3631d22040ec6a314c74d00d3bc70cf678e7be8ed420271f09f23c9258ea6c93635397ed2a7c2a0b3931e57384af4dabade4ce42ca629a5a06f6173f5f48e6e1d3bc95c63583d903bc482059cf5a091fa4d113ef2a9119ccc1e088d7a534bdd8b90fef7"]}, @typed={0xe0, 0x7b, @binary="cb05182ee33b85f9b18a4490a45e50bf03378a6a82928611ae225bd07d72fffc13c73ed53500b4afd349d91a9f9f2b2a986b5d6ae1d68bbdbdde4f27918bc5bafe6fb19cb201ed5a1e1be23699060ac42cc0332a563fdc04d63d383ed7cbe3a221f1b6405274a1e318e328dd7bf95a8368635c24983af8b876165557ab5b12b8615b7e7e072362a64de395bbb11650e4642cad44bf30aef936b80352fd6024fb59ef28a6e316aa1cb57a16a66d05d90a6ff4d6791422cf3d13cd622b5f588e3c53ae74d6ee5e0cbfd1d79646321000bb7ce5403d1e7739a8789d52"}, @generic="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", @nested={0x11c4, 0x33, [@generic="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", @generic="753f5f0efb3ebf096b500cce65e55a56ff6263bc30f634c03fb758732e9fbe4da26cbf23fa781138a5df75ad189351b50a659235fd396be49b9ccffd934da6bb10ff2b2c700d9be0c0248b860c6aa5f7a946ee9fb8952895d502bc1f7756b0c744db7edeab364de88389aa7ffdab9f716ab38cc8f41c26c1259c68118fc25f6cf5e7ce", @typed={0x8, 0x3d, @uid=r6}, @generic="e995b1f0ad2df8d37f8b2fec9731b9268427cb1c54a76a685281237b9919ecd7e92ac1eacf66d32939b3beeba82199b554ac3a9a", @typed={0xc, 0x15, @binary="afae528e3571"}, @generic="0c04266af65f6583373ac174ae06c0ec21c96fd755f3eae4d1de50a0986f20a21f856858c0d5a88a0f158e0f221d4eadcfb6fac2e88d0b57c158d64549b8df3fea35fe16907f24c387ec81e4a7983a8b38ef5cbeae751c68448ff7076ff572720778ffbb781e0072a83128f86f2eec7f033a962de76215986c08942585323cd315e197e1d4332a04f76f1681af57505b771cf29f059f3c15b12caba129ccb31e9b60b383ce93ced0c12d36f366c75faef281f2d9d52374a6711b85d82d0043c7863f4728ad1bdc3bba6b94c6b9d8032a27ed634cdc37857a8e9ec6432237c7b85304738a98aea779bee59811", @typed={0x8, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}]}, @typed={0x8, 0x73, @fd=r0}, @typed={0x8, 0x3c, @uid=r7}, @typed={0x10, 0x44, @str='net/ptype\x00'}, @generic="7b8811ea0c5457fe528f4e89f78cdb0fd8c82635c62da2160bc5317379eb50b08942c92613868514f926bd1150f4913c8b3fb80ad5065439434d61e5b13938b6d53d92e9f989b4e06c8bb3b2e591cb6c26dbade17be46e4b"]}, 0x2544}], 0x2, &(0x7f0000005040)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x38, 0x1, 0x1, [r1, r0, r0, r0, r0, r1, r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1, r0]}], 0x118, 0x4884}, 0x0) r20 = socket$kcm(0x29, 0x5, 0x0) sendfile(r20, r1, &(0x7f0000301ff8), 0xffffffff) 05:05:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="853f6234488dd25d766070") r1 = msgget$private(0x0, 0x0) msgrcv(r1, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x1, 0x1000) socket(0x11, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x1004000000016) 05:05:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="853f6234488dd25d766070") r1 = msgget$private(0x0, 0x0) msgrcv(r1, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x1, 0x1000) socket(0x11, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x1004000000016) 05:05:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000006c0)=r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@loopback}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r2 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="02e45e8dd723ea152e505e7369f9dfda2416c9ba971c8d5e1e1ecf0351ee8a0a"], 0x1}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="a693f9714864fc33948eba9a50340442897ec1c9a73466b49b708d27f8a986ad5970cc06408fa7452be3905c9800770f93640cf50d49e95b97f95618d583b222e5cc65fa9c2f03fa57da921cfea5df4967492719f9124c8ffc19c08e14cb90c495ca82a74b371afd6df79f360b5c11ea3a0a6ec553f2302586dfcf39902b488df8e13c1365532d6ac1c06429669c3e4a9c9747916b57c09c38b6308d7d6de83be847e95f6dc2f4a28331202ca62b5e8945e488e92c445fbe88d9b84c4982b93de8e0f1ecb30a5a489a112a6aba9851b0cc616eba6ae03202950187f4f3d66961784938317877fa20fc6141cf58eff6a398f41fba606cf3ae96"]]], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000440)={r3, 0x7fff, 0x4, 0x3ff, 0x4, 0x9, 0x20, 0x1, {r4, @in6={{0xa, 0x4e21, 0x0, @empty, 0x9}}, 0x100000001, 0x800, 0x1f, 0x2, 0x1000}}, &(0x7f0000000500)=0xb0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty, [0x0, 0x3e8, 0xa00000000000000]}, 0x0) getsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0xfffffffffffffffc, &(0x7f0000000040)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000300), 0x8) 05:05:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000006c0)=r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast1, @in=@loopback}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r2 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="02e45e8dd723ea152e505e7369f9dfda2416c9ba971c8d5e1e1ecf0351ee8a0a"], 0x1}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="a693f9714864fc33948eba9a50340442897ec1c9a73466b49b708d27f8a986ad5970cc06408fa7452be3905c9800770f93640cf50d49e95b97f95618d583b222e5cc65fa9c2f03fa57da921cfea5df4967492719f9124c8ffc19c08e14cb90c495ca82a74b371afd6df79f360b5c11ea3a0a6ec553f2302586dfcf39902b488df8e13c1365532d6ac1c06429669c3e4a9c9747916b57c09c38b6308d7d6de83be847e95f6dc2f4a28331202ca62b5e8945e488e92c445fbe88d9b84c4982b93de8e0f1ecb30a5a489a112a6aba9851b0cc616eba6ae03202950187f4f3d66961784938317877fa20fc6141cf58eff6a398f41fba606cf3ae96"]]], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000440)={r3, 0x7fff, 0x4, 0x3ff, 0x4, 0x9, 0x20, 0x1, {r4, @in6={{0xa, 0x4e21, 0x0, @empty, 0x9}}, 0x100000001, 0x800, 0x1f, 0x2, 0x1000}}, &(0x7f0000000500)=0xb0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty, [0x0, 0x3e8, 0xa00000000000000]}, 0x0) getsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0xfffffffffffffffc, &(0x7f0000000040)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000300), 0x8) 05:05:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r0 = getpid() exit_group(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[], 0xd}, 'ip6tnl0\x00'}}, 0x1e) mq_notify(r1, &(0x7f0000000040)={0x0, 0x12, 0x4, @tid=r0}) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xffffffffffffff05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2000000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000000}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0xfffffffffffffff9, 0x5, &(0x7f00000000c0)=0x1}) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000140)={{0x4, @name="f4c85dec007077dc15b481b3edcb791cae32775b526fe9121551116c551285ec"}, 0x8, 0x2789}) 05:05:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240020000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0x0, &(0x7f0000000040), 0x4000) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x408000) ioctl$TCSBRK(r0, 0x5409, 0x3) [ 379.820712] kauditd_printk_skb: 2 callbacks suppressed [ 379.820727] audit: type=1326 audit(1541567109.811:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x50000 [ 379.849437] audit: type=1326 audit(1541567109.811:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 379.871983] audit: type=1326 audit(1541567109.811:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 379.893492] audit: type=1326 audit(1541567109.811:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 379.915411] audit: type=1326 audit(1541567109.811:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 379.936678] audit: type=1326 audit(1541567109.811:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 379.957889] audit: type=1326 audit(1541567109.811:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 379.979182] audit: type=1326 audit(1541567109.811:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 [ 380.001106] audit: type=1326 audit(1541567109.811:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 05:05:10 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount(&(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000980)='./file0\x00', &(0x7f0000000d40)='jfs\x00', 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/42) fanotify_init(0x0, 0x0) syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x0) [ 380.023082] audit: type=1326 audit(1541567109.821:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12240 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457569 code=0x50000 05:05:10 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount(&(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000980)='./file0\x00', &(0x7f0000000d40)='jfs\x00', 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/42) fanotify_init(0x0, 0x0) syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x0) [ 380.077921] Filesystem requires source device [ 380.109620] Filesystem requires source device 05:05:10 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount(&(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000980)='./file0\x00', &(0x7f0000000d40)='jfs\x00', 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/42) fanotify_init(0x0, 0x0) syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x0) [ 380.183123] Filesystem requires source device 05:05:10 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount(&(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000980)='./file0\x00', &(0x7f0000000d40)='jfs\x00', 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/42) fanotify_init(0x0, 0x0) syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x0) [ 380.262856] Filesystem requires source device 05:05:10 executing program 3: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x40) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = socket$inet6(0xa, 0x8000080800, 0x576) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) dup3(r0, r3, 0x0) 05:05:10 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="e31ae25894b3849cdd150cbf2f4b7f67f9b6c1bdb00c3741dba2ca5da8335084b0ef91f426f50079a668cfec21ea036810ea62bce633f64c2e7ed56a30bf8add", 0x40, 0x20}, {&(0x7f0000000180)="8f1474ae3745d36f179a7f9bbc3f0edf00fde4e57b11e9aae58dc7bee258b79e4cd79360b6e80c8b9eaa0975166ad49d2d577a547181c90156158893ffdbfa43ccb48da05cecb4ce77793ee79166f10e4d964f4e9f6d51745f8f9d33358854afa1a8897b512e", 0x66, 0x4}, {&(0x7f0000000340)="393896469ca39ceacdeb007105d3c0266829d33351e434f3d585fa3acc20f0e1c017160f08084a8658c67f65daeb381dc7203ea093131b897d8aefd6fc3b4392d14758cc3cf0d74de8da31ae0a4887fa5dbfde71a27f780d8b5cba00c815cff006f486f02a5ed09ba192ede57c3c8f61f612f9e2e211e3a21f23d1060b1298ccb9af9f3afa112620d93ffc19c5292f9ca44667cf4c729345632d13910c1040cd92b12f", 0xa3, 0xf712}], 0x1, &(0x7f00000004c0)={[{@acl='acl'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}, {@user_xattr='user_xattr'}], [{@obj_role={'obj_role', 0x3d, "5b70707030ea73656c696e75782b402775736572656d31d06d643573756d747275737465642a73656c6676626f786e6574302d656d30"}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r0}}, {@subj_type={'subj_type', 0x3d, 'bpf\x00'}}]}) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x20, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x100000000000}}]}) [ 380.420936] erofs: read_super, device -> /dev/loop3 [ 380.426329] erofs: options -> acl,user_xattr,nouser_xattr,nouser_xattr,nouser_xattr,noacl,acl,nouser_xattr,fault_injection=0x0000000000000006,user_xattr,obj_role=[ppp0êselinux+@'userem1Ðmd5sumtrusted*selfvboxnet0-em0,defcontext=unconfined_u,smackfsdef=,a [ 380.450947] erofs: cannot find valid erofs superblock [ 380.484791] erofs: read_super, device -> /dev/loop3 [ 380.491250] erofs: options -> [ 380.494592] erofs: cannot find valid erofs superblock 05:05:10 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="e31ae25894b3849cdd150cbf2f4b7f67f9b6c1bdb00c3741dba2ca5da8335084b0ef91f426f50079a668cfec21ea036810ea62bce633f64c2e7ed56a30bf8add", 0x40, 0x20}, {&(0x7f0000000180)="8f1474ae3745d36f179a7f9bbc3f0edf00fde4e57b11e9aae58dc7bee258b79e4cd79360b6e80c8b9eaa0975166ad49d2d577a547181c90156158893ffdbfa43ccb48da05cecb4ce77793ee79166f10e4d964f4e9f6d51745f8f9d33358854afa1a8897b512e", 0x66, 0x4}, {&(0x7f0000000340)="393896469ca39ceacdeb007105d3c0266829d33351e434f3d585fa3acc20f0e1c017160f08084a8658c67f65daeb381dc7203ea093131b897d8aefd6fc3b4392d14758cc3cf0d74de8da31ae0a4887fa5dbfde71a27f780d8b5cba00c815cff006f486f02a5ed09ba192ede57c3c8f61f612f9e2e211e3a21f23d1060b1298ccb9af9f3afa112620d93ffc19c5292f9ca44667cf4c729345632d13910c1040cd92b12f", 0xa3, 0xf712}], 0x1, &(0x7f00000004c0)={[{@acl='acl'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}, {@user_xattr='user_xattr'}], [{@obj_role={'obj_role', 0x3d, "5b70707030ea73656c696e75782b402775736572656d31d06d643573756d747275737465642a73656c6676626f786e6574302d656d30"}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r0}}, {@subj_type={'subj_type', 0x3d, 'bpf\x00'}}]}) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x20, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x100000000000}}]}) [ 380.652448] erofs: read_super, device -> /dev/loop3 [ 380.657597] erofs: options -> acl,user_xattr,nouser_xattr,nouser_xattr,nouser_xattr,noacl,acl,nouser_xattr,fault_injection=0x0000000000000006,user_xattr,obj_role=[ppp0êselinux+@'userem1Ðmd5sumtrusted*selfvboxnet0-em0,defcontext=unconfined_u,smackfsdef=,a [ 380.681414] erofs: cannot find valid erofs superblock 05:05:10 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="e31ae25894b3849cdd150cbf2f4b7f67f9b6c1bdb00c3741dba2ca5da8335084b0ef91f426f50079a668cfec21ea036810ea62bce633f64c2e7ed56a30bf8add", 0x40, 0x20}, {&(0x7f0000000180)="8f1474ae3745d36f179a7f9bbc3f0edf00fde4e57b11e9aae58dc7bee258b79e4cd79360b6e80c8b9eaa0975166ad49d2d577a547181c90156158893ffdbfa43ccb48da05cecb4ce77793ee79166f10e4d964f4e9f6d51745f8f9d33358854afa1a8897b512e", 0x66, 0x4}, {&(0x7f0000000340)="393896469ca39ceacdeb007105d3c0266829d33351e434f3d585fa3acc20f0e1c017160f08084a8658c67f65daeb381dc7203ea093131b897d8aefd6fc3b4392d14758cc3cf0d74de8da31ae0a4887fa5dbfde71a27f780d8b5cba00c815cff006f486f02a5ed09ba192ede57c3c8f61f612f9e2e211e3a21f23d1060b1298ccb9af9f3afa112620d93ffc19c5292f9ca44667cf4c729345632d13910c1040cd92b12f", 0xa3, 0xf712}], 0x1, &(0x7f00000004c0)={[{@acl='acl'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}, {@user_xattr='user_xattr'}], [{@obj_role={'obj_role', 0x3d, "5b70707030ea73656c696e75782b402775736572656d31d06d643573756d747275737465642a73656c6676626f786e6574302d656d30"}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r0}}, {@subj_type={'subj_type', 0x3d, 'bpf\x00'}}]}) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x20, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x100000000000}}]}) [ 380.864918] erofs: read_super, device -> /dev/loop3 [ 380.870489] erofs: options -> acl,user_xattr,nouser_xattr,nouser_xattr,nouser_xattr,noacl,acl,nouser_xattr,fault_injection=0x0000000000000006,user_xattr,obj_role=[ppp0êselinux+@'userem1Ðmd5sumtrusted*selfvboxnet0-em0,defcontext=unconfined_u,smackfsdef=,a [ 380.893804] erofs: cannot find valid erofs superblock 05:05:10 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="e31ae25894b3849cdd150cbf2f4b7f67f9b6c1bdb00c3741dba2ca5da8335084b0ef91f426f50079a668cfec21ea036810ea62bce633f64c2e7ed56a30bf8add", 0x40, 0x20}, {&(0x7f0000000180)="8f1474ae3745d36f179a7f9bbc3f0edf00fde4e57b11e9aae58dc7bee258b79e4cd79360b6e80c8b9eaa0975166ad49d2d577a547181c90156158893ffdbfa43ccb48da05cecb4ce77793ee79166f10e4d964f4e9f6d51745f8f9d33358854afa1a8897b512e", 0x66, 0x4}, {&(0x7f0000000340)="393896469ca39ceacdeb007105d3c0266829d33351e434f3d585fa3acc20f0e1c017160f08084a8658c67f65daeb381dc7203ea093131b897d8aefd6fc3b4392d14758cc3cf0d74de8da31ae0a4887fa5dbfde71a27f780d8b5cba00c815cff006f486f02a5ed09ba192ede57c3c8f61f612f9e2e211e3a21f23d1060b1298ccb9af9f3afa112620d93ffc19c5292f9ca44667cf4c729345632d13910c1040cd92b12f", 0xa3, 0xf712}], 0x1, &(0x7f00000004c0)={[{@acl='acl'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}, {@user_xattr='user_xattr'}], [{@obj_role={'obj_role', 0x3d, "5b70707030ea73656c696e75782b402775736572656d31d06d643573756d747275737465642a73656c6676626f786e6574302d656d30"}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r0}}, {@subj_type={'subj_type', 0x3d, 'bpf\x00'}}]}) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x20, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x100000000000}}]}) [ 381.042971] erofs: read_super, device -> /dev/loop3 [ 381.048135] erofs: options -> acl,user_xattr,nouser_xattr,nouser_xattr,nouser_xattr,noacl,acl,nouser_xattr,fault_injection=0x0000000000000006,user_xattr,obj_role=[ppp0êselinux+@'userem1Ðmd5sumtrusted*selfvboxnet0-em0,defcontext=unconfined_u,smackfsdef=,a [ 381.071732] erofs: cannot find valid erofs superblock 05:05:11 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="e31ae25894b3849cdd150cbf2f4b7f67f9b6c1bdb00c3741dba2ca5da8335084b0ef91f426f50079a668cfec21ea036810ea62bce633f64c2e7ed56a30bf8add", 0x40, 0x20}, {&(0x7f0000000180)="8f1474ae3745d36f179a7f9bbc3f0edf00fde4e57b11e9aae58dc7bee258b79e4cd79360b6e80c8b9eaa0975166ad49d2d577a547181c90156158893ffdbfa43ccb48da05cecb4ce77793ee79166f10e4d964f4e9f6d51745f8f9d33358854afa1a8897b512e", 0x66, 0x4}, {&(0x7f0000000340)="393896469ca39ceacdeb007105d3c0266829d33351e434f3d585fa3acc20f0e1c017160f08084a8658c67f65daeb381dc7203ea093131b897d8aefd6fc3b4392d14758cc3cf0d74de8da31ae0a4887fa5dbfde71a27f780d8b5cba00c815cff006f486f02a5ed09ba192ede57c3c8f61f612f9e2e211e3a21f23d1060b1298ccb9af9f3afa112620d93ffc19c5292f9ca44667cf4c729345632d13910c1040cd92b12f", 0xa3, 0xf712}], 0x1, &(0x7f00000004c0)={[{@acl='acl'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}, {@user_xattr='user_xattr'}], [{@obj_role={'obj_role', 0x3d, "5b70707030ea73656c696e75782b402775736572656d31d06d643573756d747275737465642a73656c6676626f786e6574302d656d30"}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r0}}, {@subj_type={'subj_type', 0x3d, 'bpf\x00'}}]}) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 381.212559] erofs: read_super, device -> /dev/loop3 [ 381.217839] erofs: options -> acl,user_xattr,nouser_xattr,nouser_xattr,nouser_xattr,noacl,acl,nouser_xattr,fault_injection=0x0000000000000006,user_xattr,obj_role=[ppp0êselinux+@'userem1Ðmd5sumtrusted*selfvboxnet0-em0,defcontext=unconfined_u,smackfsdef=,a [ 381.240642] erofs: cannot find valid erofs superblock 05:05:11 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:11 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:11 executing program 3: mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0xbe7010000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:05:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000ff"]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}], 0x2217) 05:05:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc0a85322, &(0x7f0000000340)={0x80, 0x0, 0x0, "717565756531000000000000000000000e00"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r2, 0x1000000000013) 05:05:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000140), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r2, 0x5}) 05:05:15 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r1, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x41f00, 0x1, [], r2, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0xa, 0x5, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x2, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x400}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x1030d, &(0x7f0000001840)}, 0x10) 05:05:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000140), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r2, 0x5}) [ 385.120432] binder_alloc: binder_alloc_mmap_handler: 12322 20001000-20004000 already mapped failed -16 [ 385.173135] binder: BINDER_SET_CONTEXT_MGR already set [ 385.197853] binder: 12322:12328 ioctl 40046207 0 returned -16 05:05:15 executing program 3 (fault-call:1 fault-nth:0): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 385.222856] binder_alloc: 12322: binder_alloc_buf, no vma [ 385.223120] binder: 12322:12340 BC_INCREFS_DONE u0000000000000000 no match [ 385.247670] binder: 12322:12332 transaction failed 29189/-3, size 24-8 line 2973 [ 385.287367] binder: release 12322:12332 transaction 24 out, still active [ 385.298438] FAULT_INJECTION: forcing a failure. [ 385.298438] name failslab, interval 1, probability 0, space 0, times 1 [ 385.311414] binder: send failed reply for transaction 24, target dead [ 385.318350] CPU: 0 PID: 12345 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 385.326940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.336303] Call Trace: [ 385.338911] dump_stack+0x244/0x39d [ 385.342558] ? dump_stack_print_info.cold.1+0x20/0x20 [ 385.347814] should_fail.cold.4+0xa/0x17 [ 385.351872] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 385.357012] ? __f_unlock_pos+0x19/0x20 [ 385.361030] ? lock_downgrade+0x900/0x900 [ 385.365203] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 385.370742] ? proc_fail_nth_write+0x9e/0x210 [ 385.375235] ? find_held_lock+0x36/0x1c0 [ 385.379327] ? perf_trace_sched_process_exec+0x860/0x860 [ 385.384771] ? __lock_is_held+0xb5/0x140 [ 385.388861] __should_failslab+0x124/0x180 [ 385.393123] should_failslab+0x9/0x14 [ 385.396931] __kmalloc_track_caller+0x2d1/0x760 [ 385.401593] ? strncpy_from_user+0x5a0/0x5a0 [ 385.406009] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 385.411572] ? strndup_user+0x77/0xd0 [ 385.415367] memdup_user+0x2c/0xa0 [ 385.418902] strndup_user+0x77/0xd0 [ 385.422558] ksys_mount+0x3c/0x140 [ 385.426100] __x64_sys_mount+0xbe/0x150 [ 385.430071] do_syscall_64+0x1b9/0x820 [ 385.434048] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 385.439405] ? syscall_return_slowpath+0x5e0/0x5e0 [ 385.444322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.449167] ? trace_hardirqs_on_caller+0x310/0x310 [ 385.454179] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 385.459185] ? prepare_exit_to_usermode+0x291/0x3b0 [ 385.464198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.469048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.474224] RIP: 0033:0x457569 [ 385.477407] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.496294] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.503988] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 385.511254] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 385.518608] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 385.525878] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 05:05:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 385.533144] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:15 executing program 3 (fault-call:1 fault-nth:1): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0xbe7010000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:05:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000140), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r2, 0x5}) [ 385.742311] binder: release 12353:12361 transaction 29 out, still active 05:05:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:15 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r1, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x41f00, 0x1, [], r2, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0xa, 0x5, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x2, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x400}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x1030d, &(0x7f0000001840)}, 0x10) [ 385.811833] FAULT_INJECTION: forcing a failure. [ 385.811833] name failslab, interval 1, probability 0, space 0, times 0 [ 385.826009] binder: send failed reply for transaction 29, target dead [ 385.880343] CPU: 1 PID: 12365 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 385.888965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.898336] Call Trace: [ 385.900944] dump_stack+0x244/0x39d [ 385.904598] ? dump_stack_print_info.cold.1+0x20/0x20 [ 385.904630] should_fail.cold.4+0xa/0x17 [ 385.904653] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 385.918998] ? save_stack+0x43/0xd0 [ 385.919015] ? kasan_kmalloc+0xc7/0xe0 [ 385.919031] ? __kmalloc_track_caller+0x157/0x760 [ 385.919048] ? memdup_user+0x2c/0xa0 [ 385.919075] ? do_syscall_64+0x1b9/0x820 [ 385.926564] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.926582] ? proc_fail_nth_write+0x9e/0x210 [ 385.926609] ? find_held_lock+0x36/0x1c0 [ 385.935203] ? agp_copy_info+0x5b8/0x900 [ 385.935235] ? perf_trace_sched_process_exec+0x860/0x860 [ 385.945067] ? lock_release+0xa10/0xa10 [ 385.945083] ? perf_trace_sched_process_exec+0x860/0x860 [ 385.945108] __should_failslab+0x124/0x180 [ 385.945129] should_failslab+0x9/0x14 [ 385.945146] __kmalloc_track_caller+0x2d1/0x760 [ 385.945168] ? strncpy_from_user+0x5a0/0x5a0 [ 385.954863] binder: 12368:12372 Release 1 refcount change on invalid ref 1 ret -22 [ 385.957756] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 385.967177] ? strndup_user+0x77/0xd0 [ 385.967200] memdup_user+0x2c/0xa0 [ 385.967217] strndup_user+0x77/0xd0 [ 385.967237] ksys_mount+0x73/0x140 [ 385.976940] __x64_sys_mount+0xbe/0x150 [ 385.976964] do_syscall_64+0x1b9/0x820 [ 385.976991] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 385.977013] ? syscall_return_slowpath+0x5e0/0x5e0 [ 385.985456] ? trace_hardirqs_on_caller+0x310/0x310 [ 385.985476] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 385.985552] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 385.985571] ? __switch_to_asm+0x40/0x70 [ 385.997665] ? __switch_to_asm+0x34/0x70 [ 385.997690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.997715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.007021] RIP: 0033:0x457569 [ 386.007039] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.007048] RSP: 002b:00007f1aa3400c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 386.007064] RAX: ffffffffffffffda RBX: 00007f1aa3400c90 RCX: 0000000000457569 [ 386.007074] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 386.007084] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 386.007094] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34016d4 [ 386.007104] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000140), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r2, 0x5}) 05:05:16 executing program 3 (fault-call:1 fault-nth:2): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r1, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x41f00, 0x1, [], r2, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0xa, 0x5, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x2, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x400}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x1030d, &(0x7f0000001840)}, 0x10) 05:05:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0xbe7010000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 386.405697] FAULT_INJECTION: forcing a failure. [ 386.405697] name failslab, interval 1, probability 0, space 0, times 0 [ 386.432945] CPU: 1 PID: 12391 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 386.441560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.451019] Call Trace: [ 386.453622] dump_stack+0x244/0x39d [ 386.457269] ? dump_stack_print_info.cold.1+0x20/0x20 [ 386.462490] should_fail.cold.4+0xa/0x17 [ 386.466568] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 386.471749] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 386.476695] ? kasan_check_read+0x11/0x20 [ 386.480864] ? mark_held_locks+0x130/0x130 [ 386.485128] ? find_held_lock+0x36/0x1c0 [ 386.489205] ? __irqentry_text_end+0x189f40/0x1f9688 [ 386.494338] ? perf_trace_sched_process_exec+0x860/0x860 [ 386.499823] ? save_stack+0x43/0xd0 [ 386.503467] ? kasan_kmalloc+0xc7/0xe0 [ 386.507374] __should_failslab+0x124/0x180 [ 386.511629] should_failslab+0x9/0x14 [ 386.515455] kmem_cache_alloc+0x2be/0x730 [ 386.519680] getname_flags+0xd0/0x590 [ 386.523501] user_path_at_empty+0x2d/0x50 [ 386.527668] do_mount+0x180/0x1ff0 [ 386.531224] ? lock_release+0xa10/0xa10 [ 386.535211] ? perf_trace_sched_process_exec+0x860/0x860 [ 386.540685] ? copy_mount_string+0x40/0x40 [ 386.544957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.550553] ? _copy_from_user+0xdf/0x150 [ 386.550576] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.550595] ? copy_mount_options+0x315/0x430 [ 386.550612] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.550635] ksys_mount+0x12d/0x140 [ 386.550656] __x64_sys_mount+0xbe/0x150 [ 386.550679] do_syscall_64+0x1b9/0x820 [ 386.550697] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 386.550716] ? syscall_return_slowpath+0x5e0/0x5e0 [ 386.550733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.550753] ? trace_hardirqs_on_caller+0x310/0x310 [ 386.550771] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 386.550791] ? prepare_exit_to_usermode+0x291/0x3b0 [ 386.597072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.597102] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.597115] RIP: 0033:0x457569 [ 386.597134] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.616984] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 05:05:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 386.617002] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 386.617012] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 386.617021] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 386.617031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 386.617039] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 386.631703] binder: BINDER_SET_CONTEXT_MGR already set 05:05:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:16 executing program 3 (fault-call:1 fault-nth:3): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 386.706956] binder: 12380:12397 ioctl 40046207 0 returned -16 [ 386.707094] binder: release 12381:12396 transaction 34 out, still active [ 386.767726] binder: send failed reply for transaction 34, target dead 05:05:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r1, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x41f00, 0x1, [], r2, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0xa, 0x5, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x2, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x400}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x1030d, &(0x7f0000001840)}, 0x10) [ 386.825947] binder: 12380:12399 transaction failed 29189/-22, size 24-8 line 2834 [ 386.848171] binder: release 12398:12407 transaction 39 out, still active [ 386.866667] binder: 12380:12397 BC_INCREFS_DONE u0000000000000000 no match 05:05:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 386.893402] binder: BINDER_SET_CONTEXT_MGR already set [ 386.904941] binder: 12380:12397 Release 1 refcount change on invalid ref 1 ret -22 [ 386.912957] binder: send failed reply for transaction 39, target dead [ 386.920799] binder: 12403:12408 ioctl 40046207 0 returned -16 [ 386.939563] binder: 12403:12410 transaction failed 29189/-22, size 24-8 line 2834 [ 386.966377] binder: 12380:12399 BC_ACQUIRE_DONE u0000000000000000 no match [ 386.979234] binder: 12403:12408 BC_INCREFS_DONE u0000000000000000 no match [ 387.007330] FAULT_INJECTION: forcing a failure. [ 387.007330] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 387.019164] CPU: 0 PID: 12414 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 387.027731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.037074] Call Trace: [ 387.039657] dump_stack+0x244/0x39d [ 387.043277] ? dump_stack_print_info.cold.1+0x20/0x20 [ 387.048458] ? mark_held_locks+0x130/0x130 [ 387.052694] should_fail.cold.4+0xa/0x17 [ 387.056747] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 387.061855] ? mark_held_locks+0x130/0x130 [ 387.066088] ? print_usage_bug+0xc0/0xc0 [ 387.070151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.075693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.081271] ? check_preemption_disabled+0x48/0x280 [ 387.086280] ? find_held_lock+0x36/0x1c0 [ 387.090337] ? debug_smp_processor_id+0x1c/0x20 [ 387.095015] ? perf_trace_lock_acquire+0x15b/0x800 [ 387.099936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.105463] ? should_fail+0x22d/0xd01 [ 387.109345] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 387.114449] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 387.119415] __alloc_pages_nodemask+0x34b/0xdd0 [ 387.124080] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 387.129103] ? find_held_lock+0x36/0x1c0 [ 387.133219] ? rmd160_transform+0x1088/0x1ec0 [ 387.137721] ? trace_hardirqs_off+0xb8/0x310 [ 387.142121] cache_grow_begin+0xa5/0x8c0 [ 387.146173] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.151701] ? check_preemption_disabled+0x48/0x280 [ 387.156715] kmem_cache_alloc+0x66b/0x730 [ 387.160863] getname_flags+0xd0/0x590 [ 387.164669] user_path_at_empty+0x2d/0x50 [ 387.168812] do_mount+0x180/0x1ff0 [ 387.172343] ? lock_release+0xa10/0xa10 [ 387.176309] ? perf_trace_sched_process_exec+0x860/0x860 [ 387.181750] ? copy_mount_string+0x40/0x40 [ 387.186337] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.191864] ? _copy_from_user+0xdf/0x150 [ 387.196016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.201543] ? copy_mount_options+0x315/0x430 [ 387.206027] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.211560] ksys_mount+0x12d/0x140 [ 387.215178] __x64_sys_mount+0xbe/0x150 [ 387.219147] do_syscall_64+0x1b9/0x820 [ 387.223026] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 387.228379] ? syscall_return_slowpath+0x5e0/0x5e0 [ 387.233301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.238134] ? trace_hardirqs_on_caller+0x310/0x310 [ 387.243144] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 387.248155] ? prepare_exit_to_usermode+0x291/0x3b0 [ 387.253169] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.258007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 387.263184] RIP: 0033:0x457569 [ 387.266368] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.285436] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 387.293135] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 387.300395] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 387.307652] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 387.314913] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 387.322176] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 387.330656] binder: 12403:12410 Release 1 refcount change on invalid ref 1 ret -22 05:05:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0xbe7010000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 387.375156] binder: 12403:12408 BC_ACQUIRE_DONE u0000000000000000 no match [ 387.409839] binder: release 12413:12417 transaction 44 out, still active 05:05:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:17 executing program 3 (fault-call:1 fault-nth:4): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 387.476328] binder: send failed reply for transaction 44, target dead [ 387.604828] FAULT_INJECTION: forcing a failure. [ 387.604828] name failslab, interval 1, probability 0, space 0, times 0 [ 387.617861] CPU: 1 PID: 12430 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 387.626461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.635845] Call Trace: [ 387.635873] dump_stack+0x244/0x39d [ 387.635896] ? dump_stack_print_info.cold.1+0x20/0x20 [ 387.635927] should_fail.cold.4+0xa/0x17 [ 387.635950] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 387.635966] ? __switch_to_asm+0x34/0x70 [ 387.635987] ? __switch_to_asm+0x34/0x70 [ 387.651443] ? __switch_to_asm+0x40/0x70 [ 387.651458] ? __switch_to_asm+0x34/0x70 [ 387.651477] ? __switch_to_asm+0x34/0x70 [ 387.651492] ? __switch_to_asm+0x40/0x70 [ 387.651512] ? __schedule+0x8d7/0x21d0 [ 387.651531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 387.651560] ? find_held_lock+0x36/0x1c0 [ 387.651603] ? perf_trace_sched_process_exec+0x860/0x860 [ 387.651634] __should_failslab+0x124/0x180 05:05:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) [ 387.651656] should_failslab+0x9/0x14 [ 387.651673] kmem_cache_alloc_trace+0x2d7/0x750 [ 387.651688] ? ___preempt_schedule+0x16/0x18 [ 387.651771] vfs_new_fs_context+0x5e/0x77c [ 387.651794] do_mount+0x1816/0x1ff0 [ 387.665004] ? lock_release+0xa10/0xa10 [ 387.665031] ? copy_mount_string+0x40/0x40 [ 387.665067] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.665085] ? _copy_from_user+0xdf/0x150 [ 387.665106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.665125] ? copy_mount_options+0x315/0x430 05:05:17 executing program 0: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 387.676392] binder: 12422:12432 transaction failed 29189/-22, size 24-8 line 2834 [ 387.677271] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.677294] ksys_mount+0x12d/0x140 [ 387.685250] __x64_sys_mount+0xbe/0x150 [ 387.685275] do_syscall_64+0x1b9/0x820 [ 387.685294] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 387.685313] ? syscall_return_slowpath+0x5e0/0x5e0 [ 387.685329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.685354] ? trace_hardirqs_on_caller+0x310/0x310 [ 387.685373] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 387.695500] binder: 12422:12432 BC_INCREFS_DONE u0000000000000000 no match [ 387.699618] ? prepare_exit_to_usermode+0x291/0x3b0 [ 387.699643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.699670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 387.699683] RIP: 0033:0x457569 [ 387.699699] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.699712] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 387.707734] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 387.707745] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 387.707755] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 387.707771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 387.721059] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 387.762599] binder: 12422:12431 Release 1 refcount change on invalid ref 1 ret -22 05:05:17 executing program 3 (fault-call:1 fault-nth:5): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 387.785915] binder: 12427:12438 Release 1 refcount change on invalid ref 1 ret -22 [ 387.792535] binder: BINDER_SET_CONTEXT_MGR already set [ 387.820738] binder: 12427:12435 ioctl 40046207 0 returned -16 [ 387.829525] binder: BINDER_SET_CONTEXT_MGR already set [ 387.830983] binder: 12422:12432 BC_ACQUIRE_DONE u0000000000000000 no match [ 387.908367] binder: 12433:12439 ioctl 40046207 0 returned -16 [ 387.928621] FAULT_INJECTION: forcing a failure. [ 387.928621] name failslab, interval 1, probability 0, space 0, times 0 [ 387.946818] CPU: 1 PID: 12443 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 387.958753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.968106] Call Trace: [ 387.968130] dump_stack+0x244/0x39d [ 387.968153] ? dump_stack_print_info.cold.1+0x20/0x20 [ 387.968186] should_fail.cold.4+0xa/0x17 [ 387.968209] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 387.968239] ? save_stack+0xa9/0xd0 [ 387.968256] ? save_stack+0x43/0xd0 [ 387.968274] ? kmem_cache_alloc_trace+0x152/0x750 [ 387.974466] ? vfs_new_fs_context+0x5e/0x77c 05:05:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000005c0)="0a5c2d0240316285717070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) unshare(0x8000400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) [ 387.974483] ? do_mount+0x1816/0x1ff0 [ 387.974499] ? ksys_mount+0x12d/0x140 [ 387.974515] ? __x64_sys_mount+0xbe/0x150 [ 387.974532] ? do_syscall_64+0x1b9/0x820 [ 387.974550] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 387.974575] ? find_held_lock+0x36/0x1c0 [ 387.974617] ? perf_trace_sched_process_exec+0x860/0x860 [ 387.981690] binder: 12433:12441 Release 1 refcount change on invalid ref 1 ret -22 [ 387.983844] ? debug_mutex_init+0x2d/0x60 [ 387.983875] __should_failslab+0x124/0x180 [ 387.983897] should_failslab+0x9/0x14 [ 387.983915] kmem_cache_alloc_trace+0x2d7/0x750 [ 387.983981] ? rcu_read_lock_sched_held+0x14f/0x180 [ 387.984000] ? kmem_cache_alloc_trace+0x353/0x750 [ 387.992715] legacy_init_fs_context+0x187/0x230 [ 387.992735] ? vfs_dup_fs_context+0x400/0x400 [ 387.992752] vfs_new_fs_context+0x3f4/0x77c [ 387.992778] do_mount+0x1816/0x1ff0 [ 387.992795] ? lock_release+0xa10/0xa10 [ 387.992828] ? copy_mount_string+0x40/0x40 [ 387.992866] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 05:05:18 executing program 3 (fault-call:1 fault-nth:6): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 388.001314] ? _copy_from_user+0xdf/0x150 [ 388.001343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.001363] ? copy_mount_options+0x315/0x430 [ 388.001380] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.001404] ksys_mount+0x12d/0x140 [ 388.001425] __x64_sys_mount+0xbe/0x150 [ 388.001447] do_syscall_64+0x1b9/0x820 [ 388.001465] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 388.001484] ? syscall_return_slowpath+0x5e0/0x5e0 [ 388.001503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.009696] ? trace_hardirqs_on_caller+0x310/0x310 [ 388.009729] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 388.009748] ? prepare_exit_to_usermode+0x291/0x3b0 [ 388.009773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.009809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.009822] RIP: 0033:0x457569 [ 388.009839] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.009848] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.009864] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 388.009874] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 388.009884] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 388.009894] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 388.009903] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 388.122786] FAULT_INJECTION: forcing a failure. [ 388.122786] name failslab, interval 1, probability 0, space 0, times 0 [ 388.128538] CPU: 0 PID: 12450 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 388.150365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.150381] Call Trace: [ 388.160403] dump_stack+0x244/0x39d [ 388.160426] ? dump_stack_print_info.cold.1+0x20/0x20 [ 388.160457] should_fail.cold.4+0xa/0x17 [ 388.160478] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 388.160507] ? save_stack+0xa9/0xd0 [ 388.160526] ? kasan_kmalloc+0xc7/0xe0 [ 388.160542] ? kmem_cache_alloc_trace+0x152/0x750 05:05:18 executing program 3 (fault-call:1 fault-nth:7): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 388.160557] ? legacy_init_fs_context+0x187/0x230 [ 388.160575] ? vfs_new_fs_context+0x3f4/0x77c [ 388.170405] ? do_mount+0x1816/0x1ff0 [ 388.170421] ? ksys_mount+0x12d/0x140 [ 388.170438] ? __x64_sys_mount+0xbe/0x150 [ 388.170463] ? find_held_lock+0x36/0x1c0 [ 388.170506] ? perf_trace_sched_process_exec+0x860/0x860 [ 388.170531] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 388.170556] __should_failslab+0x124/0x180 [ 388.170583] should_failslab+0x9/0x14 [ 388.180413] kmem_cache_alloc_trace+0x2d7/0x750 [ 388.180432] ? legacy_init_fs_context+0x187/0x230 [ 388.180450] ? rcu_read_lock_sched_held+0x14f/0x180 [ 388.180468] ? kmem_cache_alloc_trace+0x353/0x750 [ 388.180484] ? rcu_read_lock_sched_held+0x14f/0x180 [ 388.180561] apparmor_fs_context_alloc+0x43/0xa0 [ 388.207143] security_fs_context_alloc+0x54/0xb0 [ 388.207168] vfs_new_fs_context+0x446/0x77c [ 388.207192] do_mount+0x1816/0x1ff0 [ 388.207210] ? lock_release+0xa10/0xa10 [ 388.221738] ? copy_mount_string+0x40/0x40 [ 388.221775] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.221806] ? _copy_from_user+0xdf/0x150 [ 388.221827] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.221848] ? copy_mount_options+0x315/0x430 [ 388.221865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.221887] ksys_mount+0x12d/0x140 [ 388.221908] __x64_sys_mount+0xbe/0x150 [ 388.236431] do_syscall_64+0x1b9/0x820 [ 388.236450] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 388.236471] ? syscall_return_slowpath+0x5e0/0x5e0 [ 388.236487] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.236508] ? trace_hardirqs_on_caller+0x310/0x310 [ 388.236526] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 388.236545] ? prepare_exit_to_usermode+0x291/0x3b0 [ 388.236567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.236591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.255023] RIP: 0033:0x457569 [ 388.255042] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.255051] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.255068] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 388.255078] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 388.255088] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 388.255098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 388.255108] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 388.316367] FAULT_INJECTION: forcing a failure. [ 388.316367] name failslab, interval 1, probability 0, space 0, times 0 [ 388.376368] binder: send failed reply for transaction 49 to 12427:12438 [ 388.563553] CPU: 1 PID: 12454 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 388.572144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.572152] Call Trace: [ 388.572176] dump_stack+0x244/0x39d [ 388.572197] ? dump_stack_print_info.cold.1+0x20/0x20 [ 388.572225] should_fail.cold.4+0xa/0x17 [ 388.584167] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 388.584276] ? kernel_text_address+0x79/0xf0 [ 388.584294] ? __kernel_text_address+0xd/0x40 [ 388.597187] ? unwind_get_return_address+0x61/0xa0 [ 388.597244] ? __save_stack_trace+0x8d/0xf0 [ 388.606706] ? find_held_lock+0x36/0x1c0 [ 388.616122] ? perf_trace_sched_process_exec+0x860/0x860 [ 388.624484] ? find_held_lock+0x36/0x1c0 [ 388.624510] __should_failslab+0x124/0x180 [ 388.624531] should_failslab+0x9/0x14 [ 388.634030] __kmalloc_track_caller+0x2d1/0x760 [ 388.634049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.634066] ? check_preemption_disabled+0x48/0x280 05:05:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:18 executing program 1: timer_create(0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={&(0x7f00000000c0), &(0x7f0000000140)}}, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) [ 388.634088] ? apparmor_fs_context_parse_param+0x1d9/0x490 [ 388.642098] krealloc+0x65/0xb0 [ 388.642119] apparmor_fs_context_parse_param+0x1d9/0x490 [ 388.642148] security_fs_context_parse_param+0x5a/0xb0 [ 388.642179] vfs_parse_fs_param+0x1ea/0x4d0 [ 388.642197] vfs_parse_fs_string+0x1d5/0x2b0 [ 388.642212] ? vfs_parse_fs_param+0x4d0/0x4d0 [ 388.642224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.642243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.642274] do_mount+0x773/0x1ff0 [ 388.642289] ? lock_release+0xa10/0xa10 [ 388.642308] ? copy_mount_string+0x40/0x40 [ 388.642336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.642350] ? _copy_from_user+0xdf/0x150 [ 388.642370] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.642385] ? copy_mount_options+0x315/0x430 [ 388.642400] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.642419] ksys_mount+0x12d/0x140 [ 388.642437] __x64_sys_mount+0xbe/0x150 [ 388.642457] do_syscall_64+0x1b9/0x820 [ 388.642478] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 388.652664] ? syscall_return_slowpath+0x5e0/0x5e0 [ 388.652681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.652701] ? trace_hardirqs_on_caller+0x310/0x310 [ 388.652717] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 388.652734] ? prepare_exit_to_usermode+0x291/0x3b0 [ 388.652763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.652791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.663399] RIP: 0033:0x457569 [ 388.663417] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.663426] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.663442] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 388.663451] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 388.663461] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 388.663471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 388.663480] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 388.818583] binder: 12458:12463 transaction failed 29189/-22, size 24-8 line 2834 [ 388.855633] binder: 12458:12460 BC_INCREFS_DONE u0000000000000000 no match [ 388.882886] binder: 12458:12460 Release 1 refcount change on invalid ref 1 ret -22 [ 388.890774] binder: send failed reply for transaction 52 to 12433:12441 [ 388.896263] binder: 12458:12460 BC_ACQUIRE_DONE u0000000000000000 no match [ 388.905006] binder: undelivered TRANSACTION_ERROR: 29189 05:05:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 05:05:18 executing program 3 (fault-call:1 fault-nth:8): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 388.923641] binder: undelivered TRANSACTION_ERROR: 29189 05:05:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000005c0)="0a5c2d0240316285717070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) unshare(0x8000400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) [ 388.982167] FAULT_INJECTION: forcing a failure. [ 388.982167] name failslab, interval 1, probability 0, space 0, times 0 [ 389.037351] CPU: 0 PID: 12472 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 389.045983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.055349] Call Trace: [ 389.057963] dump_stack+0x244/0x39d [ 389.061601] ? dump_stack_print_info.cold.1+0x20/0x20 [ 389.066792] should_fail.cold.4+0xa/0x17 [ 389.070867] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 389.075986] ? graph_lock+0x270/0x270 [ 389.079803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.085348] ? check_preemption_disabled+0x48/0x280 [ 389.085379] ? mark_held_locks+0x130/0x130 [ 389.085408] ? find_held_lock+0x36/0x1c0 [ 389.085449] ? perf_trace_sched_process_exec+0x860/0x860 [ 389.094763] ? perf_trace_lock+0x7a0/0x7a0 [ 389.108489] __should_failslab+0x124/0x180 [ 389.112750] should_failslab+0x9/0x14 [ 389.115905] binder: BINDER_SET_CONTEXT_MGR already set [ 389.116566] kmem_cache_alloc_trace+0x2d7/0x750 [ 389.116588] ? __save_stack_trace+0x8d/0xf0 [ 389.116673] alloc_super+0xd4/0xb40 05:05:19 executing program 1: timer_create(0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={&(0x7f00000000c0), &(0x7f0000000140)}}, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) 05:05:19 executing program 2: r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x40) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000480)={r2, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r5+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 389.116696] ? destroy_unused_super.part.10+0x110/0x110 [ 389.122417] binder: 12474:12478 ioctl 40046207 0 returned -16 [ 389.126628] ? sget_userns+0x17c/0x850 [ 389.126650] ? lock_downgrade+0x900/0x900 [ 389.126678] ? kasan_check_read+0x11/0x20 [ 389.126752] ? do_raw_spin_unlock+0xa7/0x330 [ 389.126770] ? do_raw_spin_trylock+0x270/0x270 [ 389.142079] binder: 12474:12478 Release 1 refcount change on invalid ref 1 ret -22 [ 389.145947] ? find_held_lock+0x36/0x1c0 [ 389.145977] sget_userns+0x278/0x850 [ 389.145994] ? get_anon_bdev+0xc0/0xc0 [ 389.146016] ? vfs_get_super+0x270/0x270 [ 389.146035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.146055] ? check_preemption_disabled+0x48/0x280 [ 389.201153] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 389.206761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.212303] ? ns_capable_common+0x13f/0x170 [ 389.216725] ? get_anon_bdev+0xc0/0xc0 [ 389.220611] sget+0x10b/0x150 [ 389.223781] ? devpts_ptmx_path+0x140/0x140 [ 389.228096] mount_nodev+0x38/0x120 [ 389.231725] devpts_mount+0x34/0x40 [ 389.235361] ? devpts_kill_sb+0x70/0x70 [ 389.239332] legacy_get_tree+0x12f/0x260 [ 389.243392] ? security_fs_context_validate+0x80/0xa0 [ 389.248576] vfs_get_tree+0x1cb/0x5c0 [ 389.252368] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 389.257128] do_mount+0x82a/0x1ff0 [ 389.260659] ? lock_release+0xa10/0xa10 [ 389.264632] ? copy_mount_string+0x40/0x40 [ 389.268873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.274401] ? _copy_from_user+0xdf/0x150 [ 389.278548] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.284079] ? copy_mount_options+0x315/0x430 [ 389.288563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.294097] ksys_mount+0x12d/0x140 [ 389.297730] __x64_sys_mount+0xbe/0x150 [ 389.301711] do_syscall_64+0x1b9/0x820 [ 389.305589] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 389.310948] ? syscall_return_slowpath+0x5e0/0x5e0 [ 389.315864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.320712] ? trace_hardirqs_on_caller+0x310/0x310 [ 389.325726] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 389.330740] ? prepare_exit_to_usermode+0x291/0x3b0 [ 389.335750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.340590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.345786] RIP: 0033:0x457569 [ 389.348969] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.367859] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.375553] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 05:05:19 executing program 3 (fault-call:1 fault-nth:9): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 389.382810] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 389.390070] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 389.397347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 389.404606] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 389.515771] FAULT_INJECTION: forcing a failure. [ 389.515771] name failslab, interval 1, probability 0, space 0, times 0 [ 389.539682] CPU: 1 PID: 12489 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 389.548302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.557678] Call Trace: [ 389.560285] dump_stack+0x244/0x39d [ 389.563937] ? dump_stack_print_info.cold.1+0x20/0x20 [ 389.569144] ? __switch_to_asm+0x34/0x70 [ 389.573223] ? __switch_to_asm+0x40/0x70 [ 389.577312] should_fail.cold.4+0xa/0x17 [ 389.581392] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 389.586504] ? __sched_text_start+0x8/0x8 [ 389.590680] ? mark_held_locks+0xc7/0x130 [ 389.594843] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 389.599618] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 389.604217] ? retint_kernel+0x2d/0x2d [ 389.608121] ? trace_hardirqs_on_caller+0xc0/0x310 [ 389.613066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 389.617840] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 389.623306] ? retint_kernel+0x1b/0x2d [ 389.627211] ? trace_hardirqs_on+0x310/0x310 [ 389.631630] ? find_held_lock+0x36/0x1c0 [ 389.635720] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 389.640498] ? retint_kernel+0x2d/0x2d [ 389.644410] ? __should_failslab+0x48/0x180 [ 389.648772] __should_failslab+0x124/0x180 [ 389.653028] should_failslab+0x9/0x14 [ 389.656838] __kmalloc+0x2e0/0x760 [ 389.660454] ? __init_waitqueue_head+0x9e/0x150 [ 389.665135] ? init_wait_entry+0x1c0/0x1c0 [ 389.669378] ? prealloc_shrinker+0x172/0x340 [ 389.673803] prealloc_shrinker+0x172/0x340 [ 389.678057] alloc_super+0x8db/0xb40 [ 389.682228] ? destroy_unused_super.part.10+0x110/0x110 [ 389.687601] ? sget_userns+0x17c/0x850 [ 389.691501] ? lock_downgrade+0x900/0x900 [ 389.695675] ? kasan_check_read+0x11/0x20 [ 389.699840] ? do_raw_spin_trylock+0x270/0x270 [ 389.704447] ? find_held_lock+0x36/0x1c0 [ 389.708532] sget_userns+0x278/0x850 [ 389.712261] ? get_anon_bdev+0xc0/0xc0 [ 389.716164] ? vfs_get_super+0x270/0x270 [ 389.720252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.725805] ? check_preemption_disabled+0x48/0x280 [ 389.730844] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 389.736422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.741974] ? ns_capable_common+0x13f/0x170 [ 389.746404] ? get_anon_bdev+0xc0/0xc0 [ 389.750300] sget+0x10b/0x150 [ 389.753419] ? devpts_ptmx_path+0x140/0x140 [ 389.757751] mount_nodev+0x38/0x120 [ 389.761395] devpts_mount+0x34/0x40 [ 389.765029] ? devpts_kill_sb+0x70/0x70 [ 389.769018] legacy_get_tree+0x12f/0x260 [ 389.773095] ? security_fs_context_validate+0x80/0xa0 [ 389.778738] vfs_get_tree+0x1cb/0x5c0 [ 389.782552] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 389.787328] do_mount+0x82a/0x1ff0 [ 389.790882] ? lock_release+0xa10/0xa10 [ 389.794877] ? copy_mount_string+0x40/0x40 [ 389.799141] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.804694] ? _copy_from_user+0xdf/0x150 [ 389.808861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.814419] ? copy_mount_options+0x315/0x430 [ 389.818931] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.824483] ksys_mount+0x12d/0x140 [ 389.828128] __x64_sys_mount+0xbe/0x150 [ 389.832115] do_syscall_64+0x1b9/0x820 [ 389.836014] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 389.841398] ? syscall_return_slowpath+0x5e0/0x5e0 [ 389.846338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.851198] ? trace_hardirqs_on_caller+0x310/0x310 [ 389.856228] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 389.861262] ? prepare_exit_to_usermode+0x291/0x3b0 [ 389.866293] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.871170] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.876377] RIP: 0033:0x457569 [ 389.879587] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.898495] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.906213] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 389.913495] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 389.920776] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 389.928054] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 389.935330] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:19 executing program 1: timer_create(0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={&(0x7f00000000c0), &(0x7f0000000140)}}, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) 05:05:19 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 05:05:19 executing program 3 (fault-call:1 fault-nth:10): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 389.962577] binder: release 12474:12478 transaction 57 out, still active [ 390.006614] binder: send failed reply for transaction 57, target dead 05:05:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x300000000000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000005c0)={0x200}, 0x1) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x4, 0x0) request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='wlan1\x00', 0xfffffffffffffffe) [ 390.049891] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.053432] FAULT_INJECTION: forcing a failure. [ 390.053432] name failslab, interval 1, probability 0, space 0, times 0 [ 390.095723] CPU: 0 PID: 12498 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 390.104347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.104469] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.113714] Call Trace: [ 390.113742] dump_stack+0x244/0x39d [ 390.113763] ? dump_stack_print_info.cold.1+0x20/0x20 [ 390.113792] should_fail.cold.4+0xa/0x17 [ 390.113813] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 390.124590] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.124797] ? perf_trace_lock+0x7a0/0x7a0 [ 390.129449] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.133610] ? graph_lock+0x270/0x270 [ 390.133633] ? graph_lock+0x270/0x270 [ 390.133658] ? radix_tree_iter_tag_clear+0x90/0x90 [ 390.138343] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.142800] ? find_held_lock+0x36/0x1c0 [ 390.142824] ? __lock_is_held+0xb5/0x140 [ 390.142857] ? perf_trace_sched_process_exec+0x860/0x860 [ 390.142885] __should_failslab+0x124/0x180 [ 390.202584] should_failslab+0x9/0x14 [ 390.206410] __kmalloc+0x2e0/0x760 [ 390.209978] ? __list_lru_init+0x151/0x840 [ 390.214216] __list_lru_init+0x151/0x840 [ 390.218266] ? list_lru_destroy+0x500/0x500 [ 390.222578] ? up_write+0x7b/0x220 [ 390.226107] ? down_write_nested+0x130/0x130 [ 390.230510] ? down_read+0x120/0x120 [ 390.234216] ? init_wait_entry+0x1c0/0x1c0 [ 390.238455] ? prealloc_shrinker+0x172/0x340 [ 390.242885] alloc_super+0x907/0xb40 [ 390.246596] ? destroy_unused_super.part.10+0x110/0x110 [ 390.251970] ? sget_userns+0x17c/0x850 [ 390.255849] ? lock_downgrade+0x900/0x900 [ 390.260004] ? kasan_check_read+0x11/0x20 [ 390.264145] ? do_raw_spin_trylock+0x270/0x270 [ 390.268719] ? find_held_lock+0x36/0x1c0 [ 390.272791] sget_userns+0x278/0x850 [ 390.276503] ? get_anon_bdev+0xc0/0xc0 [ 390.280382] ? vfs_get_super+0x270/0x270 [ 390.284432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.289962] ? check_preemption_disabled+0x48/0x280 [ 390.294970] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 390.300511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.306035] ? ns_capable_common+0x13f/0x170 [ 390.310432] ? get_anon_bdev+0xc0/0xc0 [ 390.314303] sget+0x10b/0x150 [ 390.317396] ? devpts_ptmx_path+0x140/0x140 [ 390.321704] mount_nodev+0x38/0x120 [ 390.325320] devpts_mount+0x34/0x40 [ 390.328945] ? devpts_kill_sb+0x70/0x70 [ 390.332927] legacy_get_tree+0x12f/0x260 [ 390.336983] ? security_fs_context_validate+0x80/0xa0 [ 390.342169] vfs_get_tree+0x1cb/0x5c0 [ 390.345966] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 390.350709] do_mount+0x82a/0x1ff0 [ 390.354240] ? lock_release+0xa10/0xa10 [ 390.358210] ? copy_mount_string+0x40/0x40 [ 390.362447] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.367992] ? _copy_from_user+0xdf/0x150 [ 390.372136] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.377661] ? copy_mount_options+0x315/0x430 [ 390.382147] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.387679] ksys_mount+0x12d/0x140 [ 390.391298] __x64_sys_mount+0xbe/0x150 [ 390.395262] do_syscall_64+0x1b9/0x820 [ 390.399144] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 390.404496] ? syscall_return_slowpath+0x5e0/0x5e0 [ 390.409425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.414265] ? trace_hardirqs_on_caller+0x310/0x310 [ 390.419268] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 390.424274] ? prepare_exit_to_usermode+0x291/0x3b0 [ 390.429296] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.434140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 390.439322] RIP: 0033:0x457569 [ 390.442517] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 390.461418] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 390.469121] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 390.476385] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 390.483639] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 05:05:20 executing program 1: timer_create(0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={&(0x7f00000000c0), &(0x7f0000000140)}}, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) 05:05:20 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 05:05:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000005c0)="0a5c2d0240316285717070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) unshare(0x8000400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) [ 390.490896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 390.498148] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:20 executing program 3 (fault-call:1 fault-nth:11): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:20 executing program 2: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)="07000084f3e4017402dac83300f7542df8", 0x11, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}, &(0x7f00000001c0)}) [ 390.566434] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.604200] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 05:05:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 390.637258] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.665817] FAULT_INJECTION: forcing a failure. [ 390.665817] name failslab, interval 1, probability 0, space 0, times 0 [ 390.702777] CPU: 1 PID: 12522 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 390.711406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.720783] Call Trace: [ 390.722927] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 390.723386] dump_stack+0x244/0x39d [ 390.723410] ? dump_stack_print_info.cold.1+0x20/0x20 [ 390.723440] should_fail.cold.4+0xa/0x17 [ 390.746605] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 390.751823] ? graph_lock+0x270/0x270 [ 390.755636] ? save_stack+0xa9/0xd0 [ 390.759275] ? save_stack+0x43/0xd0 [ 390.762917] ? kasan_kmalloc+0xc7/0xe0 [ 390.766822] ? find_held_lock+0x36/0x1c0 [ 390.770900] ? __lock_is_held+0xb5/0x140 [ 390.774987] ? perf_trace_sched_process_exec+0x860/0x860 [ 390.780449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.786000] ? check_preemption_disabled+0x48/0x280 [ 390.791038] __should_failslab+0x124/0x180 05:05:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 05:05:20 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) [ 390.794649] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 390.795292] should_failslab+0x9/0x14 [ 390.809394] kmem_cache_alloc_node_trace+0x270/0x740 [ 390.814523] __kmalloc_node+0x3c/0x70 [ 390.818340] kvmalloc_node+0x65/0xf0 [ 390.822071] __list_lru_init+0x5d9/0x840 [ 390.826150] ? list_lru_destroy+0x500/0x500 [ 390.830484] ? up_write+0x7b/0x220 [ 390.834035] ? down_write_nested+0x130/0x130 [ 390.838458] ? down_read+0x120/0x120 [ 390.842178] ? init_wait_entry+0x1c0/0x1c0 [ 390.842193] ? prealloc_shrinker+0x172/0x340 05:05:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 390.842222] alloc_super+0x907/0xb40 [ 390.842243] ? destroy_unused_super.part.10+0x110/0x110 [ 390.842255] ? sget_userns+0x17c/0x850 [ 390.842272] ? lock_downgrade+0x900/0x900 [ 390.842296] ? kasan_check_read+0x11/0x20 [ 390.842314] ? do_raw_spin_trylock+0x270/0x270 [ 390.850937] ? find_held_lock+0x36/0x1c0 [ 390.880778] sget_userns+0x278/0x850 [ 390.884510] ? get_anon_bdev+0xc0/0xc0 [ 390.885399] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.888410] ? vfs_get_super+0x270/0x270 05:05:20 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2002, 0x0, 0x20011, r0, 0x0) [ 390.888431] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.888449] ? check_preemption_disabled+0x48/0x280 [ 390.888473] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 390.906776] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 390.911498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.911514] ? ns_capable_common+0x13f/0x170 [ 390.911535] ? get_anon_bdev+0xc0/0xc0 [ 390.911546] sget+0x10b/0x150 [ 390.911573] ? devpts_ptmx_path+0x140/0x140 [ 390.941206] mount_nodev+0x38/0x120 [ 390.949086] devpts_mount+0x34/0x40 [ 390.954360] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 390.956302] ? devpts_kill_sb+0x70/0x70 [ 390.956321] legacy_get_tree+0x12f/0x260 [ 390.956344] ? security_fs_context_validate+0x80/0xa0 [ 390.977942] vfs_get_tree+0x1cb/0x5c0 [ 390.981762] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 390.986545] do_mount+0x82a/0x1ff0 [ 390.990112] ? lock_release+0xa10/0xa10 [ 390.994109] ? copy_mount_string+0x40/0x40 [ 390.998377] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 05:05:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 391.003930] ? _copy_from_user+0xdf/0x150 [ 391.008106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.013787] ? copy_mount_options+0x315/0x430 [ 391.018301] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.023860] ksys_mount+0x12d/0x140 [ 391.027509] __x64_sys_mount+0xbe/0x150 [ 391.031502] do_syscall_64+0x1b9/0x820 [ 391.035397] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 391.040778] ? syscall_return_slowpath+0x5e0/0x5e0 [ 391.045722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.050600] ? trace_hardirqs_on_caller+0x310/0x310 [ 391.055626] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 391.060646] ? prepare_exit_to_usermode+0x291/0x3b0 [ 391.060669] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.060698] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.075717] RIP: 0033:0x457569 [ 391.078925] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:05:21 executing program 4: r0 = socket(0x10, 0x200000000080002, 0x0) connect$netlink(r0, &(0x7f00000000c0), 0x9) 05:05:21 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) [ 391.097844] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 391.105573] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 391.112867] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 391.120150] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 391.127430] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 391.131996] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 391.134703] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:21 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2002, 0x0, 0x20011, r0, 0x0) 05:05:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000005c0)="0a5c2d0240316285717070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) unshare(0x8000400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) 05:05:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0x740c42f0cf1fbb3a}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x500000000000000) 05:05:21 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x0, './file2\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0xfffffcfb) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) recvfrom$llc(r1, &(0x7f00000004c0)=""/240, 0xf0, 0x10001, &(0x7f0000000640)={0x1a, 0x302, 0x3f, 0x9, 0x0, 0x3, @local}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x3}, 0x28, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) gettid() mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000440)=0x84) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) signalfd(r0, &(0x7f00000001c0)={0xfffd}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7fffffff, 0x9, 0x9, 0x76, r3}, &(0x7f0000000780)=0x10) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/149) 05:05:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x5}]}}}]}, 0x3c}}, 0x0) 05:05:21 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2002, 0x0, 0x20011, r0, 0x0) 05:05:21 executing program 3 (fault-call:1 fault-nth:12): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 391.464709] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 391.478723] FAULT_INJECTION: forcing a failure. [ 391.478723] name failslab, interval 1, probability 0, space 0, times 0 [ 391.503256] CPU: 0 PID: 12565 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 391.511870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.521231] Call Trace: [ 391.523838] dump_stack+0x244/0x39d [ 391.527495] ? dump_stack_print_info.cold.1+0x20/0x20 [ 391.532727] should_fail.cold.4+0xa/0x17 [ 391.536809] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 391.541928] ? kernel_text_address+0x79/0xf0 [ 391.546353] ? unwind_get_return_address+0x61/0xa0 [ 391.551296] ? __save_stack_trace+0x8d/0xf0 [ 391.555628] ? graph_lock+0x270/0x270 [ 391.559453] ? find_held_lock+0x36/0x1c0 [ 391.563547] ? __lock_is_held+0xb5/0x140 [ 391.567637] ? perf_trace_sched_process_exec+0x860/0x860 [ 391.573102] ? check_preemption_disabled+0x48/0x280 [ 391.578149] __should_failslab+0x124/0x180 [ 391.582397] should_failslab+0x9/0x14 [ 391.586206] kmem_cache_alloc_trace+0x2d7/0x750 [ 391.590885] ? __kmalloc_node+0x3c/0x70 [ 391.594866] ? __kmalloc_node+0x3c/0x70 [ 391.598853] ? rcu_read_lock_sched_held+0x14f/0x180 [ 391.603889] __memcg_init_list_lru_node+0x185/0x2d0 [ 391.608918] ? kvfree_rcu+0x20/0x20 05:05:21 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2002, 0x0, 0x20011, r0, 0x0) 05:05:21 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x0, './file2\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0xfffffcfb) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) recvfrom$llc(r1, &(0x7f00000004c0)=""/240, 0xf0, 0x10001, &(0x7f0000000640)={0x1a, 0x302, 0x3f, 0x9, 0x0, 0x3, @local}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x3}, 0x28, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) gettid() mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000440)=0x84) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) signalfd(r0, &(0x7f00000001c0)={0xfffd}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7fffffff, 0x9, 0x9, 0x76, r3}, &(0x7f0000000780)=0x10) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/149) [ 391.612557] ? __kmalloc_node+0x50/0x70 [ 391.616563] __list_lru_init+0x4d6/0x840 [ 391.620635] ? list_lru_destroy+0x500/0x500 [ 391.624973] ? up_write+0x7b/0x220 [ 391.628537] ? down_write_nested+0x130/0x130 [ 391.632952] ? down_read+0x120/0x120 [ 391.636679] ? init_wait_entry+0x1c0/0x1c0 [ 391.640919] ? prealloc_shrinker+0x172/0x340 [ 391.645696] alloc_super+0x907/0xb40 [ 391.649430] ? destroy_unused_super.part.10+0x110/0x110 [ 391.654795] ? sget_userns+0x17c/0x850 [ 391.658699] ? lock_downgrade+0x900/0x900 [ 391.662864] ? kasan_check_read+0x11/0x20 [ 391.667031] ? do_raw_spin_trylock+0x270/0x270 [ 391.671621] ? find_held_lock+0x36/0x1c0 [ 391.675702] sget_userns+0x278/0x850 [ 391.679424] ? get_anon_bdev+0xc0/0xc0 [ 391.683324] ? vfs_get_super+0x270/0x270 [ 391.687394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.692950] ? check_preemption_disabled+0x48/0x280 [ 391.697988] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 391.703578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.709119] ? ns_capable_common+0x13f/0x170 05:05:21 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x0, './file2\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0xfffffcfb) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) recvfrom$llc(r1, &(0x7f00000004c0)=""/240, 0xf0, 0x10001, &(0x7f0000000640)={0x1a, 0x302, 0x3f, 0x9, 0x0, 0x3, @local}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x3}, 0x28, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) gettid() mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000440)=0x84) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) signalfd(r0, &(0x7f00000001c0)={0xfffd}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7fffffff, 0x9, 0x9, 0x76, r3}, &(0x7f0000000780)=0x10) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/149) [ 391.709140] ? get_anon_bdev+0xc0/0xc0 [ 391.709155] sget+0x10b/0x150 [ 391.717443] ? devpts_ptmx_path+0x140/0x140 [ 391.724853] mount_nodev+0x38/0x120 [ 391.728514] devpts_mount+0x34/0x40 [ 391.732153] ? devpts_kill_sb+0x70/0x70 [ 391.736142] legacy_get_tree+0x12f/0x260 [ 391.740217] ? security_fs_context_validate+0x80/0xa0 [ 391.745419] vfs_get_tree+0x1cb/0x5c0 [ 391.749232] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 391.754002] do_mount+0x82a/0x1ff0 [ 391.757556] ? lock_release+0xa10/0xa10 [ 391.761552] ? copy_mount_string+0x40/0x40 [ 391.765817] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.771369] ? _copy_from_user+0xdf/0x150 [ 391.776039] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.781593] ? copy_mount_options+0x315/0x430 [ 391.786100] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.791653] ksys_mount+0x12d/0x140 [ 391.795298] __x64_sys_mount+0xbe/0x150 [ 391.799289] do_syscall_64+0x1b9/0x820 [ 391.803188] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 391.808568] ? syscall_return_slowpath+0x5e0/0x5e0 05:05:21 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x0, './file2\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0xfffffcfb) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) recvfrom$llc(r1, &(0x7f00000004c0)=""/240, 0xf0, 0x10001, &(0x7f0000000640)={0x1a, 0x302, 0x3f, 0x9, 0x0, 0x3, @local}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x3}, 0x28, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) gettid() mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000440)=0x84) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) signalfd(r0, &(0x7f00000001c0)={0xfffd}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7fffffff, 0x9, 0x9, 0x76, r3}, &(0x7f0000000780)=0x10) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/149) [ 391.813521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.818379] ? trace_hardirqs_on_caller+0x310/0x310 [ 391.823416] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 391.828448] ? prepare_exit_to_usermode+0x291/0x3b0 [ 391.833495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.838371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.843572] RIP: 0033:0x457569 [ 391.846776] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:05:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0x740c42f0cf1fbb3a}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x500000000000000) 05:05:21 executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x4) listen(r1, 0x0) accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0) [ 391.865683] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 391.873405] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 391.880684] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 391.887961] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 391.895237] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 391.902524] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0x740c42f0cf1fbb3a}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x500000000000000) 05:05:22 executing program 3 (fault-call:1 fault-nth:13): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:22 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffff, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x200040323}) 05:05:22 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6288, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x2}) [ 392.353940] FAULT_INJECTION: forcing a failure. [ 392.353940] name failslab, interval 1, probability 0, space 0, times 0 [ 392.380762] CPU: 1 PID: 12598 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 392.389369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.398733] Call Trace: [ 392.401332] dump_stack+0x244/0x39d [ 392.404981] ? dump_stack_print_info.cold.1+0x20/0x20 [ 392.410199] should_fail.cold.4+0xa/0x17 [ 392.414278] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 392.419405] ? save_stack+0x43/0xd0 [ 392.423044] ? kasan_kmalloc+0xc7/0xe0 [ 392.426940] ? kmem_cache_alloc_trace+0x152/0x750 [ 392.431792] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 392.436997] ? __list_lru_init+0x4d6/0x840 [ 392.441239] ? graph_lock+0x270/0x270 [ 392.445045] ? mount_nodev+0x38/0x120 [ 392.448848] ? devpts_mount+0x34/0x40 [ 392.452659] ? legacy_get_tree+0x12f/0x260 [ 392.456897] ? vfs_get_tree+0x1cb/0x5c0 [ 392.460876] ? do_mount+0x82a/0x1ff0 [ 392.464594] ? ksys_mount+0x12d/0x140 [ 392.468413] ? find_held_lock+0x36/0x1c0 [ 392.472494] ? __lock_is_held+0xb5/0x140 [ 392.476584] ? perf_trace_sched_process_exec+0x860/0x860 [ 392.482055] __should_failslab+0x124/0x180 [ 392.486316] should_failslab+0x9/0x14 [ 392.490127] kmem_cache_alloc_trace+0x2d7/0x750 [ 392.494815] ? __kmalloc_node+0x3c/0x70 [ 392.498792] ? __kmalloc_node+0x3c/0x70 [ 392.502782] ? rcu_read_lock_sched_held+0x14f/0x180 [ 392.507814] __memcg_init_list_lru_node+0x185/0x2d0 [ 392.512840] ? kvfree_rcu+0x20/0x20 [ 392.516478] ? __kmalloc_node+0x50/0x70 [ 392.520470] __list_lru_init+0x4d6/0x840 [ 392.524545] ? list_lru_destroy+0x500/0x500 [ 392.528879] ? up_write+0x7b/0x220 [ 392.532433] ? down_write_nested+0x130/0x130 [ 392.536845] ? down_read+0x120/0x120 [ 392.540568] ? init_wait_entry+0x1c0/0x1c0 [ 392.544812] ? prealloc_shrinker+0x172/0x340 [ 392.549244] alloc_super+0x907/0xb40 [ 392.552983] ? destroy_unused_super.part.10+0x110/0x110 [ 392.558354] ? sget_userns+0x17c/0x850 [ 392.562250] ? lock_downgrade+0x900/0x900 [ 392.566417] ? kasan_check_read+0x11/0x20 [ 392.570582] ? do_raw_spin_trylock+0x270/0x270 [ 392.575172] ? find_held_lock+0x36/0x1c0 [ 392.579254] sget_userns+0x278/0x850 [ 392.582972] ? get_anon_bdev+0xc0/0xc0 [ 392.586879] ? vfs_get_super+0x270/0x270 [ 392.590956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.596498] ? check_preemption_disabled+0x48/0x280 [ 392.601535] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 392.607108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.612656] ? ns_capable_common+0x13f/0x170 [ 392.617073] ? get_anon_bdev+0xc0/0xc0 [ 392.620968] sget+0x10b/0x150 [ 392.624101] ? devpts_ptmx_path+0x140/0x140 [ 392.628439] mount_nodev+0x38/0x120 [ 392.632077] devpts_mount+0x34/0x40 [ 392.635714] ? devpts_kill_sb+0x70/0x70 [ 392.639697] legacy_get_tree+0x12f/0x260 [ 392.643766] ? security_fs_context_validate+0x80/0xa0 [ 392.648965] vfs_get_tree+0x1cb/0x5c0 [ 392.652779] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 392.657560] do_mount+0x82a/0x1ff0 [ 392.661113] ? lock_release+0xa10/0xa10 [ 392.665100] ? copy_mount_string+0x40/0x40 [ 392.669365] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 392.674907] ? _copy_from_user+0xdf/0x150 [ 392.679071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 392.684620] ? copy_mount_options+0x315/0x430 [ 392.689126] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 392.694664] ksys_mount+0x12d/0x140 [ 392.698280] __x64_sys_mount+0xbe/0x150 [ 392.702246] do_syscall_64+0x1b9/0x820 [ 392.706121] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 392.711487] ? syscall_return_slowpath+0x5e0/0x5e0 [ 392.716424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.721257] ? trace_hardirqs_on_caller+0x310/0x310 [ 392.726263] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 392.731269] ? prepare_exit_to_usermode+0x291/0x3b0 [ 392.736277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.741162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.746337] RIP: 0033:0x457569 [ 392.749520] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.768425] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.776133] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 392.783388] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 392.790665] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 392.797928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 05:05:22 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x12) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x2d}, 0x14) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 392.805194] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 392.817682] vhci_hcd: invalid port number 0 05:05:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0x740c42f0cf1fbb3a}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x500000000000000) 05:05:22 executing program 3 (fault-call:1 fault-nth:14): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 392.898208] vhci_hcd: invalid port number 0 [ 392.957705] FAULT_INJECTION: forcing a failure. [ 392.957705] name failslab, interval 1, probability 0, space 0, times 0 [ 392.969693] CPU: 1 PID: 12608 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 392.978282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.987641] Call Trace: [ 392.990244] dump_stack+0x244/0x39d [ 392.993888] ? dump_stack_print_info.cold.1+0x20/0x20 [ 392.999110] should_fail.cold.4+0xa/0x17 [ 393.003191] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 393.008317] ? save_stack+0x43/0xd0 [ 393.011954] ? kasan_kmalloc+0xc7/0xe0 [ 393.015848] ? kmem_cache_alloc_trace+0x152/0x750 [ 393.020694] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 393.025888] ? __list_lru_init+0x4d6/0x840 [ 393.030133] ? graph_lock+0x270/0x270 [ 393.034352] ? mount_nodev+0x38/0x120 [ 393.038162] ? devpts_mount+0x34/0x40 [ 393.041974] ? legacy_get_tree+0x12f/0x260 [ 393.046210] ? vfs_get_tree+0x1cb/0x5c0 [ 393.050193] ? do_mount+0x82a/0x1ff0 [ 393.053919] ? ksys_mount+0x12d/0x140 05:05:22 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x0, './file2\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0xfffffcfb) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) recvfrom$llc(r1, &(0x7f00000004c0)=""/240, 0xf0, 0x10001, &(0x7f0000000640)={0x1a, 0x302, 0x3f, 0x9, 0x0, 0x3, @local}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x3}, 0x28, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) gettid() mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000440)=0x84) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) signalfd(r0, &(0x7f00000001c0)={0xfffd}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7fffffff, 0x9, 0x9, 0x76, r3}, &(0x7f0000000780)=0x10) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/149) [ 393.057737] ? find_held_lock+0x36/0x1c0 [ 393.061812] ? __lock_is_held+0xb5/0x140 [ 393.065903] ? perf_trace_sched_process_exec+0x860/0x860 [ 393.071388] __should_failslab+0x124/0x180 [ 393.075634] should_failslab+0x9/0x14 [ 393.079447] kmem_cache_alloc_trace+0x2d7/0x750 [ 393.084134] ? __kmalloc_node+0x3c/0x70 [ 393.088116] ? __kmalloc_node+0x3c/0x70 [ 393.092100] ? rcu_read_lock_sched_held+0x14f/0x180 [ 393.097132] __memcg_init_list_lru_node+0x185/0x2d0 [ 393.102161] ? kvfree_rcu+0x20/0x20 [ 393.105795] ? __kmalloc_node+0x50/0x70 [ 393.109786] __list_lru_init+0x4d6/0x840 [ 393.113860] ? list_lru_destroy+0x500/0x500 [ 393.118195] ? up_write+0x7b/0x220 [ 393.121742] ? down_write_nested+0x130/0x130 [ 393.126158] ? down_read+0x120/0x120 [ 393.129884] ? init_wait_entry+0x1c0/0x1c0 [ 393.134132] ? prealloc_shrinker+0x172/0x340 [ 393.138566] alloc_super+0x907/0xb40 [ 393.142296] ? destroy_unused_super.part.10+0x110/0x110 [ 393.147661] ? sget_userns+0x17c/0x850 [ 393.151558] ? lock_downgrade+0x900/0x900 [ 393.155731] ? kasan_check_read+0x11/0x20 [ 393.159904] ? do_raw_spin_trylock+0x270/0x270 [ 393.164495] ? find_held_lock+0x36/0x1c0 [ 393.168579] sget_userns+0x278/0x850 [ 393.172300] ? get_anon_bdev+0xc0/0xc0 [ 393.176204] ? vfs_get_super+0x270/0x270 [ 393.180274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.185819] ? check_preemption_disabled+0x48/0x280 [ 393.190855] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 393.196438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.201981] ? ns_capable_common+0x13f/0x170 [ 393.206406] ? get_anon_bdev+0xc0/0xc0 [ 393.210297] sget+0x10b/0x150 [ 393.213415] ? devpts_ptmx_path+0x140/0x140 [ 393.217742] mount_nodev+0x38/0x120 [ 393.221391] devpts_mount+0x34/0x40 [ 393.225030] ? devpts_kill_sb+0x70/0x70 [ 393.229022] legacy_get_tree+0x12f/0x260 [ 393.233104] ? security_fs_context_validate+0x80/0xa0 [ 393.238305] vfs_get_tree+0x1cb/0x5c0 [ 393.242121] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 393.246901] do_mount+0x82a/0x1ff0 [ 393.250453] ? lock_release+0xa10/0xa10 [ 393.254445] ? copy_mount_string+0x40/0x40 [ 393.258706] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 393.264253] ? _copy_from_user+0xdf/0x150 [ 393.270766] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 393.276317] ? copy_mount_options+0x315/0x430 [ 393.280825] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 393.286390] ksys_mount+0x12d/0x140 [ 393.290043] __x64_sys_mount+0xbe/0x150 [ 393.294037] do_syscall_64+0x1b9/0x820 [ 393.297935] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 393.303310] ? syscall_return_slowpath+0x5e0/0x5e0 [ 393.308247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.313104] ? trace_hardirqs_on_caller+0x310/0x310 [ 393.318134] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 393.323162] ? prepare_exit_to_usermode+0x291/0x3b0 [ 393.328197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.333067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.338264] RIP: 0033:0x457569 [ 393.341477] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.360394] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.368111] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 393.375390] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 393.382677] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 393.389952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 393.397222] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:23 executing program 3 (fault-call:1 fault-nth:15): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 393.421204] IPVS: ftp: loaded support on port[0] = 21 [ 393.504308] FAULT_INJECTION: forcing a failure. [ 393.504308] name failslab, interval 1, probability 0, space 0, times 0 [ 393.515840] CPU: 0 PID: 12615 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 393.524477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.533824] Call Trace: [ 393.536414] dump_stack+0x244/0x39d [ 393.540034] ? dump_stack_print_info.cold.1+0x20/0x20 [ 393.545261] should_fail.cold.4+0xa/0x17 [ 393.549314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 393.554421] ? save_stack+0x43/0xd0 [ 393.558046] ? kasan_kmalloc+0xc7/0xe0 [ 393.561929] ? kmem_cache_alloc_trace+0x152/0x750 [ 393.566761] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 393.571950] ? __list_lru_init+0x4d6/0x840 [ 393.576175] ? graph_lock+0x270/0x270 [ 393.579960] ? mount_nodev+0x38/0x120 [ 393.583748] ? devpts_mount+0x34/0x40 [ 393.587568] ? legacy_get_tree+0x12f/0x260 [ 393.591790] ? vfs_get_tree+0x1cb/0x5c0 [ 393.595752] ? do_mount+0x82a/0x1ff0 [ 393.599450] ? ksys_mount+0x12d/0x140 [ 393.603257] ? find_held_lock+0x36/0x1c0 [ 393.607322] ? __lock_is_held+0xb5/0x140 [ 393.611388] ? perf_trace_sched_process_exec+0x860/0x860 [ 393.616834] __should_failslab+0x124/0x180 [ 393.621062] should_failslab+0x9/0x14 [ 393.624849] kmem_cache_alloc_trace+0x2d7/0x750 [ 393.629506] ? __kmalloc_node+0x3c/0x70 [ 393.633464] ? __kmalloc_node+0x3c/0x70 [ 393.637439] ? rcu_read_lock_sched_held+0x14f/0x180 [ 393.642451] __memcg_init_list_lru_node+0x185/0x2d0 [ 393.647459] ? kvfree_rcu+0x20/0x20 [ 393.651086] ? __kmalloc_node+0x50/0x70 [ 393.655072] __list_lru_init+0x4d6/0x840 [ 393.659136] ? list_lru_destroy+0x500/0x500 [ 393.663446] ? up_write+0x7b/0x220 [ 393.666974] ? down_write_nested+0x130/0x130 [ 393.671375] ? down_read+0x120/0x120 [ 393.675092] ? init_wait_entry+0x1c0/0x1c0 [ 393.679326] ? prealloc_shrinker+0x172/0x340 [ 393.683757] alloc_super+0x907/0xb40 [ 393.687462] ? destroy_unused_super.part.10+0x110/0x110 [ 393.692806] ? sget_userns+0x17c/0x850 [ 393.696684] ? lock_downgrade+0x900/0x900 [ 393.700823] ? kasan_check_read+0x11/0x20 [ 393.704958] ? do_raw_spin_trylock+0x270/0x270 [ 393.709530] ? find_held_lock+0x36/0x1c0 [ 393.713596] sget_userns+0x278/0x850 [ 393.717297] ? get_anon_bdev+0xc0/0xc0 [ 393.721185] ? vfs_get_super+0x270/0x270 [ 393.725233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.730756] ? check_preemption_disabled+0x48/0x280 [ 393.735767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 393.741309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.746846] ? ns_capable_common+0x13f/0x170 [ 393.751244] ? get_anon_bdev+0xc0/0xc0 [ 393.755127] sget+0x10b/0x150 [ 393.758225] ? devpts_ptmx_path+0x140/0x140 [ 393.762531] mount_nodev+0x38/0x120 [ 393.766147] devpts_mount+0x34/0x40 [ 393.769759] ? devpts_kill_sb+0x70/0x70 [ 393.773720] legacy_get_tree+0x12f/0x260 [ 393.777768] ? security_fs_context_validate+0x80/0xa0 [ 393.782947] vfs_get_tree+0x1cb/0x5c0 [ 393.786735] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 393.791479] do_mount+0x82a/0x1ff0 [ 393.795005] ? lock_release+0xa10/0xa10 [ 393.798987] ? copy_mount_string+0x40/0x40 [ 393.803222] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 393.808748] ? _copy_from_user+0xdf/0x150 [ 393.812888] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 393.818411] ? copy_mount_options+0x315/0x430 [ 393.822892] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 393.828419] ksys_mount+0x12d/0x140 [ 393.832034] __x64_sys_mount+0xbe/0x150 [ 393.836000] do_syscall_64+0x1b9/0x820 [ 393.839877] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 393.845229] ? syscall_return_slowpath+0x5e0/0x5e0 [ 393.850145] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.854975] ? trace_hardirqs_on_caller+0x310/0x310 [ 393.859995] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 393.865017] ? prepare_exit_to_usermode+0x291/0x3b0 [ 393.870037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.874878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.880060] RIP: 0033:0x457569 [ 393.883244] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.902131] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.909827] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 393.917179] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 393.924440] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 393.931695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 393.938948] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:24 executing program 3 (fault-call:1 fault-nth:16): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) 05:05:24 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:24 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) unshare(0x10900) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140)=0x8800, 0x8800000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0xfffffffffffffffa, 0x10000, 0x2, 0xffff, 0x3, r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x9, @local, 0x5}], 0x1c) 05:05:24 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x0, './file2\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0xfffffcfb) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) recvfrom$llc(r1, &(0x7f00000004c0)=""/240, 0xf0, 0x10001, &(0x7f0000000640)={0x1a, 0x302, 0x3f, 0x9, 0x0, 0x3, @local}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x3}, 0x28, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) gettid() mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000440)=0x84) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) signalfd(r0, &(0x7f00000001c0)={0xfffd}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7fffffff, 0x9, 0x9, 0x76, r3}, &(0x7f0000000780)=0x10) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/149) [ 394.139440] FAULT_INJECTION: forcing a failure. [ 394.139440] name failslab, interval 1, probability 0, space 0, times 0 [ 394.200694] CPU: 0 PID: 12620 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 394.209327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.218691] Call Trace: [ 394.221317] dump_stack+0x244/0x39d [ 394.224969] ? dump_stack_print_info.cold.1+0x20/0x20 [ 394.230187] should_fail.cold.4+0xa/0x17 [ 394.234267] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 394.239412] ? save_stack+0x43/0xd0 [ 394.243059] ? kasan_kmalloc+0xc7/0xe0 [ 394.247228] ? kmem_cache_alloc_trace+0x152/0x750 [ 394.252081] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 394.257293] ? __list_lru_init+0x4d6/0x840 [ 394.261551] ? graph_lock+0x270/0x270 [ 394.265365] ? mount_nodev+0x38/0x120 [ 394.269178] ? devpts_mount+0x34/0x40 [ 394.272987] ? legacy_get_tree+0x12f/0x260 [ 394.277238] ? vfs_get_tree+0x1cb/0x5c0 [ 394.281228] ? do_mount+0x82a/0x1ff0 [ 394.284955] ? ksys_mount+0x12d/0x140 [ 394.288782] ? find_held_lock+0x36/0x1c0 [ 394.292866] ? __lock_is_held+0xb5/0x140 [ 394.296965] ? perf_trace_sched_process_exec+0x860/0x860 [ 394.302451] __should_failslab+0x124/0x180 [ 394.306705] should_failslab+0x9/0x14 [ 394.310523] kmem_cache_alloc_trace+0x2d7/0x750 [ 394.315205] ? __kmalloc_node+0x3c/0x70 [ 394.319189] ? __kmalloc_node+0x3c/0x70 [ 394.323178] ? rcu_read_lock_sched_held+0x14f/0x180 [ 394.328220] __memcg_init_list_lru_node+0x185/0x2d0 [ 394.331663] IPVS: ftp: loaded support on port[0] = 21 [ 394.333248] ? kvfree_rcu+0x20/0x20 [ 394.333269] ? __kmalloc_node+0x50/0x70 [ 394.333310] __list_lru_init+0x4d6/0x840 [ 394.333337] ? list_lru_destroy+0x500/0x500 [ 394.354471] ? up_write+0x7b/0x220 [ 394.358019] ? down_write_nested+0x130/0x130 [ 394.362435] ? down_read+0x120/0x120 [ 394.366167] ? init_wait_entry+0x1c0/0x1c0 [ 394.370410] ? prealloc_shrinker+0x172/0x340 [ 394.374847] alloc_super+0x907/0xb40 [ 394.378581] ? destroy_unused_super.part.10+0x110/0x110 [ 394.383948] ? sget_userns+0x17c/0x850 [ 394.387848] ? lock_downgrade+0x900/0x900 [ 394.392014] ? kasan_check_read+0x11/0x20 [ 394.396172] ? do_raw_spin_trylock+0x270/0x270 [ 394.400761] ? find_held_lock+0x36/0x1c0 [ 394.404859] sget_userns+0x278/0x850 [ 394.408581] ? get_anon_bdev+0xc0/0xc0 [ 394.412478] ? vfs_get_super+0x270/0x270 [ 394.416536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.422071] ? check_preemption_disabled+0x48/0x280 [ 394.427092] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 394.432653] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.438186] ? ns_capable_common+0x13f/0x170 [ 394.442595] ? get_anon_bdev+0xc0/0xc0 [ 394.446474] sget+0x10b/0x150 [ 394.449586] ? devpts_ptmx_path+0x140/0x140 [ 394.453903] mount_nodev+0x38/0x120 [ 394.457527] devpts_mount+0x34/0x40 [ 394.461149] ? devpts_kill_sb+0x70/0x70 [ 394.465116] legacy_get_tree+0x12f/0x260 [ 394.469171] ? security_fs_context_validate+0x80/0xa0 [ 394.474356] vfs_get_tree+0x1cb/0x5c0 [ 394.478159] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 394.482913] do_mount+0x82a/0x1ff0 [ 394.486444] ? lock_release+0xa10/0xa10 [ 394.490420] ? copy_mount_string+0x40/0x40 [ 394.494668] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 394.500294] ? _copy_from_user+0xdf/0x150 [ 394.504443] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 394.510061] ? copy_mount_options+0x315/0x430 [ 394.514551] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 394.520089] ksys_mount+0x12d/0x140 [ 394.523715] __x64_sys_mount+0xbe/0x150 [ 394.527691] do_syscall_64+0x1b9/0x820 [ 394.531571] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 394.536927] ? syscall_return_slowpath+0x5e0/0x5e0 [ 394.541848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.546689] ? trace_hardirqs_on_caller+0x310/0x310 [ 394.551712] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 394.556726] ? prepare_exit_to_usermode+0x291/0x3b0 [ 394.561745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.566593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 394.571777] RIP: 0033:0x457569 [ 394.574963] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 394.593856] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 394.601554] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 394.608812] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 394.616074] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 394.623333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 394.630596] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:24 executing program 3 (fault-call:1 fault-nth:17): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) [ 394.817143] FAULT_INJECTION: forcing a failure. [ 394.817143] name failslab, interval 1, probability 0, space 0, times 0 [ 394.851335] CPU: 1 PID: 12637 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 394.859950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.869310] Call Trace: [ 394.871912] dump_stack+0x244/0x39d [ 394.875557] ? dump_stack_print_info.cold.1+0x20/0x20 [ 394.880778] should_fail.cold.4+0xa/0x17 [ 394.884857] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 394.889984] ? save_stack+0x43/0xd0 [ 394.893621] ? kasan_kmalloc+0xc7/0xe0 [ 394.897519] ? kmem_cache_alloc_trace+0x152/0x750 [ 394.902361] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 394.907548] ? __list_lru_init+0x4d6/0x840 [ 394.911781] ? graph_lock+0x270/0x270 [ 394.915578] ? mount_nodev+0x38/0x120 [ 394.919371] ? devpts_mount+0x34/0x40 [ 394.923168] ? legacy_get_tree+0x12f/0x260 [ 394.927397] ? vfs_get_tree+0x1cb/0x5c0 [ 394.931369] ? do_mount+0x82a/0x1ff0 [ 394.935086] ? ksys_mount+0x12d/0x140 [ 394.938893] ? find_held_lock+0x36/0x1c0 [ 394.943474] ? __lock_is_held+0xb5/0x140 [ 394.947550] ? perf_trace_sched_process_exec+0x860/0x860 [ 394.953015] __should_failslab+0x124/0x180 [ 394.957257] should_failslab+0x9/0x14 [ 394.961056] kmem_cache_alloc_trace+0x2d7/0x750 [ 394.965721] ? __kmalloc_node+0x3c/0x70 [ 394.969692] ? __kmalloc_node+0x3c/0x70 [ 394.973664] ? rcu_read_lock_sched_held+0x14f/0x180 [ 394.978682] __memcg_init_list_lru_node+0x185/0x2d0 [ 394.983699] ? kvfree_rcu+0x20/0x20 [ 394.987763] ? __kmalloc_node+0x50/0x70 [ 394.991743] __list_lru_init+0x4d6/0x840 [ 394.995803] ? list_lru_destroy+0x500/0x500 [ 395.000121] ? up_write+0x7b/0x220 [ 395.003657] ? down_write_nested+0x130/0x130 [ 395.008062] ? down_read+0x120/0x120 [ 395.011773] ? init_wait_entry+0x1c0/0x1c0 [ 395.015998] ? prealloc_shrinker+0x172/0x340 [ 395.020417] alloc_super+0x907/0xb40 [ 395.024134] ? destroy_unused_super.part.10+0x110/0x110 [ 395.029489] ? sget_userns+0x17c/0x850 [ 395.033372] ? lock_downgrade+0x900/0x900 [ 395.037521] ? kasan_check_read+0x11/0x20 [ 395.041665] ? do_raw_spin_trylock+0x270/0x270 [ 395.046249] ? find_held_lock+0x36/0x1c0 [ 395.050320] sget_userns+0x278/0x850 [ 395.054027] ? get_anon_bdev+0xc0/0xc0 [ 395.057916] ? vfs_get_super+0x270/0x270 [ 395.061974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.067506] ? check_preemption_disabled+0x48/0x280 [ 395.072527] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 395.078090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.083620] ? ns_capable_common+0x13f/0x170 [ 395.088027] ? get_anon_bdev+0xc0/0xc0 [ 395.091906] sget+0x10b/0x150 [ 395.095009] ? devpts_ptmx_path+0x140/0x140 [ 395.099325] mount_nodev+0x38/0x120 [ 395.102958] devpts_mount+0x34/0x40 [ 395.106589] ? devpts_kill_sb+0x70/0x70 [ 395.110557] legacy_get_tree+0x12f/0x260 [ 395.114617] ? security_fs_context_validate+0x80/0xa0 [ 395.119806] vfs_get_tree+0x1cb/0x5c0 [ 395.123599] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 395.128352] do_mount+0x82a/0x1ff0 [ 395.131886] ? lock_release+0xa10/0xa10 [ 395.135859] ? copy_mount_string+0x40/0x40 [ 395.140103] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 395.145646] ? _copy_from_user+0xdf/0x150 [ 395.149795] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 395.155333] ? copy_mount_options+0x315/0x430 [ 395.159822] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 395.165357] ksys_mount+0x12d/0x140 [ 395.168998] __x64_sys_mount+0xbe/0x150 [ 395.172972] do_syscall_64+0x1b9/0x820 [ 395.176853] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 395.182230] ? syscall_return_slowpath+0x5e0/0x5e0 [ 395.187162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.192005] ? trace_hardirqs_on_caller+0x310/0x310 [ 395.197015] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 395.202025] ? prepare_exit_to_usermode+0x291/0x3b0 [ 395.207039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.211884] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 395.217076] RIP: 0033:0x457569 [ 395.220265] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.239161] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 395.246862] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 395.254126] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 395.261389] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 395.268653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 395.275913] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:25 executing program 3 (fault-call:1 fault-nth:18): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:25 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) unshare(0x10900) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140)=0x8800, 0x8800000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0xfffffffffffffffa, 0x10000, 0x2, 0xffff, 0x3, r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x9, @local, 0x5}], 0x1c) [ 395.496423] FAULT_INJECTION: forcing a failure. [ 395.496423] name failslab, interval 1, probability 0, space 0, times 0 05:05:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) [ 395.564061] CPU: 1 PID: 12648 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 395.572678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.582043] Call Trace: [ 395.584646] dump_stack+0x244/0x39d [ 395.588290] ? dump_stack_print_info.cold.1+0x20/0x20 [ 395.593506] should_fail.cold.4+0xa/0x17 [ 395.597580] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 395.602709] ? save_stack+0x43/0xd0 [ 395.606345] ? kasan_kmalloc+0xc7/0xe0 [ 395.610240] ? kmem_cache_alloc_trace+0x152/0x750 [ 395.615091] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 395.620291] ? __list_lru_init+0x4d6/0x840 [ 395.624542] ? graph_lock+0x270/0x270 [ 395.628351] ? mount_nodev+0x38/0x120 [ 395.632164] ? devpts_mount+0x34/0x40 [ 395.635981] ? legacy_get_tree+0x12f/0x260 [ 395.640230] ? vfs_get_tree+0x1cb/0x5c0 [ 395.644219] ? do_mount+0x82a/0x1ff0 [ 395.647942] ? ksys_mount+0x12d/0x140 [ 395.651765] ? find_held_lock+0x36/0x1c0 [ 395.655843] ? __lock_is_held+0xb5/0x140 [ 395.659972] ? geneve_offload_rx_ports+0x588/0x680 [ 395.664932] ? perf_trace_sched_process_exec+0x860/0x860 [ 395.670409] __should_failslab+0x124/0x180 [ 395.674659] should_failslab+0x9/0x14 [ 395.678473] kmem_cache_alloc_trace+0x2d7/0x750 [ 395.683153] ? __kmalloc_node+0x3c/0x70 [ 395.687146] ? __kmalloc_node+0x3c/0x70 [ 395.691144] ? rcu_read_lock_sched_held+0x14f/0x180 [ 395.696193] __memcg_init_list_lru_node+0x185/0x2d0 [ 395.701223] ? kvfree_rcu+0x20/0x20 [ 395.704863] ? __kmalloc_node+0x50/0x70 [ 395.708861] __list_lru_init+0x4d6/0x840 [ 395.712940] ? list_lru_destroy+0x500/0x500 [ 395.717286] ? up_write+0x7b/0x220 [ 395.720842] ? down_write_nested+0x130/0x130 [ 395.725255] ? down_read+0x120/0x120 [ 395.728981] ? init_wait_entry+0x1c0/0x1c0 [ 395.733224] ? prealloc_shrinker+0x172/0x340 [ 395.737655] alloc_super+0x907/0xb40 [ 395.741391] ? destroy_unused_super.part.10+0x110/0x110 [ 395.746762] ? sget_userns+0x17c/0x850 [ 395.750666] ? lock_downgrade+0x900/0x900 [ 395.754841] ? kasan_check_read+0x11/0x20 [ 395.759001] ? do_raw_spin_trylock+0x270/0x270 [ 395.763594] ? find_held_lock+0x36/0x1c0 [ 395.767684] sget_userns+0x278/0x850 [ 395.771411] ? get_anon_bdev+0xc0/0xc0 [ 395.775738] ? vfs_get_super+0x270/0x270 [ 395.779817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.785376] ? check_preemption_disabled+0x48/0x280 [ 395.790421] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 395.796005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.801550] ? ns_capable_common+0x13f/0x170 [ 395.805969] ? get_anon_bdev+0xc0/0xc0 [ 395.809861] sget+0x10b/0x150 [ 395.812979] ? devpts_ptmx_path+0x140/0x140 [ 395.817312] mount_nodev+0x38/0x120 [ 395.820950] devpts_mount+0x34/0x40 [ 395.824582] ? devpts_kill_sb+0x70/0x70 [ 395.828567] legacy_get_tree+0x12f/0x260 [ 395.832646] ? security_fs_context_validate+0x80/0xa0 [ 395.837854] vfs_get_tree+0x1cb/0x5c0 [ 395.841674] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 395.846443] do_mount+0x82a/0x1ff0 [ 395.850007] ? lock_release+0xa10/0xa10 [ 395.854003] ? copy_mount_string+0x40/0x40 [ 395.858268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 395.863821] ? _copy_from_user+0xdf/0x150 [ 395.867982] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 395.873521] ? copy_mount_options+0x315/0x430 [ 395.878017] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 395.883559] ksys_mount+0x12d/0x140 [ 395.887189] __x64_sys_mount+0xbe/0x150 [ 395.891177] do_syscall_64+0x1b9/0x820 [ 395.895060] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 395.900420] ? syscall_return_slowpath+0x5e0/0x5e0 [ 395.905344] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.910197] ? trace_hardirqs_on_caller+0x310/0x310 [ 395.915212] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 395.920226] ? prepare_exit_to_usermode+0x291/0x3b0 [ 395.925241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.930086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 395.935274] RIP: 0033:0x457569 [ 395.938460] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.957856] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 395.965556] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 395.972816] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 395.980079] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 395.987341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 395.994615] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 397.239675] device bridge_slave_1 left promiscuous mode [ 397.246346] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.303604] device bridge_slave_0 left promiscuous mode [ 397.309065] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.561204] team0 (unregistering): Port device team_slave_1 removed [ 399.572034] team0 (unregistering): Port device team_slave_0 removed [ 399.584063] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 399.653618] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 399.728942] bond0 (unregistering): Released all slaves [ 400.215206] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.221817] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.229732] device bridge_slave_0 entered promiscuous mode [ 400.275159] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.287592] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.295554] device bridge_slave_1 entered promiscuous mode [ 400.377623] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.390336] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.397737] device bridge_slave_0 entered promiscuous mode [ 400.407163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 400.467859] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.481290] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.488638] device bridge_slave_1 entered promiscuous mode [ 400.498625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 400.559623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 400.625243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 400.779760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 400.870951] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 400.909460] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 400.926958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 400.933947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 400.982280] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 401.007798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 401.029303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 401.078441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 401.085425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.138914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 401.159437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 401.273239] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 401.280689] team0: Port device team_slave_0 added [ 401.328828] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 401.336598] team0: Port device team_slave_1 added [ 401.348390] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 401.356736] team0: Port device team_slave_0 added [ 401.381291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 401.448987] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 401.456527] team0: Port device team_slave_1 added [ 401.475277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 401.549626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 401.556773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.573069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.595930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 401.610296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 401.617393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.628503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 401.639890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 401.729463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 401.736620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.752951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.812749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 401.819914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.827845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.655631] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.662032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.668648] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.675035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.682263] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 402.858966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.045964] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.052423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.059158] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.065524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.073290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 403.839534] device bridge_slave_1 left promiscuous mode [ 403.845092] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.900810] device bridge_slave_0 left promiscuous mode [ 403.906264] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.129435] bond5 (unregistering): Released all slaves [ 406.139239] bond4 (unregistering): Released all slaves [ 406.149831] bond3 (unregistering): Released all slaves [ 406.160465] bond2 (unregistering): Released all slaves [ 406.170737] bond1 (unregistering): Released all slaves [ 406.181660] team0 (unregistering): Port device team_slave_1 removed [ 406.191993] team0 (unregistering): Port device team_slave_0 removed [ 406.202590] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 406.243557] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 406.328563] bond0 (unregistering): Released all slaves [ 406.399245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.455759] Left network mode [ 408.464420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.584539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.629991] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 408.752624] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 408.788212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 408.798628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.806447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.941111] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 408.947302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.955151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.966431] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.110493] 8021q: adding VLAN 0 to HW filter on device team0 05:05:40 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x0, './file2\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0xfffffcfb) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) recvfrom$llc(r1, &(0x7f00000004c0)=""/240, 0xf0, 0x10001, &(0x7f0000000640)={0x1a, 0x302, 0x3f, 0x9, 0x0, 0x3, @local}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x3}, 0x28, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) gettid() mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000440)=0x84) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) signalfd(r0, &(0x7f00000001c0)={0xfffd}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x7fffffff, 0x9, 0x9, 0x76, r3}, &(0x7f0000000780)=0x10) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/149) 05:05:40 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) unshare(0x10900) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140)=0x8800, 0x8800000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0xfffffffffffffffa, 0x10000, 0x2, 0xffff, 0x3, r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x9, @local, 0x5}], 0x1c) 05:05:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) 05:05:40 executing program 3 (fault-call:1 fault-nth:19): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:40 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:40 executing program 2: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 410.183886] FAULT_INJECTION: forcing a failure. [ 410.183886] name failslab, interval 1, probability 0, space 0, times 0 [ 410.229627] CPU: 1 PID: 13176 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 410.238247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.247608] Call Trace: [ 410.250221] dump_stack+0x244/0x39d [ 410.253881] ? dump_stack_print_info.cold.1+0x20/0x20 [ 410.259112] should_fail.cold.4+0xa/0x17 [ 410.263194] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 410.268330] ? save_stack+0x43/0xd0 [ 410.271980] ? kasan_kmalloc+0xc7/0xe0 [ 410.275883] ? kmem_cache_alloc_trace+0x152/0x750 [ 410.280738] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 410.285943] ? __list_lru_init+0x4d6/0x840 [ 410.290203] ? graph_lock+0x270/0x270 [ 410.294011] ? mount_nodev+0x38/0x120 [ 410.297821] ? devpts_mount+0x34/0x40 [ 410.301639] ? legacy_get_tree+0x12f/0x260 [ 410.305880] ? vfs_get_tree+0x1cb/0x5c0 [ 410.309866] ? do_mount+0x82a/0x1ff0 [ 410.313586] ? ksys_mount+0x12d/0x140 [ 410.317406] ? find_held_lock+0x36/0x1c0 [ 410.321494] ? __lock_is_held+0xb5/0x140 [ 410.325642] ? netlbl_unlhsh_add+0xb28/0x1790 [ 410.330171] ? perf_trace_sched_process_exec+0x860/0x860 [ 410.335650] __should_failslab+0x124/0x180 [ 410.339898] should_failslab+0x9/0x14 [ 410.343711] kmem_cache_alloc_trace+0x2d7/0x750 [ 410.348392] ? __kmalloc_node+0x3c/0x70 [ 410.352373] ? __kmalloc_node+0x3c/0x70 [ 410.356357] ? rcu_read_lock_sched_held+0x14f/0x180 [ 410.361393] __memcg_init_list_lru_node+0x185/0x2d0 [ 410.366421] ? kvfree_rcu+0x20/0x20 [ 410.370060] ? __kmalloc_node+0x50/0x70 [ 410.374058] __list_lru_init+0x4d6/0x840 [ 410.378135] ? list_lru_destroy+0x500/0x500 [ 410.382480] ? up_write+0x7b/0x220 [ 410.386030] ? down_write_nested+0x130/0x130 [ 410.390446] ? down_read+0x120/0x120 [ 410.394176] ? init_wait_entry+0x1c0/0x1c0 [ 410.398426] ? prealloc_shrinker+0x172/0x340 [ 410.402860] alloc_super+0x907/0xb40 [ 410.406598] ? destroy_unused_super.part.10+0x110/0x110 [ 410.411974] ? sget_userns+0x17c/0x850 [ 410.415874] ? lock_downgrade+0x900/0x900 [ 410.420042] ? kasan_check_read+0x11/0x20 [ 410.424202] ? do_raw_spin_trylock+0x270/0x270 [ 410.428791] ? find_held_lock+0x36/0x1c0 [ 410.432872] sget_userns+0x278/0x850 [ 410.436595] ? get_anon_bdev+0xc0/0xc0 [ 410.440499] ? vfs_get_super+0x270/0x270 [ 410.444571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 410.450132] ? check_preemption_disabled+0x48/0x280 [ 410.455186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 410.460765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 410.466309] ? ns_capable_common+0x13f/0x170 [ 410.470735] ? get_anon_bdev+0xc0/0xc0 [ 410.474629] sget+0x10b/0x150 [ 410.477750] ? devpts_ptmx_path+0x140/0x140 [ 410.482083] mount_nodev+0x38/0x120 [ 410.485728] devpts_mount+0x34/0x40 [ 410.489365] ? devpts_kill_sb+0x70/0x70 [ 410.493349] legacy_get_tree+0x12f/0x260 [ 410.497424] ? security_fs_context_validate+0x80/0xa0 [ 410.502630] vfs_get_tree+0x1cb/0x5c0 [ 410.506440] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 410.511212] do_mount+0x82a/0x1ff0 [ 410.514767] ? lock_release+0xa10/0xa10 [ 410.518768] ? copy_mount_string+0x40/0x40 [ 410.523038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 410.528587] ? _copy_from_user+0xdf/0x150 [ 410.532752] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 410.538302] ? copy_mount_options+0x315/0x430 [ 410.542806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 410.548362] ksys_mount+0x12d/0x140 [ 410.552004] __x64_sys_mount+0xbe/0x150 [ 410.555997] do_syscall_64+0x1b9/0x820 [ 410.559893] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 410.565268] ? syscall_return_slowpath+0x5e0/0x5e0 [ 410.570205] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.575062] ? trace_hardirqs_on_caller+0x310/0x310 [ 410.580089] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 410.585118] ? prepare_exit_to_usermode+0x291/0x3b0 [ 410.590150] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.595018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.600211] RIP: 0033:0x457569 [ 410.603411] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.622320] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 05:05:40 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) unshare(0x10900) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140)=0x8800, 0x8800000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0xfffffffffffffffa, 0x10000, 0x2, 0xffff, 0x3, r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x9, @local, 0x5}], 0x1c) [ 410.630036] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 410.637310] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 410.644602] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 410.651879] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 410.659157] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:40 executing program 3 (fault-call:1 fault-nth:20): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:40 executing program 0: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 410.798984] FAULT_INJECTION: forcing a failure. [ 410.798984] name failslab, interval 1, probability 0, space 0, times 0 05:05:40 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 410.889232] CPU: 0 PID: 13184 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 410.897860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.907229] Call Trace: [ 410.909835] dump_stack+0x244/0x39d [ 410.913477] ? dump_stack_print_info.cold.1+0x20/0x20 [ 410.918705] should_fail.cold.4+0xa/0x17 [ 410.922787] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 410.928367] ? save_stack+0x43/0xd0 [ 410.932013] ? kasan_kmalloc+0xc7/0xe0 [ 410.935916] ? kmem_cache_alloc_trace+0x152/0x750 [ 410.941144] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 410.946339] ? __list_lru_init+0x4d6/0x840 [ 410.950583] ? graph_lock+0x270/0x270 [ 410.954388] ? mount_nodev+0x38/0x120 [ 410.958191] ? devpts_mount+0x34/0x40 [ 410.961998] ? legacy_get_tree+0x12f/0x260 [ 410.966240] ? vfs_get_tree+0x1cb/0x5c0 [ 410.970227] ? do_mount+0x82a/0x1ff0 [ 410.973955] ? ksys_mount+0x12d/0x140 [ 410.977781] ? find_held_lock+0x36/0x1c0 [ 410.981864] ? __lock_is_held+0xb5/0x140 [ 410.985965] ? perf_trace_sched_process_exec+0x860/0x860 [ 410.991437] __should_failslab+0x124/0x180 [ 410.995687] should_failslab+0x9/0x14 [ 410.999495] kmem_cache_alloc_trace+0x2d7/0x750 [ 411.004170] ? __kmalloc_node+0x3c/0x70 [ 411.008156] ? __kmalloc_node+0x3c/0x70 [ 411.012144] ? rcu_read_lock_sched_held+0x14f/0x180 [ 411.017174] __memcg_init_list_lru_node+0x185/0x2d0 [ 411.022204] ? kvfree_rcu+0x20/0x20 [ 411.025839] ? __kmalloc_node+0x50/0x70 [ 411.029835] __list_lru_init+0x4d6/0x840 [ 411.033923] ? list_lru_destroy+0x500/0x500 [ 411.038863] ? up_write+0x7b/0x220 [ 411.042424] ? down_write_nested+0x130/0x130 [ 411.046835] ? down_read+0x120/0x120 [ 411.050559] ? init_wait_entry+0x1c0/0x1c0 [ 411.054803] ? prealloc_shrinker+0x172/0x340 [ 411.059242] alloc_super+0x907/0xb40 [ 411.062978] ? destroy_unused_super.part.10+0x110/0x110 [ 411.068349] ? sget_userns+0x17c/0x850 [ 411.072249] ? lock_downgrade+0x900/0x900 [ 411.076416] ? kasan_check_read+0x11/0x20 [ 411.080578] ? do_raw_spin_trylock+0x270/0x270 [ 411.085177] ? find_held_lock+0x36/0x1c0 [ 411.089261] sget_userns+0x278/0x850 [ 411.092986] ? get_anon_bdev+0xc0/0xc0 [ 411.096899] ? vfs_get_super+0x270/0x270 [ 411.100986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.106545] ? check_preemption_disabled+0x48/0x280 [ 411.111580] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 411.117165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.122713] ? ns_capable_common+0x13f/0x170 [ 411.127133] ? get_anon_bdev+0xc0/0xc0 [ 411.131029] sget+0x10b/0x150 [ 411.134153] ? devpts_ptmx_path+0x140/0x140 [ 411.138480] mount_nodev+0x38/0x120 [ 411.142121] devpts_mount+0x34/0x40 [ 411.145759] ? devpts_kill_sb+0x70/0x70 [ 411.149741] legacy_get_tree+0x12f/0x260 [ 411.153816] ? security_fs_context_validate+0x80/0xa0 [ 411.159026] vfs_get_tree+0x1cb/0x5c0 [ 411.162834] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 411.167599] do_mount+0x82a/0x1ff0 [ 411.171150] ? lock_release+0xa10/0xa10 [ 411.175142] ? copy_mount_string+0x40/0x40 [ 411.179408] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.184959] ? _copy_from_user+0xdf/0x150 [ 411.189118] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.194663] ? copy_mount_options+0x315/0x430 [ 411.199168] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.204724] ksys_mount+0x12d/0x140 [ 411.208371] __x64_sys_mount+0xbe/0x150 [ 411.212365] do_syscall_64+0x1b9/0x820 [ 411.216270] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 411.221650] ? syscall_return_slowpath+0x5e0/0x5e0 [ 411.226593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.231454] ? trace_hardirqs_on_caller+0x310/0x310 [ 411.236481] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 411.241514] ? prepare_exit_to_usermode+0x291/0x3b0 [ 411.246549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.251410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.256608] RIP: 0033:0x457569 [ 411.259815] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.278716] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.286416] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 411.293680] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 411.300954] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 411.308230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 411.315503] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:41 executing program 3 (fault-call:1 fault-nth:21): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:41 executing program 4: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 411.454578] FAULT_INJECTION: forcing a failure. [ 411.454578] name failslab, interval 1, probability 0, space 0, times 0 [ 411.504644] CPU: 1 PID: 13197 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 411.513272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.522634] Call Trace: [ 411.525240] dump_stack+0x244/0x39d [ 411.528895] ? dump_stack_print_info.cold.1+0x20/0x20 [ 411.534118] should_fail.cold.4+0xa/0x17 [ 411.538198] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 411.543311] ? perf_trace_lock+0x7a0/0x7a0 [ 411.547561] ? find_held_lock+0x36/0x1c0 [ 411.551637] ? graph_lock+0x270/0x270 [ 411.555453] ? graph_lock+0x270/0x270 [ 411.559268] ? lock_downgrade+0x900/0x900 [ 411.563428] ? find_held_lock+0x36/0x1c0 [ 411.563453] ? __lock_is_held+0xb5/0x140 [ 411.563484] ? perf_trace_sched_process_exec+0x860/0x860 [ 411.571589] ? __kmalloc_node+0x3c/0x70 [ 411.571617] __should_failslab+0x124/0x180 [ 411.571635] should_failslab+0x9/0x14 [ 411.571653] __kmalloc+0x2e0/0x760 [ 411.592650] ? __kmalloc_node+0x50/0x70 [ 411.596639] ? __list_lru_init+0x151/0x840 [ 411.600903] __list_lru_init+0x151/0x840 [ 411.604982] ? list_lru_destroy+0x500/0x500 [ 411.609321] ? up_write+0x7b/0x220 [ 411.612881] ? down_read+0x120/0x120 [ 411.616604] ? init_wait_entry+0x1c0/0x1c0 [ 411.620856] ? prealloc_shrinker+0x172/0x340 [ 411.625285] alloc_super+0x933/0xb40 [ 411.629033] ? destroy_unused_super.part.10+0x110/0x110 [ 411.634400] ? sget_userns+0x17c/0x850 [ 411.638287] ? lock_downgrade+0x900/0x900 [ 411.642439] ? kasan_check_read+0x11/0x20 [ 411.646579] ? do_raw_spin_trylock+0x270/0x270 [ 411.651150] ? find_held_lock+0x36/0x1c0 [ 411.655212] sget_userns+0x278/0x850 [ 411.658919] ? get_anon_bdev+0xc0/0xc0 [ 411.662799] ? vfs_get_super+0x270/0x270 [ 411.666862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.672392] ? check_preemption_disabled+0x48/0x280 [ 411.677404] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 411.682954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.688484] ? ns_capable_common+0x13f/0x170 [ 411.692889] ? get_anon_bdev+0xc0/0xc0 [ 411.696763] sget+0x10b/0x150 [ 411.699869] ? devpts_ptmx_path+0x140/0x140 [ 411.704179] mount_nodev+0x38/0x120 [ 411.707801] devpts_mount+0x34/0x40 [ 411.711416] ? devpts_kill_sb+0x70/0x70 [ 411.715382] legacy_get_tree+0x12f/0x260 [ 411.719435] ? security_fs_context_validate+0x80/0xa0 [ 411.724618] vfs_get_tree+0x1cb/0x5c0 [ 411.728407] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 411.733155] do_mount+0x82a/0x1ff0 [ 411.736684] ? lock_release+0xa10/0xa10 [ 411.740654] ? copy_mount_string+0x40/0x40 [ 411.744893] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.750423] ? _copy_from_user+0xdf/0x150 [ 411.754566] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.760098] ? copy_mount_options+0x315/0x430 [ 411.764582] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.770115] ksys_mount+0x12d/0x140 [ 411.774116] __x64_sys_mount+0xbe/0x150 [ 411.778086] do_syscall_64+0x1b9/0x820 [ 411.781966] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 411.787321] ? syscall_return_slowpath+0x5e0/0x5e0 [ 411.792246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.797081] ? trace_hardirqs_on_caller+0x310/0x310 [ 411.802089] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 411.807100] ? prepare_exit_to_usermode+0x291/0x3b0 [ 411.812113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.816958] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.822138] RIP: 0033:0x457569 [ 411.825324] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.844217] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.851916] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 411.859174] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 411.866430] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 411.873688] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 411.880944] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:41 executing program 5: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:41 executing program 3 (fault-call:1 fault-nth:22): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 412.104034] IPVS: ftp: loaded support on port[0] = 21 [ 412.125690] FAULT_INJECTION: forcing a failure. [ 412.125690] name failslab, interval 1, probability 0, space 0, times 0 [ 412.138300] CPU: 0 PID: 13210 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 412.146887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.156250] Call Trace: [ 412.158859] dump_stack+0x244/0x39d [ 412.162504] ? dump_stack_print_info.cold.1+0x20/0x20 [ 412.167722] should_fail.cold.4+0xa/0x17 [ 412.171804] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 412.176942] ? save_stack+0x43/0xd0 [ 412.180574] ? kasan_kmalloc+0xc7/0xe0 [ 412.184470] ? kmem_cache_alloc_trace+0x152/0x750 [ 412.189321] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 412.194515] ? __list_lru_init+0x4d6/0x840 [ 412.198761] ? graph_lock+0x270/0x270 [ 412.202581] ? mount_nodev+0x38/0x120 [ 412.206384] ? devpts_mount+0x34/0x40 [ 412.210189] ? legacy_get_tree+0x12f/0x260 [ 412.214427] ? vfs_get_tree+0x1cb/0x5c0 [ 412.218407] ? do_mount+0x82a/0x1ff0 [ 412.222124] ? ksys_mount+0x12d/0x140 [ 412.225941] ? find_held_lock+0x36/0x1c0 [ 412.230018] ? __lock_is_held+0xb5/0x140 [ 412.234105] ? perf_trace_sched_process_exec+0x860/0x860 [ 412.239584] __should_failslab+0x124/0x180 [ 412.243842] should_failslab+0x9/0x14 [ 412.247653] kmem_cache_alloc_trace+0x2d7/0x750 [ 412.252327] ? __kmalloc_node+0x3c/0x70 [ 412.256322] __memcg_init_list_lru_node+0x185/0x2d0 [ 412.261340] ? kvfree_rcu+0x20/0x20 [ 412.264960] ? __kmalloc_node+0x50/0x70 [ 412.268925] __list_lru_init+0x4d6/0x840 [ 412.272976] ? list_lru_destroy+0x500/0x500 [ 412.277295] ? up_write+0x7b/0x220 [ 412.280837] ? down_write_nested+0x130/0x130 [ 412.285243] ? down_read+0x120/0x120 [ 412.288955] ? init_wait_entry+0x1c0/0x1c0 [ 412.293179] ? prealloc_shrinker+0x172/0x340 [ 412.297596] alloc_super+0x907/0xb40 [ 412.301302] ? destroy_unused_super.part.10+0x110/0x110 [ 412.306701] ? sget_userns+0x17c/0x850 [ 412.310581] ? lock_downgrade+0x900/0x900 [ 412.314721] ? kasan_check_read+0x11/0x20 [ 412.318863] ? do_raw_spin_trylock+0x270/0x270 [ 412.323434] ? find_held_lock+0x36/0x1c0 [ 412.327499] sget_userns+0x278/0x850 [ 412.331202] ? get_anon_bdev+0xc0/0xc0 [ 412.335081] ? vfs_get_super+0x270/0x270 [ 412.339139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.344665] ? check_preemption_disabled+0x48/0x280 [ 412.349675] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 412.355218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.360742] ? ns_capable_common+0x13f/0x170 [ 412.365140] ? get_anon_bdev+0xc0/0xc0 [ 412.369010] sget+0x10b/0x150 [ 412.372111] ? devpts_ptmx_path+0x140/0x140 [ 412.376545] mount_nodev+0x38/0x120 [ 412.380162] devpts_mount+0x34/0x40 [ 412.383777] ? devpts_kill_sb+0x70/0x70 [ 412.387759] legacy_get_tree+0x12f/0x260 [ 412.391843] ? security_fs_context_validate+0x80/0xa0 [ 412.397070] vfs_get_tree+0x1cb/0x5c0 [ 412.400858] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 412.405616] do_mount+0x82a/0x1ff0 [ 412.409165] ? lock_release+0xa10/0xa10 [ 412.413156] ? copy_mount_string+0x40/0x40 [ 412.417391] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.422917] ? _copy_from_user+0xdf/0x150 [ 412.427053] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.432578] ? copy_mount_options+0x315/0x430 [ 412.437061] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.442587] ksys_mount+0x12d/0x140 [ 412.446204] __x64_sys_mount+0xbe/0x150 [ 412.450182] do_syscall_64+0x1b9/0x820 [ 412.454066] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 412.459416] ? syscall_return_slowpath+0x5e0/0x5e0 [ 412.464334] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.469177] ? trace_hardirqs_on_caller+0x310/0x310 [ 412.474207] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 412.479231] ? prepare_exit_to_usermode+0x291/0x3b0 [ 412.484248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.489091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.494276] RIP: 0033:0x457569 [ 412.497457] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.516384] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 05:05:42 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 412.524081] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 412.531339] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 412.538598] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 412.545867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 412.553122] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:42 executing program 0: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:42 executing program 3 (fault-call:1 fault-nth:23): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 412.704672] FAULT_INJECTION: forcing a failure. [ 412.704672] name failslab, interval 1, probability 0, space 0, times 0 [ 412.725634] CPU: 1 PID: 13216 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 412.734261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.743632] Call Trace: [ 412.746235] dump_stack+0x244/0x39d [ 412.749889] ? dump_stack_print_info.cold.1+0x20/0x20 [ 412.755105] should_fail.cold.4+0xa/0x17 [ 412.759197] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 412.764334] ? graph_lock+0x270/0x270 [ 412.768140] ? save_stack+0xa9/0xd0 [ 412.771782] ? save_stack+0x43/0xd0 [ 412.775419] ? kasan_kmalloc+0xc7/0xe0 [ 412.779323] ? find_held_lock+0x36/0x1c0 [ 412.783400] ? __lock_is_held+0xb5/0x140 [ 412.787492] ? perf_trace_sched_process_exec+0x860/0x860 [ 412.792962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.798509] ? check_preemption_disabled+0x48/0x280 [ 412.803546] __should_failslab+0x124/0x180 [ 412.807792] should_failslab+0x9/0x14 [ 412.811600] kmem_cache_alloc_node_trace+0x270/0x740 [ 412.816733] __kmalloc_node+0x3c/0x70 [ 412.820559] kvmalloc_node+0x65/0xf0 [ 412.824287] __list_lru_init+0x5d9/0x840 [ 412.828367] ? list_lru_destroy+0x500/0x500 [ 412.832704] ? up_write+0x7b/0x220 [ 412.836258] ? down_read+0x120/0x120 [ 412.839991] ? init_wait_entry+0x1c0/0x1c0 [ 412.844239] ? prealloc_shrinker+0x172/0x340 [ 412.848674] alloc_super+0x933/0xb40 [ 412.852406] ? destroy_unused_super.part.10+0x110/0x110 [ 412.857776] ? sget_userns+0x17c/0x850 [ 412.861672] ? lock_downgrade+0x900/0x900 [ 412.865840] ? kasan_check_read+0x11/0x20 [ 412.870001] ? do_raw_spin_trylock+0x270/0x270 [ 412.874593] ? find_held_lock+0x36/0x1c0 [ 412.878672] sget_userns+0x278/0x850 [ 412.882392] ? get_anon_bdev+0xc0/0xc0 [ 412.886297] ? vfs_get_super+0x270/0x270 [ 412.890373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.895920] ? check_preemption_disabled+0x48/0x280 05:05:42 executing program 2: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 412.900960] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 412.906538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.912082] ? ns_capable_common+0x13f/0x170 [ 412.916509] ? get_anon_bdev+0xc0/0xc0 [ 412.920404] sget+0x10b/0x150 [ 412.923524] ? devpts_ptmx_path+0x140/0x140 [ 412.927852] mount_nodev+0x38/0x120 [ 412.931494] devpts_mount+0x34/0x40 [ 412.935127] ? devpts_kill_sb+0x70/0x70 [ 412.939117] legacy_get_tree+0x12f/0x260 [ 412.943713] ? security_fs_context_validate+0x80/0xa0 [ 412.948925] vfs_get_tree+0x1cb/0x5c0 05:05:42 executing program 4: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 412.952745] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 412.957516] do_mount+0x82a/0x1ff0 [ 412.961069] ? lock_release+0xa10/0xa10 [ 412.965066] ? copy_mount_string+0x40/0x40 [ 412.969334] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.974892] ? _copy_from_user+0xdf/0x150 [ 412.979066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.984624] ? copy_mount_options+0x315/0x430 [ 412.989137] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.994695] ksys_mount+0x12d/0x140 [ 412.998347] __x64_sys_mount+0xbe/0x150 [ 413.002338] do_syscall_64+0x1b9/0x820 [ 413.006240] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 413.011626] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.016566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.021422] ? trace_hardirqs_on_caller+0x310/0x310 [ 413.026453] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 413.031489] ? prepare_exit_to_usermode+0x291/0x3b0 [ 413.036527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.041392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.046605] RIP: 0033:0x457569 [ 413.049806] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.068718] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 413.071114] IPVS: ftp: loaded support on port[0] = 21 [ 413.076438] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 413.076450] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 413.076460] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 05:05:43 executing program 3 (fault-call:1 fault-nth:24): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 413.076471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 413.076481] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 413.132460] FAULT_INJECTION: forcing a failure. [ 413.132460] name failslab, interval 1, probability 0, space 0, times 0 05:05:43 executing program 4: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 413.209404] CPU: 0 PID: 13228 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 413.218029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.227391] Call Trace: [ 413.229995] dump_stack+0x244/0x39d [ 413.233654] ? dump_stack_print_info.cold.1+0x20/0x20 [ 413.238875] should_fail.cold.4+0xa/0x17 [ 413.242960] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 413.248092] ? save_stack+0x43/0xd0 [ 413.251742] ? kasan_kmalloc+0xc7/0xe0 [ 413.255633] ? kmem_cache_alloc_trace+0x152/0x750 [ 413.260483] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 413.265678] ? __list_lru_init+0x4d6/0x840 [ 413.269924] ? graph_lock+0x270/0x270 [ 413.273736] ? mount_nodev+0x38/0x120 [ 413.277538] ? devpts_mount+0x34/0x40 [ 413.281344] ? legacy_get_tree+0x12f/0x260 [ 413.285579] ? vfs_get_tree+0x1cb/0x5c0 [ 413.289561] ? do_mount+0x82a/0x1ff0 [ 413.293271] ? ksys_mount+0x12d/0x140 [ 413.297084] ? find_held_lock+0x36/0x1c0 [ 413.301158] ? __lock_is_held+0xb5/0x140 [ 413.305240] ? perf_trace_sched_process_exec+0x860/0x860 [ 413.310717] __should_failslab+0x124/0x180 [ 413.314968] should_failslab+0x9/0x14 [ 413.318773] kmem_cache_alloc_trace+0x2d7/0x750 [ 413.323445] ? __kmalloc_node+0x3c/0x70 [ 413.327416] ? __kmalloc_node+0x3c/0x70 [ 413.331394] ? rcu_read_lock_sched_held+0x14f/0x180 [ 413.336422] __memcg_init_list_lru_node+0x185/0x2d0 [ 413.341445] ? kvfree_rcu+0x20/0x20 [ 413.345077] ? __kmalloc_node+0x50/0x70 [ 413.349067] __list_lru_init+0x4d6/0x840 [ 413.353140] ? list_lru_destroy+0x500/0x500 [ 413.357471] ? up_write+0x7b/0x220 [ 413.361015] ? down_read+0x120/0x120 [ 413.364748] ? init_wait_entry+0x1c0/0x1c0 [ 413.368983] ? prealloc_shrinker+0x172/0x340 [ 413.373412] alloc_super+0x933/0xb40 [ 413.377138] ? destroy_unused_super.part.10+0x110/0x110 [ 413.382505] ? sget_userns+0x17c/0x850 [ 413.386397] ? lock_downgrade+0x900/0x900 [ 413.390558] ? kasan_check_read+0x11/0x20 [ 413.394723] ? do_raw_spin_trylock+0x270/0x270 [ 413.399308] ? find_held_lock+0x36/0x1c0 [ 413.403388] sget_userns+0x278/0x850 [ 413.407105] ? get_anon_bdev+0xc0/0xc0 [ 413.411003] ? vfs_get_super+0x270/0x270 [ 413.415073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.420614] ? check_preemption_disabled+0x48/0x280 [ 413.425649] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 413.431222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.436768] ? ns_capable_common+0x13f/0x170 [ 413.441190] ? get_anon_bdev+0xc0/0xc0 [ 413.445078] sget+0x10b/0x150 [ 413.448195] ? devpts_ptmx_path+0x140/0x140 [ 413.452527] mount_nodev+0x38/0x120 [ 413.456165] devpts_mount+0x34/0x40 [ 413.459802] ? devpts_kill_sb+0x70/0x70 [ 413.463772] legacy_get_tree+0x12f/0x260 [ 413.467836] ? security_fs_context_validate+0x80/0xa0 [ 413.473031] vfs_get_tree+0x1cb/0x5c0 [ 413.476837] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 413.481603] do_mount+0x82a/0x1ff0 [ 413.485146] ? lock_release+0xa10/0xa10 [ 413.489138] ? copy_mount_string+0x40/0x40 [ 413.493395] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.498932] ? _copy_from_user+0xdf/0x150 [ 413.503087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.508633] ? copy_mount_options+0x315/0x430 [ 413.513135] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.518695] ksys_mount+0x12d/0x140 [ 413.522344] __x64_sys_mount+0xbe/0x150 [ 413.526335] do_syscall_64+0x1b9/0x820 [ 413.530227] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 413.535595] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.540527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.545376] ? trace_hardirqs_on_caller+0x310/0x310 [ 413.550400] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 413.555420] ? prepare_exit_to_usermode+0x291/0x3b0 [ 413.560573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.565603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.570797] RIP: 0033:0x457569 [ 413.573992] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.592893] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 413.600605] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 05:05:43 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:43 executing program 3 (fault-call:1 fault-nth:25): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 413.607873] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 413.615147] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 413.622417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 413.629699] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:43 executing program 0: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 413.745825] FAULT_INJECTION: forcing a failure. [ 413.745825] name failslab, interval 1, probability 0, space 0, times 0 [ 413.760343] CPU: 1 PID: 13242 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 413.768949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.778308] Call Trace: [ 413.780910] dump_stack+0x244/0x39d [ 413.784551] ? dump_stack_print_info.cold.1+0x20/0x20 [ 413.789764] should_fail.cold.4+0xa/0x17 [ 413.793837] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 413.798959] ? save_stack+0x43/0xd0 [ 413.802595] ? kasan_kmalloc+0xc7/0xe0 [ 413.806488] ? kmem_cache_alloc_trace+0x152/0x750 [ 413.811355] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 413.816548] ? __list_lru_init+0x4d6/0x840 [ 413.820790] ? graph_lock+0x270/0x270 [ 413.824595] ? mount_nodev+0x38/0x120 [ 413.828402] ? devpts_mount+0x34/0x40 [ 413.832212] ? legacy_get_tree+0x12f/0x260 [ 413.836450] ? vfs_get_tree+0x1cb/0x5c0 [ 413.840433] ? do_mount+0x82a/0x1ff0 [ 413.844154] ? ksys_mount+0x12d/0x140 [ 413.847977] ? find_held_lock+0x36/0x1c0 [ 413.852054] ? __lock_is_held+0xb5/0x140 [ 413.856139] ? perf_trace_sched_process_exec+0x860/0x860 [ 413.861608] __should_failslab+0x124/0x180 [ 413.865858] should_failslab+0x9/0x14 [ 413.869677] kmem_cache_alloc_trace+0x2d7/0x750 [ 413.874360] ? __kmalloc_node+0x3c/0x70 [ 413.878342] ? __kmalloc_node+0x3c/0x70 [ 413.882326] ? rcu_read_lock_sched_held+0x14f/0x180 [ 413.887355] __memcg_init_list_lru_node+0x185/0x2d0 [ 413.892380] ? kvfree_rcu+0x20/0x20 [ 413.896016] ? __kmalloc_node+0x50/0x70 [ 413.900008] __list_lru_init+0x4d6/0x840 [ 413.904087] ? list_lru_destroy+0x500/0x500 [ 413.908436] ? up_write+0x7b/0x220 [ 413.911983] ? down_read+0x120/0x120 [ 413.915705] ? init_wait_entry+0x1c0/0x1c0 [ 413.919957] ? prealloc_shrinker+0x172/0x340 [ 413.924388] alloc_super+0x933/0xb40 [ 413.928121] ? destroy_unused_super.part.10+0x110/0x110 [ 413.933492] ? sget_userns+0x17c/0x850 [ 413.937394] ? lock_downgrade+0x900/0x900 [ 413.942077] ? kasan_check_read+0x11/0x20 [ 413.946244] ? do_raw_spin_trylock+0x270/0x270 [ 413.950850] ? find_held_lock+0x36/0x1c0 [ 413.954917] sget_userns+0x278/0x850 [ 413.958624] ? get_anon_bdev+0xc0/0xc0 [ 413.962511] ? vfs_get_super+0x270/0x270 [ 413.966569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.972099] ? check_preemption_disabled+0x48/0x280 [ 413.977129] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 413.982685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.988213] ? ns_capable_common+0x13f/0x170 [ 413.992615] ? get_anon_bdev+0xc0/0xc0 [ 413.996493] sget+0x10b/0x150 [ 413.999595] ? devpts_ptmx_path+0x140/0x140 [ 414.003904] mount_nodev+0x38/0x120 [ 414.007541] devpts_mount+0x34/0x40 [ 414.011176] ? devpts_kill_sb+0x70/0x70 [ 414.015141] legacy_get_tree+0x12f/0x260 [ 414.019210] ? security_fs_context_validate+0x80/0xa0 [ 414.024392] vfs_get_tree+0x1cb/0x5c0 [ 414.028185] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 414.032932] do_mount+0x82a/0x1ff0 [ 414.036463] ? lock_release+0xa10/0xa10 [ 414.040435] ? copy_mount_string+0x40/0x40 [ 414.044687] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 414.050227] ? _copy_from_user+0xdf/0x150 [ 414.054367] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 414.059893] ? copy_mount_options+0x315/0x430 [ 414.064382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 414.069919] ksys_mount+0x12d/0x140 [ 414.073537] __x64_sys_mount+0xbe/0x150 [ 414.077504] do_syscall_64+0x1b9/0x820 [ 414.081388] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 414.086745] ? syscall_return_slowpath+0x5e0/0x5e0 [ 414.091671] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.096504] ? trace_hardirqs_on_caller+0x310/0x310 [ 414.101509] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 414.106520] ? prepare_exit_to_usermode+0x291/0x3b0 [ 414.111534] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.116384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.121560] RIP: 0033:0x457569 [ 414.124755] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.143650] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.151347] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 414.158603] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 414.165859] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 414.173114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 414.180388] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 415.442829] device bridge_slave_1 left promiscuous mode [ 415.448323] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.490018] device bridge_slave_0 left promiscuous mode [ 415.495487] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.822222] team0 (unregistering): Port device team_slave_1 removed [ 417.832505] team0 (unregistering): Port device team_slave_0 removed [ 417.842774] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 417.883649] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 417.970242] bond0 (unregistering): Released all slaves [ 418.249689] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.256155] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.264562] device bridge_slave_0 entered promiscuous mode [ 418.364090] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.370663] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.378020] device bridge_slave_1 entered promiscuous mode [ 418.397700] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.404720] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.413777] device bridge_slave_0 entered promiscuous mode [ 418.448707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 418.493579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 418.517235] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.537710] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.546834] device bridge_slave_1 entered promiscuous mode [ 418.652252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 418.718737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 418.728920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 418.826339] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 418.896438] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 418.993804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 419.081004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 419.087887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 419.167603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 419.186784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 419.206849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 419.230300] team0: Port device team_slave_0 added [ 419.319277] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 419.331194] team0: Port device team_slave_1 added [ 419.417935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 419.442208] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 419.450296] team0: Port device team_slave_0 added [ 419.482323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 419.536216] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 419.543655] team0: Port device team_slave_1 added [ 419.550994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 419.559869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.576633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.622364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 419.633772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 419.641450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.651922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.679245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 419.757218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 419.779451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.787416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.848356] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 419.856308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.880168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 420.714908] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.721311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.727935] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.734329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.741949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 420.750423] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.756796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.763529] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.769924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.777454] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 421.135735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.143022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.079643] device bridge_slave_1 left promiscuous mode [ 422.085197] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.140030] device bridge_slave_0 left promiscuous mode [ 422.145502] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.515964] team0 (unregistering): Port device team_slave_1 removed [ 424.527171] team0 (unregistering): Port device team_slave_0 removed [ 424.536914] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 424.594262] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 424.658541] bond0 (unregistering): Released all slaves [ 426.596936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.769727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.836913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 426.988723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 427.014031] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 427.020341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.027805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.160828] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 427.167033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.181378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.192566] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.332424] 8021q: adding VLAN 0 to HW filter on device team0 05:05:58 executing program 3 (fault-call:1 fault-nth:26): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:58 executing program 5: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:58 executing program 4: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:58 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:58 executing program 0: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:58 executing program 2: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 428.565340] FAULT_INJECTION: forcing a failure. [ 428.565340] name failslab, interval 1, probability 0, space 0, times 0 [ 428.596127] CPU: 0 PID: 13769 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 428.604744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:05:58 executing program 2: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 428.614103] Call Trace: [ 428.616683] dump_stack+0x244/0x39d [ 428.620318] ? dump_stack_print_info.cold.1+0x20/0x20 [ 428.625539] should_fail.cold.4+0xa/0x17 [ 428.629627] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 428.634757] ? save_stack+0x43/0xd0 [ 428.638402] ? kasan_kmalloc+0xc7/0xe0 [ 428.642312] ? kmem_cache_alloc_trace+0x152/0x750 [ 428.647171] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 428.652379] ? __list_lru_init+0x4d6/0x840 [ 428.656631] ? graph_lock+0x270/0x270 [ 428.660441] ? mount_nodev+0x38/0x120 [ 428.664242] ? devpts_mount+0x34/0x40 [ 428.668030] ? legacy_get_tree+0x12f/0x260 [ 428.672251] ? vfs_get_tree+0x1cb/0x5c0 [ 428.676212] ? do_mount+0x82a/0x1ff0 [ 428.679916] ? ksys_mount+0x12d/0x140 [ 428.683711] ? find_held_lock+0x36/0x1c0 [ 428.687765] ? __lock_is_held+0xb5/0x140 [ 428.691823] ? geneve_offload_rx_ports+0x588/0x680 [ 428.696765] ? perf_trace_sched_process_exec+0x860/0x860 [ 428.702232] __should_failslab+0x124/0x180 [ 428.706509] should_failslab+0x9/0x14 [ 428.710311] kmem_cache_alloc_trace+0x2d7/0x750 [ 428.714977] ? __kmalloc_node+0x3c/0x70 [ 428.718950] ? __kmalloc_node+0x3c/0x70 [ 428.722913] ? rcu_read_lock_sched_held+0x14f/0x180 [ 428.727921] __memcg_init_list_lru_node+0x185/0x2d0 [ 428.732939] ? kvfree_rcu+0x20/0x20 [ 428.736570] ? __kmalloc_node+0x50/0x70 [ 428.740549] __list_lru_init+0x4d6/0x840 [ 428.744603] ? list_lru_destroy+0x500/0x500 [ 428.748920] ? up_write+0x7b/0x220 [ 428.752463] ? down_read+0x120/0x120 [ 428.756164] ? init_wait_entry+0x1c0/0x1c0 [ 428.760383] ? prealloc_shrinker+0x172/0x340 [ 428.764877] alloc_super+0x933/0xb40 [ 428.768624] ? destroy_unused_super.part.10+0x110/0x110 [ 428.773982] ? sget_userns+0x17c/0x850 [ 428.777883] ? lock_downgrade+0x900/0x900 [ 428.782034] ? kasan_check_read+0x11/0x20 [ 428.786193] ? do_raw_spin_trylock+0x270/0x270 [ 428.790797] ? find_held_lock+0x36/0x1c0 [ 428.794880] sget_userns+0x278/0x850 [ 428.798590] ? get_anon_bdev+0xc0/0xc0 [ 428.802481] ? vfs_get_super+0x270/0x270 [ 428.806547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.812082] ? check_preemption_disabled+0x48/0x280 [ 428.817121] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 428.822669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.828197] ? ns_capable_common+0x13f/0x170 [ 428.832603] ? get_anon_bdev+0xc0/0xc0 [ 428.836477] sget+0x10b/0x150 [ 428.839577] ? devpts_ptmx_path+0x140/0x140 [ 428.843886] mount_nodev+0x38/0x120 [ 428.847507] devpts_mount+0x34/0x40 [ 428.851137] ? devpts_kill_sb+0x70/0x70 [ 428.855113] legacy_get_tree+0x12f/0x260 [ 428.859179] ? security_fs_context_validate+0x80/0xa0 [ 428.864360] vfs_get_tree+0x1cb/0x5c0 [ 428.868148] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 428.872895] do_mount+0x82a/0x1ff0 [ 428.876447] ? lock_release+0xa10/0xa10 [ 428.880422] ? copy_mount_string+0x40/0x40 [ 428.884662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.890201] ? _copy_from_user+0xdf/0x150 [ 428.894341] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.899883] ? copy_mount_options+0x315/0x430 [ 428.904386] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.909940] ksys_mount+0x12d/0x140 [ 428.913580] __x64_sys_mount+0xbe/0x150 [ 428.917565] do_syscall_64+0x1b9/0x820 [ 428.921465] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 428.926824] ? syscall_return_slowpath+0x5e0/0x5e0 [ 428.931739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.936581] ? trace_hardirqs_on_caller+0x310/0x310 [ 428.941983] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 428.947013] ? prepare_exit_to_usermode+0x291/0x3b0 [ 428.952040] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.956880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.962058] RIP: 0033:0x457569 [ 428.965239] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.984578] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.992294] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 428.999557] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 429.006816] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 05:05:59 executing program 4: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:59 executing program 3 (fault-call:1 fault-nth:27): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 429.014079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 429.021336] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:59 executing program 2: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:59 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:59 executing program 5: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) [ 429.118525] FAULT_INJECTION: forcing a failure. [ 429.118525] name failslab, interval 1, probability 0, space 0, times 0 [ 429.137323] CPU: 0 PID: 13781 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 429.145965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.155333] Call Trace: [ 429.157948] dump_stack+0x244/0x39d [ 429.161606] ? dump_stack_print_info.cold.1+0x20/0x20 [ 429.166830] should_fail.cold.4+0xa/0x17 [ 429.170914] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 429.176037] ? save_stack+0x43/0xd0 [ 429.179672] ? kasan_kmalloc+0xc7/0xe0 [ 429.183574] ? kmem_cache_alloc_trace+0x152/0x750 [ 429.188426] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 429.193624] ? __list_lru_init+0x4d6/0x840 [ 429.197869] ? graph_lock+0x270/0x270 [ 429.201672] ? mount_nodev+0x38/0x120 [ 429.205474] ? devpts_mount+0x34/0x40 [ 429.209285] ? legacy_get_tree+0x12f/0x260 [ 429.213536] ? vfs_get_tree+0x1cb/0x5c0 [ 429.217511] ? do_mount+0x82a/0x1ff0 [ 429.221227] ? ksys_mount+0x12d/0x140 [ 429.225033] ? find_held_lock+0x36/0x1c0 [ 429.229104] ? __lock_is_held+0xb5/0x140 [ 429.233190] ? perf_trace_sched_process_exec+0x860/0x860 [ 429.238659] __should_failslab+0x124/0x180 [ 429.242905] should_failslab+0x9/0x14 [ 429.246712] kmem_cache_alloc_trace+0x2d7/0x750 [ 429.251392] ? __kmalloc_node+0x3c/0x70 [ 429.255375] ? __kmalloc_node+0x3c/0x70 [ 429.259370] ? rcu_read_lock_sched_held+0x14f/0x180 [ 429.264426] __memcg_init_list_lru_node+0x185/0x2d0 [ 429.269442] ? kvfree_rcu+0x20/0x20 [ 429.273072] ? __kmalloc_node+0x50/0x70 [ 429.277055] __list_lru_init+0x4d6/0x840 [ 429.281133] ? list_lru_destroy+0x500/0x500 [ 429.285459] ? up_write+0x7b/0x220 [ 429.289006] ? down_read+0x120/0x120 [ 429.292728] ? init_wait_entry+0x1c0/0x1c0 [ 429.296961] ? prealloc_shrinker+0x172/0x340 [ 429.301392] alloc_super+0x933/0xb40 [ 429.305129] ? destroy_unused_super.part.10+0x110/0x110 [ 429.310497] ? sget_userns+0x17c/0x850 [ 429.314410] ? lock_downgrade+0x900/0x900 [ 429.318570] ? kasan_check_read+0x11/0x20 [ 429.322724] ? do_raw_spin_trylock+0x270/0x270 [ 429.327317] ? find_held_lock+0x36/0x1c0 [ 429.331409] sget_userns+0x278/0x850 [ 429.335128] ? get_anon_bdev+0xc0/0xc0 [ 429.339029] ? vfs_get_super+0x270/0x270 [ 429.343099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.348641] ? check_preemption_disabled+0x48/0x280 [ 429.353672] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.359244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.364787] ? ns_capable_common+0x13f/0x170 [ 429.369211] ? get_anon_bdev+0xc0/0xc0 [ 429.373108] sget+0x10b/0x150 [ 429.376225] ? devpts_ptmx_path+0x140/0x140 [ 429.380548] mount_nodev+0x38/0x120 [ 429.384180] devpts_mount+0x34/0x40 [ 429.387813] ? devpts_kill_sb+0x70/0x70 [ 429.391796] legacy_get_tree+0x12f/0x260 [ 429.395865] ? security_fs_context_validate+0x80/0xa0 [ 429.401065] vfs_get_tree+0x1cb/0x5c0 [ 429.404870] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 429.409637] do_mount+0x82a/0x1ff0 [ 429.413181] ? lock_release+0xa10/0xa10 [ 429.417169] ? copy_mount_string+0x40/0x40 [ 429.421431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.426972] ? _copy_from_user+0xdf/0x150 [ 429.431131] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.436678] ? copy_mount_options+0x315/0x430 [ 429.441182] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.446727] ksys_mount+0x12d/0x140 [ 429.450376] __x64_sys_mount+0xbe/0x150 [ 429.454382] do_syscall_64+0x1b9/0x820 [ 429.458281] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 429.463662] ? syscall_return_slowpath+0x5e0/0x5e0 [ 429.468594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.473443] ? trace_hardirqs_on_caller+0x310/0x310 [ 429.478469] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 429.483490] ? prepare_exit_to_usermode+0x291/0x3b0 [ 429.488512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.493377] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.498572] RIP: 0033:0x457569 [ 429.501778] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 429.520685] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 429.528404] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 429.535673] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 429.542939] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 429.550469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 429.557732] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:05:59 executing program 4: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:59 executing program 0: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:59 executing program 2: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:05:59 executing program 3 (fault-call:1 fault-nth:28): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) 05:05:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x101, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x3, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 05:05:59 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0x71) [ 429.766356] FAULT_INJECTION: forcing a failure. [ 429.766356] name failslab, interval 1, probability 0, space 0, times 0 05:05:59 executing program 2: creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xff60}, 0xe3c7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) ioprio_get$uid(0x3, 0x0) recvfrom$packet(r0, &(0x7f0000000440)=""/91, 0x5b, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = getegid() chown(&(0x7f0000000000)='./file0\x00', r1, r2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000005c0)={0x0, &(0x7f0000000580)}) socket$alg(0x26, 0x5, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000300), 0x4) mount(&(0x7f0000000040)=@nullb='::,.:nullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") 05:05:59 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x0, [0xfffffffe]}) close(r1) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x0, 0x0, 0x8001, 0x0, 0x10001, 0x0, 0x0, 0xff}, 0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000cc0)={0x0, 0x1, 0x89}, 0x8) 05:05:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x101, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x3, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 05:05:59 executing program 4: rt_sigaction(0x9, &(0x7f0000000100)={&(0x7f0000000080)="44dbe4c4e17c10bb4c2f80a366f3ae660f383b8e8323000083f06d660f2837c4a3790506da41f90fdf29a1a36e7abf8ef35e78", {}, 0x0, &(0x7f00000000c0)="8fc810ecda062e460f0ff694c4a2218c76f1c402cd0a620a8fc95899c8673e0f127cf0a7c4a17b118b00d00000c4a1a1147a00dece0f0f7ac19a"}, &(0x7f00000001c0)={&(0x7f0000000140)="c4623d3b53f38fc978e388ed000000c441ddfa570f660fe03b45d9c8c4815171f332c4c28d8e1cfec442d537cbc40189edbc59a7e20000f0440fba789975", {}, 0x0, &(0x7f0000000180)="36460f38cb592e440f458600000080f30fbd5f9e81f900000000360f01dcc0c9d536f001600bc4219458a601000000f2430f5f710e430fdd7a00"}, 0x8, &(0x7f0000000200)) [ 429.909983] CPU: 1 PID: 13798 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 429.918609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.927972] Call Trace: [ 429.930580] dump_stack+0x244/0x39d [ 429.934231] ? dump_stack_print_info.cold.1+0x20/0x20 [ 429.939971] should_fail.cold.4+0xa/0x17 [ 429.944058] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 429.949193] ? save_stack+0x43/0xd0 [ 429.952848] ? kasan_kmalloc+0xc7/0xe0 05:05:59 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 429.956752] ? kmem_cache_alloc_trace+0x152/0x750 [ 429.959296] libceph: parse_ips bad ip '::,.:nullb' [ 429.961601] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 429.961616] ? __list_lru_init+0x4d6/0x840 [ 429.961635] ? graph_lock+0x270/0x270 [ 429.961653] ? mount_nodev+0x38/0x120 [ 429.983575] ? devpts_mount+0x34/0x40 [ 429.987386] ? legacy_get_tree+0x12f/0x260 [ 429.991626] ? vfs_get_tree+0x1cb/0x5c0 [ 429.995614] ? do_mount+0x82a/0x1ff0 [ 429.999352] ? ksys_mount+0x12d/0x140 [ 430.003179] ? find_held_lock+0x36/0x1c0 05:06:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x101, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x3, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) [ 430.007262] ? __lock_is_held+0xb5/0x140 [ 430.011369] ? perf_trace_sched_process_exec+0x860/0x860 [ 430.016858] __should_failslab+0x124/0x180 [ 430.021113] should_failslab+0x9/0x14 [ 430.024931] kmem_cache_alloc_trace+0x2d7/0x750 [ 430.029622] ? __kmalloc_node+0x3c/0x70 [ 430.033611] ? __kmalloc_node+0x3c/0x70 [ 430.037597] ? rcu_read_lock_sched_held+0x14f/0x180 [ 430.042641] __memcg_init_list_lru_node+0x185/0x2d0 [ 430.047886] ? kvfree_rcu+0x20/0x20 [ 430.051535] ? __kmalloc_node+0x50/0x70 [ 430.055532] __list_lru_init+0x4d6/0x840 05:06:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x101, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x3, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) [ 430.059616] ? list_lru_destroy+0x500/0x500 [ 430.063962] ? up_write+0x7b/0x220 [ 430.067523] ? down_read+0x120/0x120 [ 430.071260] ? init_wait_entry+0x1c0/0x1c0 [ 430.075507] ? prealloc_shrinker+0x172/0x340 [ 430.079941] alloc_super+0x933/0xb40 [ 430.083677] ? destroy_unused_super.part.10+0x110/0x110 [ 430.089049] ? sget_userns+0x17c/0x850 [ 430.092954] ? lock_downgrade+0x900/0x900 [ 430.097123] ? kasan_check_read+0x11/0x20 [ 430.101288] ? do_raw_spin_trylock+0x270/0x270 [ 430.105896] ? find_held_lock+0x36/0x1c0 [ 430.109985] sget_userns+0x278/0x850 [ 430.113715] ? get_anon_bdev+0xc0/0xc0 [ 430.117619] ? vfs_get_super+0x270/0x270 [ 430.121695] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.127246] ? check_preemption_disabled+0x48/0x280 [ 430.132284] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 430.137860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.143433] ? ns_capable_common+0x13f/0x170 [ 430.147840] ? get_anon_bdev+0xc0/0xc0 [ 430.151715] sget+0x10b/0x150 [ 430.154824] ? devpts_ptmx_path+0x140/0x140 [ 430.159144] mount_nodev+0x38/0x120 [ 430.162771] devpts_mount+0x34/0x40 [ 430.166407] ? devpts_kill_sb+0x70/0x70 [ 430.170380] legacy_get_tree+0x12f/0x260 [ 430.174429] ? security_fs_context_validate+0x80/0xa0 [ 430.179612] vfs_get_tree+0x1cb/0x5c0 [ 430.183411] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 430.188157] do_mount+0x82a/0x1ff0 [ 430.191694] ? lock_release+0xa10/0xa10 [ 430.195662] ? copy_mount_string+0x40/0x40 [ 430.199919] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.205461] ? _copy_from_user+0xdf/0x150 [ 430.209608] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.215137] ? copy_mount_options+0x315/0x430 [ 430.219622] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.225154] ksys_mount+0x12d/0x140 [ 430.228789] __x64_sys_mount+0xbe/0x150 [ 430.232762] do_syscall_64+0x1b9/0x820 [ 430.236655] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.242008] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.246936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.251773] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.256781] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.261787] ? prepare_exit_to_usermode+0x291/0x3b0 [ 430.266853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.271713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.276907] RIP: 0033:0x457569 [ 430.280101] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.299005] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.306715] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 430.313973] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 430.321232] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 430.328494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 430.335777] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:06:00 executing program 0: r0 = socket(0x10, 0x20000000802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getenv(0x4201, r4, 0x3, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r5 = eventfd2(0x0, 0x0) eventfd(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r5}) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r6 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) write(r0, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 05:06:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0x0, 0x0, 'client1\x00', 0x0, "88fa66706fcaf5ae", "6e70f37bcf4b6f074cf3881ecd186fb43fa941b039735b8d2f8b9647683f0c31"}) 05:06:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x39, &(0x7f0000001600)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x100000, 0xffffff11, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dc]}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 05:06:00 executing program 3 (fault-call:1 fault-nth:29): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 430.462969] FAULT_INJECTION: forcing a failure. [ 430.462969] name failslab, interval 1, probability 0, space 0, times 0 [ 430.474515] CPU: 0 PID: 13835 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 430.483105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.492466] Call Trace: [ 430.495066] dump_stack+0x244/0x39d [ 430.498707] ? dump_stack_print_info.cold.1+0x20/0x20 [ 430.503907] should_fail.cold.4+0xa/0x17 [ 430.507968] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 430.513098] ? save_stack+0x43/0xd0 [ 430.516719] ? kasan_kmalloc+0xc7/0xe0 [ 430.520600] ? kmem_cache_alloc_trace+0x152/0x750 [ 430.525431] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 430.530619] ? __list_lru_init+0x4d6/0x840 [ 430.534844] ? graph_lock+0x270/0x270 [ 430.538635] ? mount_nodev+0x38/0x120 [ 430.542432] ? devpts_mount+0x34/0x40 [ 430.546222] ? legacy_get_tree+0x12f/0x260 [ 430.550451] ? vfs_get_tree+0x1cb/0x5c0 [ 430.554415] ? do_mount+0x82a/0x1ff0 [ 430.558140] ? ksys_mount+0x12d/0x140 [ 430.561935] ? find_held_lock+0x36/0x1c0 [ 430.565995] ? __lock_is_held+0xb5/0x140 [ 430.570070] ? perf_trace_sched_process_exec+0x860/0x860 [ 430.575517] __should_failslab+0x124/0x180 [ 430.579748] should_failslab+0x9/0x14 [ 430.583542] kmem_cache_alloc_trace+0x2d7/0x750 [ 430.588199] ? __kmalloc_node+0x3c/0x70 [ 430.592162] ? __kmalloc_node+0x3c/0x70 [ 430.596129] ? rcu_read_lock_sched_held+0x14f/0x180 [ 430.601141] __memcg_init_list_lru_node+0x185/0x2d0 [ 430.606150] ? kvfree_rcu+0x20/0x20 [ 430.609778] ? __kmalloc_node+0x50/0x70 [ 430.613746] __list_lru_init+0x4d6/0x840 [ 430.617799] ? list_lru_destroy+0x500/0x500 [ 430.622112] ? up_write+0x7b/0x220 [ 430.625644] ? down_read+0x120/0x120 [ 430.629352] ? init_wait_entry+0x1c0/0x1c0 [ 430.633576] ? prealloc_shrinker+0x172/0x340 [ 430.637983] alloc_super+0x933/0xb40 [ 430.641698] ? destroy_unused_super.part.10+0x110/0x110 [ 430.647048] ? sget_userns+0x17c/0x850 [ 430.650932] ? lock_downgrade+0x900/0x900 [ 430.655083] ? kasan_check_read+0x11/0x20 [ 430.659313] ? do_raw_spin_trylock+0x270/0x270 [ 430.663886] ? find_held_lock+0x36/0x1c0 [ 430.667951] sget_userns+0x278/0x850 [ 430.671655] ? get_anon_bdev+0xc0/0xc0 [ 430.675547] ? vfs_get_super+0x270/0x270 [ 430.679611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.685138] ? check_preemption_disabled+0x48/0x280 [ 430.690159] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 430.695709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.701250] ? ns_capable_common+0x13f/0x170 [ 430.705659] ? get_anon_bdev+0xc0/0xc0 [ 430.709541] sget+0x10b/0x150 [ 430.712644] ? devpts_ptmx_path+0x140/0x140 [ 430.716956] mount_nodev+0x38/0x120 [ 430.720574] devpts_mount+0x34/0x40 [ 430.724205] ? devpts_kill_sb+0x70/0x70 [ 430.728173] legacy_get_tree+0x12f/0x260 [ 430.732230] ? security_fs_context_validate+0x80/0xa0 [ 430.737411] vfs_get_tree+0x1cb/0x5c0 [ 430.741209] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 430.745957] do_mount+0x82a/0x1ff0 [ 430.749488] ? lock_release+0xa10/0xa10 [ 430.753459] ? copy_mount_string+0x40/0x40 [ 430.757706] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.763233] ? _copy_from_user+0xdf/0x150 [ 430.767383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.773399] ? copy_mount_options+0x315/0x430 [ 430.777892] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.783435] ksys_mount+0x12d/0x140 [ 430.787058] __x64_sys_mount+0xbe/0x150 [ 430.791026] do_syscall_64+0x1b9/0x820 [ 430.794908] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.800269] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.805190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.810030] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.815036] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.820045] ? prepare_exit_to_usermode+0x291/0x3b0 [ 430.825055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.829893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.835070] RIP: 0033:0x457569 [ 430.838266] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.857184] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 05:06:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000e2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x2) flock(r1, 0x1) r3 = gettid() readv(r1, &(0x7f0000616fa0)=[{&(0x7f0000e4bfb4)=""/57, 0x39}], 0x1) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f00002cb000)={0x0, r3}) recvmsg(r5, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r5) tkill(r3, 0x16) 05:06:00 executing program 3 (fault-call:1 fault-nth:30): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 430.864881] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 430.872151] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 430.879410] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 430.886670] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 430.893937] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 05:06:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x4, @rand_addr}]}}}]}, 0x38}}, 0x0) 05:06:01 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r0, 0x80247008, &(0x7f0000000080)) 05:06:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timerfd_settime(r1, 0x3, &(0x7f0000000100)={{}, {r2}}, &(0x7f0000000140)) read(r1, &(0x7f0000a16000)=""/71, 0x47) [ 431.021641] FAULT_INJECTION: forcing a failure. [ 431.021641] name failslab, interval 1, probability 0, space 0, times 0 [ 431.054060] CPU: 0 PID: 13843 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 431.062690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.072062] Call Trace: [ 431.074675] dump_stack+0x244/0x39d [ 431.078331] ? dump_stack_print_info.cold.1+0x20/0x20 [ 431.083559] should_fail.cold.4+0xa/0x17 [ 431.087644] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 431.092876] ? save_stack+0x43/0xd0 [ 431.096511] ? kasan_kmalloc+0xc7/0xe0 [ 431.100406] ? kmem_cache_alloc_trace+0x152/0x750 [ 431.105277] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 431.110478] ? __list_lru_init+0x4d6/0x840 [ 431.114735] ? graph_lock+0x270/0x270 [ 431.118545] ? mount_nodev+0x38/0x120 05:06:01 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000000003, 0x1) getsockopt(r0, 0xff, 0x1, &(0x7f0000001180)=""/166, &(0x7f0000000040)=0xa6) 05:06:01 executing program 1: open(&(0x7f0000f9aff8)='./file0\x00', 0x8000000000141046, 0x0) mount(&(0x7f0000ae2d7d), &(0x7f0000851000)='./file0\x00', &(0x7f0000a6f000)='nfs4\x00', 0x0, &(0x7f0000dedf2f)='v2') 05:06:01 executing program 1: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) [ 431.122364] ? devpts_mount+0x34/0x40 [ 431.126176] ? legacy_get_tree+0x12f/0x260 [ 431.130420] ? vfs_get_tree+0x1cb/0x5c0 [ 431.134406] ? do_mount+0x82a/0x1ff0 [ 431.138132] ? ksys_mount+0x12d/0x140 [ 431.141952] ? find_held_lock+0x36/0x1c0 [ 431.146032] ? __lock_is_held+0xb5/0x140 [ 431.150129] ? perf_trace_sched_process_exec+0x860/0x860 [ 431.155613] __should_failslab+0x124/0x180 [ 431.159867] should_failslab+0x9/0x14 [ 431.163678] kmem_cache_alloc_trace+0x2d7/0x750 [ 431.168360] ? __kmalloc_node+0x3c/0x70 [ 431.172346] ? __kmalloc_node+0x3c/0x70 [ 431.176333] ? rcu_read_lock_sched_held+0x14f/0x180 [ 431.181376] __memcg_init_list_lru_node+0x185/0x2d0 [ 431.186415] ? kvfree_rcu+0x20/0x20 [ 431.190053] ? __kmalloc_node+0x50/0x70 [ 431.194035] __list_lru_init+0x4d6/0x840 [ 431.198101] ? list_lru_destroy+0x500/0x500 [ 431.202425] ? up_write+0x7b/0x220 [ 431.205964] ? down_read+0x120/0x120 [ 431.209677] ? init_wait_entry+0x1c0/0x1c0 [ 431.213904] ? prealloc_shrinker+0x172/0x340 [ 431.218323] alloc_super+0x933/0xb40 [ 431.222060] ? destroy_unused_super.part.10+0x110/0x110 [ 431.227415] ? sget_userns+0x17c/0x850 [ 431.231298] ? lock_downgrade+0x900/0x900 [ 431.235452] ? kasan_check_read+0x11/0x20 [ 431.239595] ? do_raw_spin_trylock+0x270/0x270 [ 431.244174] ? find_held_lock+0x36/0x1c0 [ 431.248253] sget_userns+0x278/0x850 [ 431.251959] ? get_anon_bdev+0xc0/0xc0 [ 431.255848] ? vfs_get_super+0x270/0x270 [ 431.259904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.265438] ? check_preemption_disabled+0x48/0x280 [ 431.270458] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 431.276016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.281547] ? ns_capable_common+0x13f/0x170 [ 431.285966] ? get_anon_bdev+0xc0/0xc0 [ 431.289860] sget+0x10b/0x150 [ 431.292975] ? devpts_ptmx_path+0x140/0x140 [ 431.297292] mount_nodev+0x38/0x120 [ 431.300920] devpts_mount+0x34/0x40 [ 431.304543] ? devpts_kill_sb+0x70/0x70 [ 431.308521] legacy_get_tree+0x12f/0x260 [ 431.312578] ? security_fs_context_validate+0x80/0xa0 [ 431.317763] vfs_get_tree+0x1cb/0x5c0 [ 431.321557] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 431.326310] do_mount+0x82a/0x1ff0 [ 431.329848] ? lock_release+0xa10/0xa10 [ 431.333822] ? copy_mount_string+0x40/0x40 [ 431.338065] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.343597] ? _copy_from_user+0xdf/0x150 [ 431.347745] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.353289] ? copy_mount_options+0x315/0x430 [ 431.357790] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.363328] ksys_mount+0x12d/0x140 [ 431.366953] __x64_sys_mount+0xbe/0x150 [ 431.370929] do_syscall_64+0x1b9/0x820 [ 431.374811] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.380174] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.385094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.389933] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.394942] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.399954] ? prepare_exit_to_usermode+0x291/0x3b0 [ 431.404977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.409829] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.415014] RIP: 0033:0x457569 [ 431.418203] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.437116] RSP: 002b:00007f1aa3421c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.444819] RAX: ffffffffffffffda RBX: 00007f1aa3421c90 RCX: 0000000000457569 [ 431.452091] RDX: 00000000200002c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 431.459354] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 431.466618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1aa34226d4 [ 431.473889] R13: 00000000004c2b0c R14: 00000000004d4180 R15: 0000000000000003 [ 431.484282] ================================================================== [ 431.492016] BUG: KASAN: stack-out-of-bounds in locks_remove_flock+0x33c/0x350 [ 431.499304] Read of size 8 at addr ffff880185817698 by task syz-executor4/13838 [ 431.506754] [ 431.508402] CPU: 0 PID: 13838 Comm: syz-executor4 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 431.516984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.526339] Call Trace: [ 431.528931] dump_stack+0x244/0x39d [ 431.532564] ? dump_stack_print_info.cold.1+0x20/0x20 [ 431.537749] ? printk+0xa7/0xcf [ 431.541023] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 431.545782] print_address_description.cold.7+0x9/0x1ff [ 431.551145] kasan_report.cold.8+0x242/0x309 [ 431.555546] ? locks_remove_flock+0x33c/0x350 [ 431.560043] __asan_report_load8_noabort+0x14/0x20 [ 431.564968] locks_remove_flock+0x33c/0x350 [ 431.569287] ? flock_lock_inode+0x11c0/0x11c0 [ 431.573780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.579311] ? check_preemption_disabled+0x48/0x280 [ 431.584320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.589858] ? debug_smp_processor_id+0x1c/0x20 [ 431.594518] ? perf_trace_lock+0x14d/0x7a0 [ 431.598753] ? debug_smp_processor_id+0x1c/0x20 [ 431.603414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.608954] ? debug_smp_processor_id+0x1c/0x20 [ 431.613617] ? perf_trace_lock+0x14d/0x7a0 [ 431.617858] ? lock_is_held_type+0x210/0x210 [ 431.622267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.627808] locks_remove_file+0x148/0x5c0 [ 431.632042] ? fcntl_setlk+0xfc0/0xfc0 [ 431.635987] ? fsnotify_first_mark+0x350/0x350 [ 431.640564] ? __fsnotify_parent+0xcc/0x420 [ 431.644885] ? perf_trace_sched_process_exec+0x860/0x860 [ 431.650333] ? fsnotify+0xf20/0xf20 [ 431.653960] ? __might_sleep+0x95/0x190 [ 431.657932] __fput+0x2f0/0xa70 [ 431.661227] ? get_max_files+0x20/0x20 [ 431.665114] ? trace_hardirqs_on+0xbd/0x310 [ 431.669432] ? kasan_check_read+0x11/0x20 [ 431.673573] ? task_work_run+0x1af/0x2a0 [ 431.677628] ? trace_hardirqs_off_caller+0x300/0x300 [ 431.682731] ? kernel_text_address+0x79/0xf0 [ 431.687144] ____fput+0x15/0x20 [ 431.690418] task_work_run+0x1e8/0x2a0 [ 431.694308] ? task_work_cancel+0x240/0x240 [ 431.698637] get_signal+0x1550/0x1970 [ 431.702434] ? locks_free_lock+0x295/0x420 [ 431.706663] ? do_syscall_64+0x1b9/0x820 [ 431.710722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.716094] ? ptrace_notify+0x130/0x130 [ 431.720155] ? kasan_check_read+0x11/0x20 [ 431.724305] ? do_raw_spin_unlock+0xa7/0x330 [ 431.728719] ? trace_hardirqs_on+0x310/0x310 [ 431.733132] ? trace_hardirqs_off+0xb8/0x310 [ 431.737540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.743071] ? check_preemption_disabled+0x48/0x280 [ 431.748092] do_signal+0x9c/0x21c0 [ 431.751630] ? locks_free_lock+0x295/0x420 [ 431.755876] ? setup_sigcontext+0x7d0/0x7d0 [ 431.760202] ? kmem_cache_free+0x24f/0x290 [ 431.764522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.770052] ? exit_to_usermode_loop+0x8c/0x380 [ 431.775162] ? exit_to_usermode_loop+0x8c/0x380 [ 431.779842] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 431.784424] ? trace_hardirqs_on+0xbd/0x310 [ 431.788736] ? kick_process+0xed/0x170 [ 431.792618] ? do_syscall_64+0x6be/0x820 [ 431.796678] ? trace_hardirqs_off_caller+0x300/0x300 [ 431.801775] ? task_work_add+0x123/0x1e0 [ 431.805832] ? cpumask_weight.constprop.5+0x3f/0x3f [ 431.810850] exit_to_usermode_loop+0x2e5/0x380 [ 431.815432] ? __bpf_trace_sys_exit+0x30/0x30 [ 431.819921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.825451] ? fput+0x130/0x1a0 [ 431.828731] ? __x64_sys_flock+0x2bd/0x350 [ 431.832965] do_syscall_64+0x6be/0x820 [ 431.836845] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.842209] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.847130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.851972] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.856984] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.861995] ? prepare_exit_to_usermode+0x291/0x3b0 [ 431.867009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.871857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.877043] RIP: 0033:0x457569 [ 431.880229] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.899124] RSP: 002b:00007f5585e2cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 431.906823] RAX: fffffffffffffe00 RBX: 0000000000000002 RCX: 0000000000457569 [ 431.914085] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 431.921344] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 431.928603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5585e2d6d4 [ 431.935864] R13: 00000000004bdd9e R14: 00000000004ccdb8 R15: 00000000ffffffff [ 431.943144] [ 431.944767] The buggy address belongs to the page: [ 431.949685] page:ffffea00061605c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 431.957816] flags: 0x2fffc0000000000() [ 431.961698] raw: 02fffc0000000000 0000000000000000 ffffffff06160101 0000000000000000 [ 431.969574] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 431.977442] page dumped because: kasan: bad access detected [ 431.983138] [ 431.984762] Memory state around the buggy address: [ 431.989683] ffff880185817580: f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.997036] ffff880185817600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.004388] >ffff880185817680: 00 00 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 [ 432.011735] ^ [ 432.015875] ffff880185817700: 00 00 00 f1 f1 f1 f1 00 00 f2 f2 f2 f2 f2 f2 f8 [ 432.023225] ffff880185817780: f2 f2 f2 f2 f2 f2 f2 00 f2 f2 f2 00 00 00 00 00 [ 432.030570] ================================================================== [ 432.037916] Disabling lock debugging due to kernel taint [ 432.052612] Kernel panic - not syncing: panic_on_warn set ... [ 432.058550] CPU: 1 PID: 13838 Comm: syz-executor4 Tainted: G B 4.20.0-rc1-next-20181107+ #107 [ 432.068515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.068774] kobject: 'loop3' (00000000f68dcb64): kobject_uevent_env [ 432.077863] Call Trace: [ 432.077883] dump_stack+0x244/0x39d [ 432.077900] ? dump_stack_print_info.cold.1+0x20/0x20 [ 432.077923] panic+0x2ad/0x55c [ 432.084431] kobject: 'loop3' (00000000f68dcb64): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 432.086877] ? add_taint.cold.5+0x16/0x16 [ 432.086892] ? preempt_schedule+0x4d/0x60 [ 432.086911] ? ___preempt_schedule+0x16/0x18 [ 432.120975] ? trace_hardirqs_on+0xb4/0x310 [ 432.125292] kasan_end_report+0x47/0x4f [ 432.129249] kasan_report.cold.8+0x76/0x309 [ 432.133558] ? locks_remove_flock+0x33c/0x350 [ 432.138039] __asan_report_load8_noabort+0x14/0x20 [ 432.142955] locks_remove_flock+0x33c/0x350 [ 432.147262] ? flock_lock_inode+0x11c0/0x11c0 [ 432.151761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.157288] ? check_preemption_disabled+0x48/0x280 [ 432.162291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.167823] ? debug_smp_processor_id+0x1c/0x20 [ 432.172475] ? perf_trace_lock+0x14d/0x7a0 [ 432.176705] ? debug_smp_processor_id+0x1c/0x20 [ 432.181359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.186893] ? debug_smp_processor_id+0x1c/0x20 [ 432.191554] ? perf_trace_lock+0x14d/0x7a0 [ 432.195777] ? lock_is_held_type+0x210/0x210 [ 432.200174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.205707] locks_remove_file+0x148/0x5c0 [ 432.209927] ? fcntl_setlk+0xfc0/0xfc0 [ 432.213802] ? fsnotify_first_mark+0x350/0x350 [ 432.218390] ? __fsnotify_parent+0xcc/0x420 [ 432.222711] ? perf_trace_sched_process_exec+0x860/0x860 [ 432.228152] ? fsnotify+0xf20/0xf20 [ 432.231767] ? __might_sleep+0x95/0x190 [ 432.235731] __fput+0x2f0/0xa70 [ 432.239011] ? get_max_files+0x20/0x20 [ 432.242883] ? trace_hardirqs_on+0xbd/0x310 [ 432.247191] ? kasan_check_read+0x11/0x20 [ 432.251326] ? task_work_run+0x1af/0x2a0 [ 432.255371] ? trace_hardirqs_off_caller+0x300/0x300 [ 432.260461] ? kernel_text_address+0x79/0xf0 [ 432.264856] ____fput+0x15/0x20 [ 432.268122] task_work_run+0x1e8/0x2a0 [ 432.272000] ? task_work_cancel+0x240/0x240 [ 432.276324] get_signal+0x1550/0x1970 [ 432.280118] ? locks_free_lock+0x295/0x420 [ 432.284345] ? do_syscall_64+0x1b9/0x820 [ 432.288401] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.293754] ? ptrace_notify+0x130/0x130 [ 432.297814] ? kasan_check_read+0x11/0x20 [ 432.301943] ? do_raw_spin_unlock+0xa7/0x330 [ 432.306336] ? trace_hardirqs_on+0x310/0x310 [ 432.310733] ? trace_hardirqs_off+0xb8/0x310 [ 432.315137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.320681] ? check_preemption_disabled+0x48/0x280 [ 432.325687] do_signal+0x9c/0x21c0 [ 432.329211] ? locks_free_lock+0x295/0x420 [ 432.333429] ? setup_sigcontext+0x7d0/0x7d0 [ 432.337744] ? kmem_cache_free+0x24f/0x290 [ 432.341976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.347532] ? exit_to_usermode_loop+0x8c/0x380 [ 432.352187] ? exit_to_usermode_loop+0x8c/0x380 [ 432.356841] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 432.361412] ? trace_hardirqs_on+0xbd/0x310 [ 432.365717] ? kick_process+0xed/0x170 [ 432.369588] ? do_syscall_64+0x6be/0x820 [ 432.373662] ? trace_hardirqs_off_caller+0x300/0x300 [ 432.378774] ? task_work_add+0x123/0x1e0 [ 432.382831] ? cpumask_weight.constprop.5+0x3f/0x3f [ 432.387832] exit_to_usermode_loop+0x2e5/0x380 [ 432.392400] ? __bpf_trace_sys_exit+0x30/0x30 [ 432.396877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.402398] ? fput+0x130/0x1a0 [ 432.405668] ? __x64_sys_flock+0x2bd/0x350 [ 432.409890] do_syscall_64+0x6be/0x820 [ 432.413766] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.419137] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.424056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.428881] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.433887] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 432.438889] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.443889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.448723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.453909] RIP: 0033:0x457569 [ 432.457108] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 432.475997] RSP: 002b:00007f5585e2cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 432.483692] RAX: fffffffffffffe00 RBX: 0000000000000002 RCX: 0000000000457569 [ 432.490943] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 432.498200] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 432.505457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5585e2d6d4 [ 432.512708] R13: 00000000004bdd9e R14: 00000000004ccdb8 R15: 00000000ffffffff [ 432.521050] Kernel Offset: disabled [ 432.524675] Rebooting in 86400 seconds..