0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 517.504276] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 517.630349] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x6000) 20:41:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 517.825611] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 517.990164] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 518.111902] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x41, 0x2, 0x70bd27, 0x25dfdbfb, {0x5}, [@generic="2fb6a35296a8bf45947e6c9e8a1bd6cbc330e128aa043334a63dc162e3dd2b2155950aa1ceeff3585dc572c5137852f0211060ae0a14ba6b5bdca4fddf2c3edee92defbf9271a44c1b1d05b76647321ae20c96fb6823f689fc9d7a0645dfce05a01cd4ec1fd006f5dbcc24ed719beba44ae4486dcc3db3bce26ce023e85d272fb6c9a07a779479911ce623e3c07e95c51392f7dc202d3b0830322f"]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) close(r2) creat(&(0x7f0000000000)='./file0\x00', 0x20) close(r1) 20:41:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 518.221337] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 518.328158] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0xff0f}], 0x1, 0x0) close(r2) close(r1) 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 518.437203] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 518.545715] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 518.652962] FAT-fs (loop1): bogus number of reserved sectors [ 518.658920] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 518.768382] FAT-fs (loop1): bogus number of reserved sectors [ 518.774298] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x3) [ 518.883768] FAT-fs (loop1): bogus number of reserved sectors [ 518.889727] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 519.031830] FAT-fs (loop1): bogus number of reserved sectors [ 519.037766] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00r'], 0x4) close(r2) close(r1) 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 519.118070] FAT-fs (loop1): bogus number of reserved sectors [ 519.124010] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 519.215027] FAT-fs (loop1): bogus number of reserved sectors [ 519.220918] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x4000000000000000}], 0x1, 0x0) close(r2) close(r1) 20:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 519.344156] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 519.430299] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 519.546972] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 519.668046] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 519.761757] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 519.881925] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x1100000000000000) 20:41:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,cod']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f857140708fd32f33aee7d3f19e376d4f33e4bec1472c13cf0acd59a9def7797bf131c5b97b8cc179a614c3c289b3bcfc684fad2c8d8b74938c8f09cc120e35fa81d12adffe2701dddab363989d4e1c08000000000000002baaed5ba87d9a833ff29c11796ae91899ffea8f4debba6daf182d330026835598f40c5ee3a6dcca134eb00af249b73a6b482658718a01ab2f1f82f2be25a0fd6e01470900000000000000000000000000000000") r2 = socket(0x1e, 0x4, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000180)={0x9, {{0x2, 0x4e20, @multicast1}}}, 0x88) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r3, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)={'syz0'}, 0x4) close(r3) close(r2) 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,cod']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 519.993464] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 520.022820] FAT-fs (loop1): Unrecognized mount option "cod" or missing value 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,cod']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x4000000000000}], 0x1, 0x0) close(r2) close(r1) [ 520.119828] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 520.140037] FAT-fs (loop1): Unrecognized mount option "cod" or missing value 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 520.253345] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 520.275435] FAT-fs (loop1): Unrecognized mount option "cod" or missing value 20:41:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 520.348675] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 520.368509] FAT-fs (loop1): Unrecognized mount option "codepage" or missing value 20:41:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 520.452946] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 520.481614] FAT-fs (loop1): Unrecognized mount option "codepage" or missing value 20:41:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=8']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 520.600825] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 520.621949] FAT-fs (loop1): Unrecognized mount option "codepage" or missing value 20:41:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a0014") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 520.758920] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 520.819180] FAT-fs (loop1): codepage cp8 not found 20:41:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=8']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 520.974850] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xb3ff000000000000) 20:41:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0xfffffffffffffcfe) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="01017ae4"], 0x4) close(r2) close(r1) [ 521.016196] FAT-fs (loop1): codepage cp8 not found 20:41:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=8']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x100000000000000}], 0x1, 0x0) close(r2) close(r1) 20:41:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40040, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000180), &(0x7f00000001c0)=[0x38, 0x38, 0x0, 0x30, 0x48, 0x40]}, 0x7fffffff}}, @dead_binder_done={0x40086310, 0x3}], 0x4b, 0x0, &(0x7f0000000280)="2d6080557ba518fd280648e557ebaa9adcc69817c83384743ccc924637a63066708122d6efa1acb7a27c8fd9f4fa48aa661f0dc77b421e69a2ace6f299dc3d4005a0443aab3381a3319888"}) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r3, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)={'syz0'}, 0x4) close(r3) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/113, 0x71) close(r2) 20:41:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=85']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 521.196507] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 521.226146] FAT-fs (loop1): codepage cp8 not found 20:41:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=85']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 521.303695] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 521.335309] FAT-fs (loop1): codepage cp85 not found 20:41:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 521.420576] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 521.469079] FAT-fs (loop1): codepage cp85 not found 20:41:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=85']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a0014") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 521.597596] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 521.634285] FAT-fs (loop1): codepage cp85 not found 20:41:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 521.757152] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 521.793268] FAT-fs (loop1): bogus number of reserved sectors [ 521.799176] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 521.911662] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 521.933516] FAT-fs (loop1): bogus number of reserved sectors [ 521.939417] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x200000000000000}], 0x1, 0x0) close(r2) close(r1) 20:41:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40000, 0x0) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x90, 0x0, 0x2}, 0xd2fb}}, 0x18) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r3, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="003bcc36"], 0x4) r4 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) close(r3) close(r2) 20:41:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x400300) [ 522.058829] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 522.083214] FAT-fs (loop1): bogus number of reserved sectors [ 522.089129] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 522.197915] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 522.220512] FAT-fs (loop1): bogus number of reserved sectors [ 522.226426] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 522.288604] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 522.305636] FAT-fs (loop1): bogus number of reserved sectors [ 522.311617] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 522.429685] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 522.453994] FAT-fs (loop1): bogus number of reserved sectors [ 522.459898] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a0014") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 522.545039] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 522.563117] FAT-fs (loop1): bogus number of reserved sectors [ 522.569020] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 522.711335] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 522.736705] FAT-fs (loop1): bogus number of reserved sectors [ 522.742601] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x2000000}], 0x1, 0x0) close(r2) close(r1) [ 522.824426] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 522.845370] FAT-fs (loop1): bogus number of reserved sectors [ 522.851278] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00dac890c6920701a3bcf2a629f5b17b8fc6497dd7458161f7896eedd1fd27d85ee9649545d14e782ea00a385c4f1dedf543294585b841fb"], 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) getgroups(0x6, &(0x7f0000000200)=[0xee01, 0xee00, 0xee00, 0x0, 0xee00, 0xee01]) lchown(&(0x7f0000000000)='./file0\x00', r3, r4) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x4e24, @multicast2}], 0x10) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r6}}, 0xc) close(r1) 20:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 522.967359] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 522.998403] FAT-fs (loop1): bogus number of reserved sectors [ 523.004339] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 523.092750] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 523.111027] FAT-fs (loop1): bogus number of reserved sectors [ 523.116922] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x1d00) 20:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 523.201314] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 523.227334] FAT-fs (loop1): bogus number of reserved sectors [ 523.233253] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 523.341028] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 523.363222] FAT-fs (loop1): invalid media value (0x00) [ 523.368582] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 523.465205] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 523.486311] FAT-fs (loop1): invalid media value (0x00) [ 523.491653] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 523.606661] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 523.637301] FAT-fs (loop1): invalid media value (0x00) [ 523.642829] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0xff0f000000000000}], 0x1, 0x0) close(r2) close(r1) [ 523.752079] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 523.775088] FAT-fs (loop1): invalid media value (0x00) [ 523.780466] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0x51}, &(0x7f0000000140)=0x8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) r4 = gettid() sched_getscheduler(r4) getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f0000000180)=""/1, 0x1) sendmsg$netlink(r1, &(0x7f00003aefc8)={0x0, 0xffffffffffffff7d, &(0x7f0000847000), 0x0, &(0x7f000048a000), 0x0, 0x200000000000000}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000af6213ab3a925d96714c005ad2d5c9ec1b7628831645596a1fc2e6b5fb0508fa65fb2a58bdbc62cf65ed38f81d30e1802a2a"], 0x4) close(r3) close(r1) 20:41:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 523.897641] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 523.923136] FAT-fs (loop1): invalid media value (0x00) [ 523.928559] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 524.042228] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 524.061384] FAT-fs (loop1): invalid media value (0x00) [ 524.066734] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x600) 20:41:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 524.194272] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 524.226536] FAT-fs (loop1): invalid media value (0x00) [ 524.231923] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 524.414262] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 524.436947] FAT-fs (loop1): invalid media value (0x00) [ 524.442319] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 524.558165] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 524.596761] FAT-fs (loop1): invalid media value (0x00) [ 524.602128] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x400300}], 0x1, 0x0) close(r2) close(r1) 20:41:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e79556cee300"], 0x4) close(r2) fstatfs(r1, &(0x7f0000000080)=""/57) close(r1) 20:41:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 524.746647] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 524.775199] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 524.782380] FAT-fs (loop1): Filesystem has been set read-only 20:41:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 524.869117] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 524.903304] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 524.910476] FAT-fs (loop1): Filesystem has been set read-only 20:41:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 525.000140] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 525.032039] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 525.039213] FAT-fs (loop1): Filesystem has been set read-only 20:41:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 525.141070] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 525.181164] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 20:41:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 525.188414] FAT-fs (loop1): Filesystem has been set read-only 20:41:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xa00) 20:41:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 525.272270] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 525.300006] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 525.307269] FAT-fs (loop1): Filesystem has been set read-only 20:41:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 525.406115] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 525.516022] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x1000000}], 0x1, 0x0) close(r2) close(r1) 20:41:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80001, 0x0) read$FUSE(r3, &(0x7f0000000600), 0x1000) ioctl$KDSETMODE(r3, 0x4b3a, 0x4) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="864a48cffdd7f2271f5838ffd30e96ddfd466d6507be81ce062b9e5f618d0c4a24a609767c798bc8c2bf46375a97dfc8514b5759d2a97c18ea7b0c0f41758efb8cf76459e5591f6e0917486b22626cb85a50204ad83489488393d30cc446dd65a2781f6625cc58e5bbb7fe823c93d48cb18219eae2dc154a14a49b30e8498aeedc85ae82f3950ad523ce865e62d31c4909ea83fff656ff03fa3f2ccb0b1bcba4b3ede72c6e94740426"]) close(r2) close(r1) [ 525.608299] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 525.709371] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 525.742505] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 525.749715] FAT-fs (loop1): Filesystem has been set read-only [ 525.845577] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 525.883472] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 20:41:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 525.890657] FAT-fs (loop1): Filesystem has been set read-only 20:41:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 525.985672] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 525.992890] FAT-fs (loop1): Filesystem has been set read-only 20:41:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 526.075657] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 526.082850] FAT-fs (loop1): Filesystem has been set read-only 20:41:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f7640") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:26 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 526.207363] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 526.214533] FAT-fs (loop1): Filesystem has been set read-only [ 526.285648] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 526.314759] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 526.321961] FAT-fs (loop1): Filesystem has been set read-only 20:41:26 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xe501) 20:41:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:27 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x34000}], 0x1, 0x0) close(r2) close(r1) [ 526.416860] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 526.440310] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 526.447496] FAT-fs (loop1): Filesystem has been set read-only 20:41:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000000)={@remote}, &(0x7f00000000c0)=0x14) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) close(r2) close(r1) [ 526.554530] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:27 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 526.595071] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 526.602220] FAT-fs (loop1): Filesystem has been set read-only 20:41:27 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 526.673235] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 526.704257] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 526.711429] FAT-fs (loop1): Filesystem has been set read-only 20:41:27 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 526.787119] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 526.817693] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 526.824876] FAT-fs (loop1): Filesystem has been set read-only 20:41:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 526.913659] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 526.942230] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 526.949451] FAT-fs (loop1): Filesystem has been set read-only 20:41:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x100000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f7640") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 527.093359] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 527.133069] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 20:41:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 527.140249] FAT-fs (loop1): Filesystem has been set read-only 20:41:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 527.208888] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 527.231222] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 527.238388] FAT-fs (loop1): Filesystem has been set read-only 20:41:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 527.328401] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 527.360808] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 527.368009] FAT-fs (loop1): Filesystem has been set read-only 20:41:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x2500000000000000) 20:41:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x40000000}], 0x1, 0x0) close(r2) close(r1) 20:41:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) close(r2) close(r1) [ 527.459972] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 527.500606] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 527.507764] FAT-fs (loop1): Filesystem has been set read-only 20:41:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 527.570912] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 527.594477] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 527.601639] FAT-fs (loop1): Filesystem has been set read-only 20:41:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 527.671367] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 527.694344] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 527.701519] FAT-fs (loop1): Filesystem has been set read-only 20:41:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 527.778588] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 527.802309] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 527.809512] FAT-fs (loop1): Filesystem has been set read-only 20:41:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 527.876910] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 527.909223] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 527.916410] FAT-fs (loop1): Filesystem has been set read-only 20:41:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f7640") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 528.023984] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 528.064138] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 528.071307] FAT-fs (loop1): Filesystem has been set read-only 20:41:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 528.149467] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 528.172187] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 528.179378] FAT-fs (loop1): Filesystem has been set read-only 20:41:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r1, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0'}, 0x4) close(r1) close(0xffffffffffffffff) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8, {0x5, 0x401, 0x8, 0x407, 0x0, 0x4}, 0x9, 0x7ff}, 0xe) 20:41:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18, 0x4000}], 0x1, 0x0) close(r2) close(r1) [ 528.270079] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 528.305040] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 528.312207] FAT-fs (loop1): Filesystem has been set read-only 20:41:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x19000000) 20:41:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 528.521361] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 528.548111] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 528.555285] FAT-fs (loop1): Filesystem has been set read-only 20:41:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 528.640217] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 528.662174] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 528.669344] FAT-fs (loop1): Filesystem has been set read-only 20:41:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 528.751533] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 528.773395] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 528.780610] FAT-fs (loop1): Filesystem has been set read-only 20:41:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 528.851524] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x300}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 528.897803] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 528.905025] FAT-fs (loop1): Filesystem has been set read-only 20:41:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 529.080535] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 529.125708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 529.132897] FAT-fs (loop1): Filesystem has been set read-only 20:41:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000180)=@req3={0xfffffffffffffffa, 0xa156, 0x3, 0x1, 0x38, 0x3863, 0x5}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x3b, @local, 0x4e24, 0x4, 'ovf\x00', 0x1, 0x4, 0x47}, 0x2c) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) r3 = dup2(r2, r2) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000040)) socketpair(0x15, 0x4, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) close(r2) close(r1) close(r4) 20:41:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) [ 529.247541] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 529.284501] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 529.291716] FAT-fs (loop1): Filesystem has been set read-only 20:41:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xc0ffffff) 20:41:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 529.571525] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 529.618774] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 529.625978] FAT-fs (loop1): Filesystem has been set read-only 20:41:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 529.838497] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 529.879930] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 529.887233] FAT-fs (loop1): Filesystem has been set read-only 20:41:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 530.055533] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 530.091020] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 530.098253] FAT-fs (loop1): Filesystem has been set read-only 20:41:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0xa01) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x1, 0x4) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r3, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)={'syz0'}, 0x4) close(r3) close(r2) [ 530.358942] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 530.409323] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 530.416544] FAT-fs (loop1): Filesystem has been set read-only 20:41:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x3400) 20:41:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0x0, &(0x7f00000000c0), 0x100000000000004a, &(0x7f0000000000)}, 0x4000000) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) close(r2) close(r1) 20:41:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73790130"], 0x4) close(r0) close(r1) 20:41:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x300000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 530.808394] FAT-fs (loop1): bogus number of reserved sectors [ 530.814346] FAT-fs (loop1): Can't find a valid FAT filesystem [ 530.862084] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 530.869354] FAT-fs (loop1): Filesystem has been set read-only 20:41:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 531.086254] FAT-fs (loop1): bogus number of reserved sectors [ 531.092140] FAT-fs (loop1): Can't find a valid FAT filesystem [ 531.138165] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 531.145393] FAT-fs (loop1): Filesystem has been set read-only 20:41:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xffffffbf) 20:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="df6cde6f03a728d6595b73797230"], 0x4) close(r2) close(r1) 20:41:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) socket$inet6(0xa, 0x1, 0xffffffffffffffe0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) close(r2) close(r1) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, {0x6, 0x7fffffff, 0x78, 0x401, 0x1f, 0x94fb}}, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000100)) [ 531.704204] FAT-fs (loop1): bogus number of reserved sectors [ 531.710112] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 531.774199] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 531.781438] FAT-fs (loop1): Filesystem has been set read-only 20:41:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 531.876177] FAT-fs (loop1): bogus number of reserved sectors [ 531.882046] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 531.918572] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 531.925698] FAT-fs (loop1): Filesystem has been set read-only 20:41:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 532.024503] FAT-fs (loop1): bogus number of reserved sectors [ 532.030407] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 532.080259] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 532.087496] FAT-fs (loop1): Filesystem has been set read-only [ 532.228338] FAT-fs (loop1): bogus number of reserved sectors [ 532.234217] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 532.273086] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 532.280277] FAT-fs (loop1): Filesystem has been set read-only [ 532.376260] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 532.418170] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 532.425363] FAT-fs (loop1): Filesystem has been set read-only 20:41:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 532.508370] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 532.537582] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 532.544790] FAT-fs (loop1): Filesystem has been set read-only 20:41:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x3e8) 20:41:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x19, 0x1000803, 0x1) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000007a4024407f3c51e124625a97cf"], 0x4) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f00000000c0)=""/149) close(r1) 20:41:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 532.722907] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 532.769118] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 532.776291] FAT-fs (loop1): Filesystem has been set read-only 20:41:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 532.881019] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 532.917983] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 532.925169] FAT-fs (loop1): Filesystem has been set read-only 20:41:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 533.045559] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 533.070934] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 533.078135] FAT-fs (loop1): Filesystem has been set read-only 20:41:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,cod']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 533.172456] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 533.196698] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 533.203927] FAT-fs (loop1): Filesystem has been set read-only 20:41:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,cod']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 533.280522] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 533.304597] FAT-fs (loop1): Unrecognized mount option "cod" or missing value 20:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,cod']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) [ 533.398247] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 533.416888] FAT-fs (loop1): Unrecognized mount option "cod" or missing value 20:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 533.515792] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 533.546196] FAT-fs (loop1): Unrecognized mount option "cod" or missing value 20:41:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 533.670789] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 533.707898] FAT-fs (loop1): Unrecognized mount option "codepage" or missing value 20:41:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x38) 20:41:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4) close(r2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={r3, 0x3e, "9ec7f1c9f4f3e14bb0f2dcdc713ff633f205009b3cdfc89c7b573ff9aebb1a075e3f82c2a5bdc3d8e80540f646d7add6b3f1137327c9e46085f1d48f9746"}, &(0x7f0000000240)=0x46) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0xd0cc, 0x4) close(r1) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000000)=""/35, 0x23}, &(0x7f00000000c0), 0x10}, 0x20) 20:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 533.886681] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 533.909298] FAT-fs (loop1): Unrecognized mount option "codepage" or missing value 20:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=8']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 534.011636] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 534.035752] FAT-fs (loop1): Unrecognized mount option "codepage" or missing value 20:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=8']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 534.140447] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 534.172546] FAT-fs (loop1): codepage cp8 not found 20:41:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=8']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 534.286661] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 534.319664] FAT-fs (loop1): codepage cp8 not found 20:41:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 534.486741] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=85']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 534.534817] FAT-fs (loop1): codepage cp8 not found 20:41:35 executing program 5: r0 = socket$inet6(0xa, 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) close(r2) close(r1) [ 534.664049] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=85']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 534.709526] FAT-fs (loop1): codepage cp85 not found 20:41:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 534.856072] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xe803000000000000) 20:41:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(0xffffffffffffffff, r1, 0x0) 20:41:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=85']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 534.896279] FAT-fs (loop1): codepage cp85 not found 20:41:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 535.001439] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 535.030077] FAT-fs (loop1): codepage cp85 not found 20:41:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 535.135122] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 535.157650] FAT-fs (loop1): bogus number of reserved sectors [ 535.163561] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 535.390370] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 535.415350] FAT-fs (loop1): bogus number of reserved sectors [ 535.421363] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000001c0)=0x1c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000000c0)=0xfffffffffffffe91) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000200)={0x10001, 0x5, 0x80000000, 0x1f}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000002c0)=""/168) dup3(r3, r2, 0x0) 20:41:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000ffffffff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) getrandom(&(0x7f0000000600)=""/4096, 0x1000, 0x3) close(r1) close(r1) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f0000000000)='net/route\x00') [ 535.597372] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 535.630890] FAT-fs (loop1): bogus number of reserved sectors [ 535.636767] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 535.796539] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 535.835074] FAT-fs (loop1): bogus number of reserved sectors [ 535.840999] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(0xffffffffffffffff, r1, 0x0) 20:41:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x34) 20:41:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 536.019434] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 536.052371] FAT-fs (loop1): bogus number of reserved sectors [ 536.058311] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) [ 536.154465] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 536.179361] FAT-fs (loop1): bogus number of reserved sectors [ 536.185238] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 536.337193] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 536.368583] FAT-fs (loop1): bogus number of reserved sectors [ 536.374500] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x2e, "d4d61ef25692bcbda3b6b4997b156886e62227c3e1334d562df06070ed286d8144759c66e8abdef3c3c9077ba751"}, &(0x7f0000000100)=0x36) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r4, 0x46, 0x1, 0xff, 0x5, 0x7}, &(0x7f0000000180)=0x14) r5 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) accept4(r1, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80, 0x80800) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0x0, &(0x7f0000847000), 0x0, &(0x7f000048a000), 0x0, 0xfffffffffffffffc}, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="73185c005f62f4acff2a83c76d0b3c51"], 0x4) close(r2) close(r1) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 536.524037] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 536.567250] FAT-fs (loop1): bogus number of reserved sectors [ 536.573212] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000ffffffff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 536.745445] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 536.780548] FAT-fs (loop1): bogus number of reserved sectors [ 536.786455] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(0xffffffffffffffff, r1, 0x0) 20:41:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x26) [ 536.970500] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 537.003152] FAT-fs (loop1): bogus number of reserved sectors [ 537.009557] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 537.141114] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 537.166235] FAT-fs (loop1): bogus number of reserved sectors [ 537.172220] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 537.307394] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 537.329587] FAT-fs (loop1): bogus number of reserved sectors [ 537.335514] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev, 0x0}, &(0x7f00000000c0)=0xc) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r3}, 0x10) close(r2) close(r1) 20:41:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:38 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x10001) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x80000) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) syz_emit_ethernet(0x66, &(0x7f0000001c80)={@broadcast, @local={[], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x7, 0x0, 0x0, [0xc], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3]}, @mcast2}}}}}}}, 0x0) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) r5 = userfaultfd(0x80000) close(r5) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 537.451057] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 537.489751] FAT-fs (loop1): invalid media value (0x00) [ 537.495180] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x807fc) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xffffffff80000001, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x9, 0x4, @local, 0xf6}}, 0x2, 0x1, 0x0, 0x8}, 0x98) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) pwrite64(r0, &(0x7f00000000c0)="3e7880a9ae58412d6c5430eccae3189da7cf24e5901eee2905b4e02fd34340c659288d747d492639481591936c286f021798d1f411470227890aa70e0577ceb64f2a9a7bbdc04a31934cedcb7266cd97be29f0f5820d41307390e0d1ed82ea0e23af8d0d6976605ded86ae601a3e26", 0x6f, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 537.623164] FAT-fs (loop1): Unrecognized mount option "uid" or missing value 20:41:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 537.663595] FAT-fs (loop1): invalid media value (0x00) [ 537.668971] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x480000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x80000) close(r2) 20:41:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, 0xffffffffffffffff, 0x0) [ 537.834337] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 537.858622] FAT-fs (loop1): invalid media value (0x00) [ 537.864047] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x300000000000000) 20:41:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 538.026465] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 538.052258] FAT-fs (loop1): invalid media value (0x00) [ 538.057633] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 538.164132] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 538.190459] FAT-fs (loop1): invalid media value (0x00) [ 538.195833] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:38 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x400000000101000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000740)={&(0x7f0000000340), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r1, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xc9a}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x880, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rfkill\x00', 0x200402, 0x0) r6 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r5, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xc010, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x144, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x40, 0x18, &(0x7f00000001c0)=[@flat={0x776a2a85, 0x101, r6}, @ptr={0x70742a85, 0x1, &(0x7f0000000180), 0x1, 0x1, 0xd}], &(0x7f0000000200)=[0x30, 0x40, 0x78]}, 0x312d}}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240), &(0x7f0000000280)=[0x70]}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x30, &(0x7f00000002c0)=[@fd={0x66642a85, 0x0, r4, 0x0, 0x4}, @fd={0x66642a85, 0x0, r3, 0x0, 0x3}], &(0x7f0000000300)=[0x48, 0x28, 0x18, 0x38, 0x48, 0x40]}}, @acquire_done={0x40106309, r7, 0x3}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f0000000380)=[0x30]}}, @decrefs={0x40046307, 0x3}], 0x7f, 0x0, &(0x7f0000000540)="4306a1a185d3d36368aa518c2956c28a91e5e433dc549634fd95c6323ddb91f0fd8b2becf46b2e0ceb8a02c56b39cbf35c6487dfafd2007ca0889b4719d0e9380d31f249b91ec4e8688f34b3b696fc7f2109356d776b531bc329121691c10caa6bfb6eae2c254a59eafcaf44f24d281e412bc41c83120a1efde0ae3b59b395"}) ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000847000), 0x0, &(0x7f000048a000), 0xfffffffffffffe0f, 0x800}, 0x0) write$binfmt_misc(r8, &(0x7f0000000080)={'syz0'}, 0x4) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) close(r8) close(r4) 20:41:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x7) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000000c0)) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r3, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)={'syz0'}, 0x4) close(r3) close(r2) [ 538.289552] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 538.317280] FAT-fs (loop1): invalid media value (0x00) [ 538.322658] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 538.461797] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 538.490955] FAT-fs (loop1): invalid media value (0x00) [ 538.496291] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid\x00\x00flush,errors=remount-ro,debug,showexec,discard,codepage=850']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) [ 538.581435] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 538.606995] FAT-fs (loop1): invalid media value (0x00) [ 538.612386] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:39 executing program 1: exit(0x0) r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) accept4$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000000)=0xfffffffffffffeef, 0x0) [ 538.707485] FAT-fs (loop1): Unrecognized mount option "uid" or missing value [ 538.728187] FAT-fs (loop1): invalid media value (0x00) [ 538.733563] FAT-fs (loop1): Can't find a valid FAT filesystem 20:41:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, 0xffffffffffffffff, 0x0) 20:41:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xf401) 20:41:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0xffffffff, &(0x7f00000000c0)=0x2) dup3(r1, r0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) close(r2) close(r1) 20:41:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:40 executing program 7: syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@dev={[], 0x20}, @empty, [{[{0x9100, 0x7fffffff, 0x8}], {0x8100, 0x7f, 0xffffffff80000000}}], {@canfd={0xd, {{0x4, 0x73b, 0xfffffffffffffffd, 0x40}, 0x4, 0x3, 0x0, 0x0, "84464e52a977551a9d5e455ebd97016e1267b65a677a5c5c4cae7f59d9525fa2dbb0a6b7ec674bc609839cdfeeacae55bf3d7a830aec0e7e99d7da04a259c662"}}}}, &(0x7f0000000200)={0x1, 0x4, [0x112, 0x811, 0xcc7, 0x4c6]}) r0 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="9456ded3616ee56194e2aa084006af2a2713d80e6ca3739282ff58d8d1acd346573a338b5f0bcf763696f39f7ae585e93e35c7d4361d6f5c134d5d88aaab8b8162d4351e", 0x44, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xffffffff, 0x4000) ioctl$BLKRAGET(r4, 0x1263, &(0x7f00000001c0)) r5 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, 0xffffffffffffffff, 0x0) 20:41:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:41:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) read(r2, &(0x7f0000000080)=""/19, 0xffffff5c) [ 539.960745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.968784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.992267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:41:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x23) 20:41:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="ffd73821"], 0x4) close(r2) close(r1) 20:41:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) accept4(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000140)=0x80, 0x800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) fadvise64(r1, 0x0, 0x9, 0x1) 20:41:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025c3f0a00145f8f7640709a4496d8ad0922378d00e7c09740be") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = epoll_create1(0x80003) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r3, r2, 0x0) 20:41:41 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x10000074}]}) 20:41:41 executing program 0: dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), 0x14) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'gre0\x00'}, 0x18) 20:41:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) 20:41:41 executing program 1: shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x440042, 0x0) close(r0) socketpair$unix(0x1, 0x200000000005, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) 20:41:41 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7) close(r0) socket$unix(0x1, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0), 0x10) 20:41:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a346bdbc12de637e39ff1da96971db124fd4c042cbb225d2e18108df38b8b576ecb71d3f9d5259a7129f3808cab1e93d94e2b283fb11e0cf34dd9b8a5670eb5f6d8ad6448c1905a70d9b0df4ad0023727d8c773dcc004d63c5265f539232bb9941960f27ce617b3611eda9daf83fb5f340e02ab6021d620149a62b973dd4f7eacf7456482b691664b60"], 0x4) close(r2) close(r1) 20:41:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xbe, "0ce177dff5a94211083ee8e2ea7d58015e6747380477c838082ac5d76a061d95b41f2c788985783319efa9959f6af5f840d9b13b20e3d0d234c5fb1a7c2002ae9ff23154c7988681ce8aff44a404299c38fc7a9aac221f7f7179b96ef7d7d8398a939c0634ef845550a162ff917a95af8e0ab408dc894df4df66a0dc38f6253ca2d815a3fd7e156e77920feddfabbfdf3cbd40ab88851d565f35ef69d8e74b30b730adcfe1255546c2c878d067155b0463f62bdc6b7e185e0b3ac872e08f"}, &(0x7f0000000040)=0xc6) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r6, 0x4) shutdown(r0, 0x0) 20:41:41 executing program 0 (fault-call:9 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x500000000000000) 20:41:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xbe, "0ce177dff5a94211083ee8e2ea7d58015e6747380477c838082ac5d76a061d95b41f2c788985783319efa9959f6af5f840d9b13b20e3d0d234c5fb1a7c2002ae9ff23154c7988681ce8aff44a404299c38fc7a9aac221f7f7179b96ef7d7d8398a939c0634ef845550a162ff917a95af8e0ab408dc894df4df66a0dc38f6253ca2d815a3fd7e156e77920feddfabbfdf3cbd40ab88851d565f35ef69d8e74b30b730adcfe1255546c2c878d067155b0463f62bdc6b7e185e0b3ac872e08f"}, &(0x7f0000000040)=0xc6) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r6, 0x4) shutdown(r0, 0x0) 20:41:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xbe, "0ce177dff5a94211083ee8e2ea7d58015e6747380477c838082ac5d76a061d95b41f2c788985783319efa9959f6af5f840d9b13b20e3d0d234c5fb1a7c2002ae9ff23154c7988681ce8aff44a404299c38fc7a9aac221f7f7179b96ef7d7d8398a939c0634ef845550a162ff917a95af8e0ab408dc894df4df66a0dc38f6253ca2d815a3fd7e156e77920feddfabbfdf3cbd40ab88851d565f35ef69d8e74b30b730adcfe1255546c2c878d067155b0463f62bdc6b7e185e0b3ac872e08f"}, &(0x7f0000000040)=0xc6) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r6, 0x4) shutdown(r0, 0x0) 20:41:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xbe, "0ce177dff5a94211083ee8e2ea7d58015e6747380477c838082ac5d76a061d95b41f2c788985783319efa9959f6af5f840d9b13b20e3d0d234c5fb1a7c2002ae9ff23154c7988681ce8aff44a404299c38fc7a9aac221f7f7179b96ef7d7d8398a939c0634ef845550a162ff917a95af8e0ab408dc894df4df66a0dc38f6253ca2d815a3fd7e156e77920feddfabbfdf3cbd40ab88851d565f35ef69d8e74b30b730adcfe1255546c2c878d067155b0463f62bdc6b7e185e0b3ac872e08f"}, &(0x7f0000000040)=0xc6) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r6, 0x4) 20:41:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x2) ioctl(r3, 0xc1ec, &(0x7f0000000100)="6f2801ed90e0f44b6e7e6d220093a4e6c3c4ac935014e7032980e34ddc93b8d52535436feecc88dcf8561f6b8502ce563d2e3dc6f10888b90f2286dec0a89877e57acec3acd03322e12e1b065bfee1d305389f6be8a235c6fd3ffac15b3debe01c282c9863cd05a7fbd291b213dfa6c46932785e364b3b1a85fd4c4a700a1edafeb804b3e017f7ca0b62181b4f219cc4f2e0625e384547457d2b040f39569d7b0930b8a890af05183e3aa990d6b186ffd9a6c591ce9624cfad5415cca3ac2b50cf951b0573dd36d4dc60e53e") ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000000c0)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xbe, "0ce177dff5a94211083ee8e2ea7d58015e6747380477c838082ac5d76a061d95b41f2c788985783319efa9959f6af5f840d9b13b20e3d0d234c5fb1a7c2002ae9ff23154c7988681ce8aff44a404299c38fc7a9aac221f7f7179b96ef7d7d8398a939c0634ef845550a162ff917a95af8e0ab408dc894df4df66a0dc38f6253ca2d815a3fd7e156e77920feddfabbfdf3cbd40ab88851d565f35ef69d8e74b30b730adcfe1255546c2c878d067155b0463f62bdc6b7e185e0b3ac872e08f"}, &(0x7f0000000040)=0xc6) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x4, 0x2, 0xfffffffffffffffc) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x181000, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0x163, 0x4, 0x8, 0x6, 0x6, 0x3}) close(r2) close(r1) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x25000000) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000180)=""/168) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "7748f37cb63d97410f26b25d273c63471a4aea801964650b837c0de5f6704e6cefbe04f5ec1867dc62c9dcd0c6ab798ac9d22a36d96ff25f75c58a213e2d5b9f"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000180)=""/168) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x7ff) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) socketpair(0x7, 0x806, 0xae3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r4, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0xffffffffffff7fff, 0xff, 0x0, 0x7, 0x6, 0x10000, 0x0, 0x7f, 0xc2}}, 0x43) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffff9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) setsockopt(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0xfbfffffffffffffe, 0x0, 0x0, 0x0, 0x6}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) socket$inet6(0xa, 0x1, 0x10000) 20:41:43 executing program 5: r0 = socket$inet6(0xa, 0x20800, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1a, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000100)=""/106) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) flock(r0, 0x7) epoll_create1(0x80000) close(r2) close(r1) 20:41:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x3000) 20:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:43 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:43 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:43 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:44 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:44 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:44 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x5a, 0x1f}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000200)={r4, 0x100}, &(0x7f00000002c0)=0x8) tkill(r2, 0xb) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r5 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r6 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r5, r1, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000100)=0x1) 20:41:44 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) close(r2) close(r1) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x302, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) 20:41:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5423, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:44 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x1d00000000000000) 20:41:44 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:41:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5421, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40080) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="36884c206ab27f785f0771db00003b"], 0x4) close(r2) close(r1) 20:41:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xf00000000000000) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x2, 0x0) close(r2) close(r1) 20:41:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000040), &(0x7f00000000c0)="66bd7d7ebaf216ea4d0281960e41f27daabcc843a339e1275f68ce3fe43a46e326e04c966c0335d7b43103fb956eb691d52cd8f6cba4fdfab4109e331237f549401d98735cb3081b1e0398801e8f54626fb58845f5712d4c6ddf76635583b165a45f8a799a87cb8e99ee71fb3ed603375dd7d9344322f5921c8a298320a4d99fa2554ec4ec3be18c7073bfbd2306758f257d731a4cf025e72e4452b1bf5d01d249cbbdffd4fbb67babe9e6e934f52a93b2c6cfa3a80afecfc9ae620ff1ba") dup3(r2, r1, 0x0) 20:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) close(r2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) close(r1) 20:41:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x80045400, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0xb000000) 20:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x3, 0x0) close(r2) close(r1) 20:41:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) epoll_create1(0x80000) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x4) fdatasync(r2) close(r2) close(r1) 20:41:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5452, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000ffffffff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) getrlimit(0xb, &(0x7f0000000040)) sendmmsg(r3, &(0x7f0000000040), 0x40000000000053e, 0x0) 20:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1500, 0x0) close(r2) close(r1) 20:41:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 20:41:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0189436, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x5, 0x0, [{0x107000, 0xba, &(0x7f0000000100)=""/186}, {0x100000, 0x3d, &(0x7f0000000080)=""/61}, {0x10002, 0x73, &(0x7f00000001c0)=""/115}, {0x4001, 0x48, &(0x7f00000002c0)=""/72}, {0xd000, 0xd8, &(0x7f0000000340)=""/216}]}) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) accept4$alg(r0, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r3, r1, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 20:41:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 20:41:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 20:41:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) read(r2, &(0x7f00000000c0)=""/173, 0xad) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:41:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0xff0f0000) close(r2) close(r1) 20:41:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x80e85411, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}}, 0x0) 20:41:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}}, 0x0) 20:41:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x396da753, @loopback, 0x7888}}, 0x2, 0x2}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x4}, 0x8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10}) r4 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r4, r3, 0x0) 20:41:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}}, 0x0) 20:41:49 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) [ 548.880606] FAULT_INJECTION: forcing a failure. [ 548.880606] name failslab, interval 1, probability 0, space 0, times 0 [ 548.891942] CPU: 1 PID: 10287 Comm: syz-executor1 Not tainted 4.18.0-rc6-next-20180724+ #17 [ 548.900423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.909796] Call Trace: [ 548.912376] dump_stack+0x1c9/0x2b4 [ 548.916003] ? dump_stack_print_info.cold.2+0x52/0x52 [ 548.921195] ? __netlink_insert+0xd39/0x13d0 [ 548.925618] should_fail.cold.4+0xa/0x11 [ 548.929677] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 548.934779] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 548.939348] ? trace_hardirqs_on+0xd/0x10 [ 548.943480] ? __local_bh_enable_ip+0x161/0x230 [ 548.948133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 548.953665] ? __netlink_insert+0xdeb/0x13d0 [ 548.958058] ? __netlink_dump_start+0x780/0x780 [ 548.962728] ? lock_acquire+0x1e4/0x540 [ 548.966711] ? fs_reclaim_acquire+0x20/0x20 [ 548.971018] ? lock_downgrade+0x8f0/0x8f0 [ 548.975151] ? check_same_owner+0x340/0x340 [ 548.979464] ? lock_downgrade+0x8f0/0x8f0 [ 548.983604] ? rcu_note_context_switch+0x730/0x730 [ 548.988526] __should_failslab+0x124/0x180 [ 548.992743] should_failslab+0x9/0x14 [ 548.996536] kmem_cache_alloc_node+0x272/0x780 [ 549.001122] ? trace_hardirqs_on+0xd/0x10 [ 549.005271] ? __local_bh_enable_ip+0x161/0x230 [ 549.010264] ? _raw_spin_unlock_bh+0x30/0x40 [ 549.014658] __alloc_skb+0x119/0x770 [ 549.018354] ? skb_scrub_packet+0x490/0x490 [ 549.022669] ? netlink_insert+0x15d/0x3f0 [ 549.026815] ? __netlink_insert+0x13d0/0x13d0 [ 549.031304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 549.036830] ? netlink_autobind.isra.34+0x23b/0x320 [ 549.041838] netlink_sendmsg+0xb29/0xfc0 [ 549.045897] ? netlink_unicast+0x760/0x760 [ 549.050136] ? move_addr_to_kernel.part.20+0x100/0x100 [ 549.055412] ? security_socket_sendmsg+0x94/0xc0 [ 549.060155] ? netlink_unicast+0x760/0x760 [ 549.064379] sock_sendmsg+0xd5/0x120 [ 549.068083] ___sys_sendmsg+0x7fd/0x930 [ 549.072048] ? find_vpid+0xf0/0xf0 [ 549.075580] ? copy_msghdr_from_user+0x580/0x580 [ 549.080320] ? __f_unlock_pos+0x19/0x20 [ 549.084276] ? lock_downgrade+0x8f0/0x8f0 [ 549.088428] ? proc_fail_nth_write+0x9e/0x210 [ 549.092928] ? __fget_light+0x2f7/0x440 [ 549.096890] ? fget_raw+0x20/0x20 [ 549.100337] ? kasan_check_write+0x14/0x20 [ 549.104562] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 549.109487] ? fsnotify+0xbac/0x14e0 [ 549.113190] ? vfs_write+0x2f3/0x560 [ 549.116906] ? wait_for_completion+0x8d0/0x8d0 [ 549.121481] ? lock_release+0xa30/0xa30 [ 549.125442] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 549.130960] ? sockfd_lookup_light+0xc5/0x160 [ 549.135446] __sys_sendmsg+0x11d/0x290 [ 549.139336] ? __ia32_sys_shutdown+0x80/0x80 [ 549.143736] ? __sb_end_write+0xac/0xe0 [ 549.147689] ? fput+0x130/0x1a0 [ 549.150950] ? ksys_write+0x1ae/0x260 [ 549.154739] ? syscall_slow_exit_work+0x500/0x500 [ 549.159564] ? ksys_ioctl+0x81/0xd0 [ 549.163173] __x64_sys_sendmsg+0x78/0xb0 [ 549.167230] do_syscall_64+0x1b9/0x820 [ 549.171099] ? finish_task_switch+0x1d3/0x870 [ 549.175584] ? syscall_return_slowpath+0x5e0/0x5e0 [ 549.180500] ? syscall_return_slowpath+0x31d/0x5e0 [ 549.185412] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 549.190425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 549.195274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 549.200446] RIP: 0033:0x456959 [ 549.203623] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 549.222510] RSP: 002b:00007febbeb78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 20:41:49 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) [ 549.230210] RAX: ffffffffffffffda RBX: 00007febbeb796d4 RCX: 0000000000456959 [ 549.237463] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000014 [ 549.244719] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 549.251975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 549.259227] R13: 00000000004d2fe8 R14: 00000000004c7cc4 R15: 0000000000000000 [ 549.317002] FAULT_INJECTION: forcing a failure. [ 549.317002] name failslab, interval 1, probability 0, space 0, times 0 [ 549.328346] CPU: 1 PID: 10291 Comm: syz-executor1 Not tainted 4.18.0-rc6-next-20180724+ #17 [ 549.336819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.346162] Call Trace: [ 549.348741] dump_stack+0x1c9/0x2b4 [ 549.352387] ? dump_stack_print_info.cold.2+0x52/0x52 [ 549.357592] should_fail.cold.4+0xa/0x11 [ 549.361646] ? __kernel_text_address+0xd/0x40 [ 549.366134] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 549.371235] ? __save_stack_trace+0x8d/0xf0 [ 549.375556] ? save_stack+0xa9/0xd0 [ 549.379181] ? save_stack+0x43/0xd0 [ 549.382808] ? kasan_kmalloc+0xc4/0xe0 [ 549.386698] ? kasan_slab_alloc+0x12/0x20 [ 549.390855] ? kmem_cache_alloc_node+0x144/0x780 [ 549.395624] ? __alloc_skb+0x119/0x770 [ 549.399517] ? netlink_sendmsg+0xb29/0xfc0 [ 549.403755] ? sock_sendmsg+0xd5/0x120 [ 549.407638] ? ___sys_sendmsg+0x7fd/0x930 [ 549.411773] ? __sys_sendmsg+0x11d/0x290 20:41:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 549.415827] ? __x64_sys_sendmsg+0x78/0xb0 [ 549.420064] ? do_syscall_64+0x1b9/0x820 [ 549.424127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 549.429492] ? trace_hardirqs_on+0x10/0x10 [ 549.433726] ? lock_acquire+0x1e4/0x540 [ 549.437695] ? fs_reclaim_acquire+0x20/0x20 [ 549.442003] ? lock_downgrade+0x8f0/0x8f0 [ 549.446152] ? check_same_owner+0x340/0x340 [ 549.450478] ? lock_downgrade+0x8f0/0x8f0 [ 549.454631] ? rcu_note_context_switch+0x730/0x730 [ 549.459565] __should_failslab+0x124/0x180 [ 549.463799] should_failslab+0x9/0x14 20:41:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) [ 549.467608] kmem_cache_alloc_node_trace+0x26f/0x770 [ 549.472711] ? kasan_kmalloc+0xc4/0xe0 [ 549.476598] __kmalloc_node_track_caller+0x33/0x70 [ 549.481525] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 549.486289] __alloc_skb+0x155/0x770 [ 549.490005] ? skb_scrub_packet+0x490/0x490 [ 549.494329] ? netlink_insert+0x15d/0x3f0 [ 549.498469] ? __netlink_insert+0x13d0/0x13d0 [ 549.502963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 549.508500] ? netlink_autobind.isra.34+0x23b/0x320 [ 549.513524] netlink_sendmsg+0xb29/0xfc0 [ 549.517590] ? netlink_unicast+0x760/0x760 [ 549.521831] ? move_addr_to_kernel.part.20+0x100/0x100 [ 549.527112] ? security_socket_sendmsg+0x94/0xc0 [ 549.531878] ? netlink_unicast+0x760/0x760 [ 549.536108] sock_sendmsg+0xd5/0x120 [ 549.539811] ___sys_sendmsg+0x7fd/0x930 [ 549.543779] ? find_vpid+0xf0/0xf0 [ 549.547310] ? copy_msghdr_from_user+0x580/0x580 [ 549.552053] ? __f_unlock_pos+0x19/0x20 [ 549.556017] ? lock_downgrade+0x8f0/0x8f0 [ 549.560149] ? proc_fail_nth_write+0x9e/0x210 [ 549.564637] ? __fget_light+0x2f7/0x440 [ 549.568606] ? fget_raw+0x20/0x20 [ 549.572052] ? kasan_check_write+0x14/0x20 [ 549.576281] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 549.581212] ? fsnotify+0xbac/0x14e0 [ 549.584920] ? vfs_write+0x2f3/0x560 [ 549.588636] ? wait_for_completion+0x8d0/0x8d0 [ 549.593199] ? lock_release+0xa30/0xa30 [ 549.597159] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 549.602694] ? sockfd_lookup_light+0xc5/0x160 [ 549.607193] __sys_sendmsg+0x11d/0x290 [ 549.611080] ? __ia32_sys_shutdown+0x80/0x80 [ 549.615480] ? __sb_end_write+0xac/0xe0 [ 549.619444] ? fput+0x130/0x1a0 [ 549.622726] ? ksys_write+0x1ae/0x260 [ 549.626524] ? ksys_ioctl+0x81/0xd0 [ 549.630154] __x64_sys_sendmsg+0x78/0xb0 [ 549.634209] do_syscall_64+0x1b9/0x820 [ 549.638086] ? syscall_return_slowpath+0x5e0/0x5e0 [ 549.643011] ? syscall_return_slowpath+0x31d/0x5e0 [ 549.647929] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 549.652925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 549.657760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 549.662926] RIP: 0033:0x456959 [ 549.666109] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 549.685006] RSP: 002b:00007febbeb78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.692717] RAX: ffffffffffffffda RBX: 00007febbeb796d4 RCX: 0000000000456959 [ 549.699984] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000014 [ 549.707252] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 20:41:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5c3f90331847fdf236fc20a2c44a2a47fa92fac7e75b146b34d3dc6acfd7e15c843804bb425cf2d834043050f5e90b65") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) listen(r1, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x30000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000001440)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x1, r5, 0x30, 0x1, @in={0x2, 0x4e21, @rand_addr}}}, 0xa0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r6 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) r7 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000440), 0x1000) sendmmsg(r6, &(0x7f00000027c0)=[{{&(0x7f00000002c0)=@ipx={0x4, 0x6, 0x6, "b5dbd3f38928", 0x7fffffff}, 0x80, &(0x7f0000002740)=[{&(0x7f0000000380)="3292733e612816d274e482ce8d4ab9fd04d72a159738cf7166556d2c014e267d5b09f54a1eaf058fb2d1bb2a838029f7a298d7aef4cef44292372381894995518273b88809906da444e46a96f954461d5c66f66ea6e17bbbad6bc97f8f6993044422db6bd76b932f0d43df044e", 0x6d}, {&(0x7f0000002800)="8e74fdf03173784d3be8f520b3ce6cec51bbdb5656d9b6036accf130334c8fbe4f1cb6b24bde1d85ffda6b39cccc7f50b142aef5cbee1066db834467d9621a86e5a19b7577545c0033e7ce9b5a037a8cccd747673c175f0aa98e9f6eac4905115dd76eec9d3e39c6f2fa846e27ad2f11a01d733f32cf107ccda253623b6d95c088ad6b609ac1b41ec230f676b44d", 0xfffffc8c}, {&(0x7f0000001500)="84ed03b91e578ad1662d599850a65caac9b8ebd8c713fb84e0a1f1f33c26062b4040567232b6e551ff850e607496fe7489f37d92964fa0c89175175734ea6e1bc94e692164067b8c8312d81bef8c6af431158505d6724b25aa6b26bec4cbee57e878528ed95fdce4c6e61ac688c8d4e7fa30d40f00b3a9eb7e4d60d5b945e3fcb6e12179b6f7ad34b74fabb9288faa7ae7767e9e28d2cca6be0b5e6c3f92145942d43601", 0xa4}, {&(0x7f00000015c0)="afc1cb3fa09390a861c65415db01a8108b898e0c81bce2bb34a07837a15aad5b326401b48a0d0c81539d5801c2fa53882038cd73df393a598c37ec21b4a40e26c433140b248ca34e17782c9b217af4843e5fed58f67d78070fda6925f0bb8d4a00b2e1f81c526839a60af197f5b049511fbc03770a4c", 0x76}, {&(0x7f0000001640)="e3049d754e6661471e4bb2b3bf0bd6e1e9c06f8c8f6fa38e", 0xff90}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="50bddd8417776b731e7f3c963f77774dc8a78dc72b7e78ce463042f1e62ef4a8cc513a143410c1fe8a44b5ec15dab7b88e068a25e23d63f3beef62cb634f351d87659750f8efac327d431d8388c221c5c0c43eac6bb6cde2de6b931e0a8dd223da2d0686ca40775a7b225cd58d865387500d25964da611bc585f4e534930df765b68ad0e8d6df84911c51b38f54c", 0x8e}], 0x7, 0x0, 0x0, 0x4004000}, 0xcfb1}], 0x1, 0x400000000000) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:41:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x40000) close(r2) close(r1) 20:41:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40045402, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:50 executing program 1 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) [ 549.714521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 549.721785] R13: 00000000004d2fe8 R14: 00000000004c7cc4 R15: 0000000000000001 20:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000000c0)={0x3, 0x0, [{}, {}, {}]}) r4 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 549.867022] FAULT_INJECTION: forcing a failure. [ 549.867022] name failslab, interval 1, probability 0, space 0, times 0 [ 549.878369] CPU: 0 PID: 10338 Comm: syz-executor1 Not tainted 4.18.0-rc6-next-20180724+ #17 [ 549.886868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.896235] Call Trace: [ 549.898822] dump_stack+0x1c9/0x2b4 [ 549.902446] ? dump_stack_print_info.cold.2+0x52/0x52 [ 549.907629] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 549.912307] should_fail.cold.4+0xa/0x11 [ 549.916380] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 549.921477] ? unwind_get_return_address+0x61/0xa0 [ 549.926401] ? __save_stack_trace+0x8d/0xf0 [ 549.930724] ? trace_hardirqs_on+0x10/0x10 [ 549.934946] ? trace_hardirqs_on+0x10/0x10 [ 549.939172] ? save_stack+0xa9/0xd0 [ 549.942787] ? save_stack+0x43/0xd0 [ 549.946404] ? kasan_kmalloc+0xc4/0xe0 [ 549.950279] ? kasan_slab_alloc+0x12/0x20 [ 549.954409] ? kmem_cache_alloc+0x12e/0x760 [ 549.958713] ? __d_alloc+0xc8/0xd50 [ 549.962335] ? d_alloc+0x96/0x380 [ 549.965771] ? d_alloc_parallel+0x15a/0x1ea0 [ 549.970166] ? lookup_open+0x560/0x1b90 [ 549.974143] ? lock_acquire+0x1e4/0x540 [ 549.978098] ? fs_reclaim_acquire+0x20/0x20 [ 549.982402] ? lock_downgrade+0x8f0/0x8f0 [ 549.986545] ? trace_hardirqs_on+0x10/0x10 [ 549.990760] ? check_same_owner+0x340/0x340 [ 549.995065] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 550.000104] ? rcu_note_context_switch+0x730/0x730 [ 550.005028] __should_failslab+0x124/0x180 [ 550.009248] should_failslab+0x9/0x14 [ 550.013029] __kmalloc+0x2c8/0x760 [ 550.016554] ? lock_release+0xa30/0xa30 [ 550.020510] ? fib_create_info+0x9b1/0x45e0 [ 550.024813] fib_create_info+0x9b1/0x45e0 [ 550.028943] ? lock_acquire+0x1e4/0x540 [ 550.032897] ? __wake_up_common_lock+0x1d0/0x330 [ 550.037633] ? trace_hardirqs_on+0x10/0x10 [ 550.041850] ? do_raw_spin_unlock+0xa7/0x2f0 [ 550.046252] ? fib_info_update_nh_saddr+0x300/0x300 [ 550.051248] ? lock_acquire+0x1e4/0x540 [ 550.055205] ? rtnetlink_rcv_msg+0x412/0xc30 [ 550.059596] ? lock_release+0xa30/0xa30 [ 550.063554] ? check_same_owner+0x340/0x340 [ 550.067871] ? rcu_note_context_switch+0x730/0x730 [ 550.072794] ? kasan_check_write+0x14/0x20 [ 550.077017] ? __mutex_lock+0x6c4/0x1680 [ 550.081069] ? rtnetlink_rcv_msg+0x412/0xc30 [ 550.085472] ? lock_release+0xa30/0xa30 [ 550.089435] ? mutex_trylock+0x2b0/0x2b0 [ 550.093485] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 550.098146] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 550.103153] ? fib_get_table+0x274/0x350 [ 550.107200] ? __fib_validate_source+0x1f10/0x1f10 [ 550.112112] ? is_bpf_text_address+0xd7/0x170 [ 550.116601] fib_table_insert+0x1c1/0x17a0 [ 550.120839] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 550.125859] ? validate_nla+0x2d9/0x7b0 [ 550.129823] ? fib_new_table+0xc0/0x490 [ 550.133799] ? fib_table_lookup+0x24a0/0x24a0 [ 550.138282] ? fib_flush+0x130/0x130 [ 550.141990] ? lock_downgrade+0x8f0/0x8f0 [ 550.146131] inet_rtm_newroute+0x15a/0x290 [ 550.150347] ? fib_magic.isra.22+0x890/0x890 [ 550.154739] ? fib_magic.isra.22+0x890/0x890 [ 550.159128] rtnetlink_rcv_msg+0x46e/0xc30 [ 550.163344] ? rtnetlink_put_metrics+0x690/0x690 [ 550.168084] netlink_rcv_skb+0x172/0x440 [ 550.172128] ? rtnetlink_put_metrics+0x690/0x690 [ 550.176891] ? netlink_ack+0xbe0/0xbe0 [ 550.180772] rtnetlink_rcv+0x1c/0x20 [ 550.184485] netlink_unicast+0x5a0/0x760 [ 550.188537] ? netlink_attachskb+0x9a0/0x9a0 [ 550.192932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 550.198451] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 550.203449] netlink_sendmsg+0xa18/0xfc0 [ 550.207492] ? netlink_unicast+0x760/0x760 [ 550.211716] ? move_addr_to_kernel.part.20+0x100/0x100 [ 550.216980] ? security_socket_sendmsg+0x94/0xc0 [ 550.221724] ? netlink_unicast+0x760/0x760 [ 550.225956] sock_sendmsg+0xd5/0x120 [ 550.229662] ___sys_sendmsg+0x7fd/0x930 [ 550.233621] ? find_vpid+0xf0/0xf0 [ 550.237143] ? copy_msghdr_from_user+0x580/0x580 [ 550.241886] ? __f_unlock_pos+0x19/0x20 [ 550.245857] ? lock_downgrade+0x8f0/0x8f0 [ 550.249992] ? proc_fail_nth_write+0x9e/0x210 [ 550.254468] ? __fget_light+0x2f7/0x440 [ 550.258423] ? fget_raw+0x20/0x20 [ 550.261864] ? kasan_check_write+0x14/0x20 [ 550.266083] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 550.271004] ? fsnotify+0xbac/0x14e0 [ 550.280082] ? vfs_write+0x2f3/0x560 [ 550.283777] ? wait_for_completion+0x8d0/0x8d0 [ 550.288350] ? lock_release+0xa30/0xa30 [ 550.292315] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 550.297833] ? sockfd_lookup_light+0xc5/0x160 [ 550.302315] __sys_sendmsg+0x11d/0x290 [ 550.306185] ? __ia32_sys_shutdown+0x80/0x80 [ 550.310577] ? __sb_end_write+0xac/0xe0 [ 550.314532] ? fput+0x130/0x1a0 [ 550.317794] ? ksys_write+0x1ae/0x260 [ 550.321580] ? ksys_ioctl+0x81/0xd0 [ 550.325192] __x64_sys_sendmsg+0x78/0xb0 [ 550.329239] do_syscall_64+0x1b9/0x820 [ 550.333108] ? finish_task_switch+0x1d3/0x870 [ 550.337583] ? syscall_return_slowpath+0x5e0/0x5e0 [ 550.342496] ? syscall_return_slowpath+0x31d/0x5e0 [ 550.347408] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 550.352408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.357237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 550.362406] RIP: 0033:0x456959 [ 550.365581] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 550.384462] RSP: 002b:00007febbeb78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.392149] RAX: ffffffffffffffda RBX: 00007febbeb796d4 RCX: 0000000000456959 [ 550.399400] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000014 [ 550.406648] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 20:41:51 executing program 1 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) [ 550.413897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 550.421146] R13: 00000000004d2fe8 R14: 00000000004c7cc4 R15: 0000000000000002 [ 550.519646] FAULT_INJECTION: forcing a failure. [ 550.519646] name failslab, interval 1, probability 0, space 0, times 0 [ 550.531019] CPU: 0 PID: 10343 Comm: syz-executor1 Not tainted 4.18.0-rc6-next-20180724+ #17 [ 550.539500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.548838] Call Trace: [ 550.551422] dump_stack+0x1c9/0x2b4 [ 550.555059] ? dump_stack_print_info.cold.2+0x52/0x52 [ 550.560240] should_fail.cold.4+0xa/0x11 [ 550.564286] ? rtnetlink_rcv_msg+0x412/0xc30 [ 550.568687] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 550.573771] ? kasan_check_write+0x14/0x20 [ 550.577994] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 550.582910] ? check_same_owner+0x340/0x340 [ 550.587216] ? wait_for_completion+0x8d0/0x8d0 [ 550.591794] ? kasan_check_write+0x14/0x20 [ 550.596018] ? __mutex_lock+0x6c4/0x1680 [ 550.600061] ? rtnetlink_rcv_msg+0x412/0xc30 [ 550.604457] ? lock_release+0xa30/0xa30 [ 550.608425] ? lock_acquire+0x1e4/0x540 [ 550.612400] ? fs_reclaim_acquire+0x20/0x20 [ 550.616716] ? lock_downgrade+0x8f0/0x8f0 [ 550.620869] ? check_same_owner+0x340/0x340 [ 550.625193] ? rcu_note_context_switch+0x730/0x730 [ 550.630134] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 550.635157] __should_failslab+0x124/0x180 [ 550.639395] should_failslab+0x9/0x14 [ 550.643204] kmem_cache_alloc_node+0x272/0x780 [ 550.647810] ? fib_table_lookup+0x24a0/0x24a0 [ 550.652330] __alloc_skb+0x119/0x770 [ 550.656050] ? skb_scrub_packet+0x490/0x490 [ 550.660388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 550.665927] ? inet_rtm_newroute+0x170/0x290 20:41:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x4) close(r2) close(r1) [ 550.670353] ? fib_magic.isra.22+0x890/0x890 [ 550.674773] ? fib_magic.isra.22+0x890/0x890 [ 550.679186] netlink_ack+0x2df/0xbe0 [ 550.682902] ? netlink_sendmsg+0xfc0/0xfc0 [ 550.687127] netlink_rcv_skb+0x35d/0x440 [ 550.691186] ? rtnetlink_put_metrics+0x690/0x690 [ 550.695939] ? netlink_ack+0xbe0/0xbe0 [ 550.699814] rtnetlink_rcv+0x1c/0x20 [ 550.703518] netlink_unicast+0x5a0/0x760 [ 550.707569] ? netlink_attachskb+0x9a0/0x9a0 [ 550.711962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 550.717489] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 550.722498] netlink_sendmsg+0xa18/0xfc0 [ 550.726542] ? netlink_unicast+0x760/0x760 [ 550.730762] ? move_addr_to_kernel.part.20+0x100/0x100 [ 550.736030] ? security_socket_sendmsg+0x94/0xc0 [ 550.740767] ? netlink_unicast+0x760/0x760 [ 550.744992] sock_sendmsg+0xd5/0x120 [ 550.748711] ___sys_sendmsg+0x7fd/0x930 [ 550.752674] ? find_vpid+0xf0/0xf0 [ 550.756198] ? copy_msghdr_from_user+0x580/0x580 [ 550.760947] ? __f_unlock_pos+0x19/0x20 [ 550.764907] ? lock_downgrade+0x8f0/0x8f0 [ 550.769040] ? proc_fail_nth_write+0x9e/0x210 [ 550.773525] ? __fget_light+0x2f7/0x440 [ 550.777478] ? fget_raw+0x20/0x20 [ 550.780910] ? kasan_check_write+0x14/0x20 [ 550.785124] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 550.790033] ? fsnotify+0xbac/0x14e0 [ 550.793739] ? vfs_write+0x2f3/0x560 [ 550.797445] ? wait_for_completion+0x8d0/0x8d0 [ 550.802010] ? lock_release+0xa30/0xa30 [ 550.805980] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 550.811499] ? sockfd_lookup_light+0xc5/0x160 [ 550.815989] __sys_sendmsg+0x11d/0x290 20:41:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f00000000c0)={0x100, 0x3, {0x1, 0x3, 0x1, 0x3, 0x9}}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 550.819878] ? __ia32_sys_shutdown+0x80/0x80 [ 550.824281] ? __sb_end_write+0xac/0xe0 [ 550.828254] ? fput+0x130/0x1a0 [ 550.831533] ? ksys_write+0x1ae/0x260 [ 550.835340] ? syscall_slow_exit_work+0x500/0x500 [ 550.840181] ? ksys_ioctl+0x81/0xd0 [ 550.843811] __x64_sys_sendmsg+0x78/0xb0 [ 550.847873] do_syscall_64+0x1b9/0x820 [ 550.851752] ? finish_task_switch+0x1d3/0x870 [ 550.856229] ? syscall_return_slowpath+0x5e0/0x5e0 [ 550.861144] ? syscall_return_slowpath+0x31d/0x5e0 [ 550.866056] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 550.871066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.875895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 550.881064] RIP: 0033:0x456959 [ 550.884254] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 550.903138] RSP: 002b:00007febbeb78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.910850] RAX: ffffffffffffffda RBX: 00007febbeb796d4 RCX: 0000000000456959 20:41:51 executing program 1 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x4020940d, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 550.918197] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000014 [ 550.925446] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 550.932694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 550.939940] R13: 00000000004d2fe8 R14: 00000000004c7cc4 R15: 0000000000000003 20:41:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) [ 551.073069] FAULT_INJECTION: forcing a failure. [ 551.073069] name failslab, interval 1, probability 0, space 0, times 0 [ 551.084416] CPU: 1 PID: 10371 Comm: syz-executor1 Not tainted 4.18.0-rc6-next-20180724+ #17 [ 551.092909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.102264] Call Trace: [ 551.104861] dump_stack+0x1c9/0x2b4 [ 551.108500] ? dump_stack_print_info.cold.2+0x52/0x52 [ 551.113700] should_fail.cold.4+0xa/0x11 [ 551.117772] ? __kernel_text_address+0xd/0x40 [ 551.122276] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 551.127389] ? __save_stack_trace+0x8d/0xf0 [ 551.131724] ? save_stack+0xa9/0xd0 [ 551.135357] ? save_stack+0x43/0xd0 [ 551.138988] ? kasan_kmalloc+0xc4/0xe0 [ 551.142879] ? kasan_slab_alloc+0x12/0x20 [ 551.147037] ? kmem_cache_alloc_node+0x144/0x780 [ 551.151796] ? __alloc_skb+0x119/0x770 [ 551.155689] ? netlink_ack+0x2df/0xbe0 [ 551.159586] ? netlink_rcv_skb+0x35d/0x440 [ 551.163822] ? rtnetlink_rcv+0x1c/0x20 [ 551.167718] ? netlink_unicast+0x5a0/0x760 [ 551.171957] ? netlink_sendmsg+0xa18/0xfc0 [ 551.176191] ? sock_sendmsg+0xd5/0x120 [ 551.180084] ? ___sys_sendmsg+0x7fd/0x930 [ 551.184244] ? __sys_sendmsg+0x11d/0x290 [ 551.188315] ? do_syscall_64+0x1b9/0x820 [ 551.192371] ? lock_acquire+0x1e4/0x540 [ 551.196340] ? fs_reclaim_acquire+0x20/0x20 [ 551.200655] ? lock_downgrade+0x8f0/0x8f0 [ 551.204795] ? check_same_owner+0x340/0x340 [ 551.209101] ? lock_downgrade+0x8f0/0x8f0 [ 551.213235] ? rcu_note_context_switch+0x730/0x730 [ 551.218157] __should_failslab+0x124/0x180 [ 551.222385] should_failslab+0x9/0x14 [ 551.226170] kmem_cache_alloc_node_trace+0x26f/0x770 [ 551.231266] ? kasan_kmalloc+0xc4/0xe0 [ 551.235151] __kmalloc_node_track_caller+0x33/0x70 [ 551.240074] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 551.244836] __alloc_skb+0x155/0x770 [ 551.248545] ? skb_scrub_packet+0x490/0x490 [ 551.252851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 551.258383] ? inet_rtm_newroute+0x170/0x290 [ 551.262775] ? fib_magic.isra.22+0x890/0x890 [ 551.267175] ? fib_magic.isra.22+0x890/0x890 [ 551.271584] netlink_ack+0x2df/0xbe0 [ 551.275297] ? netlink_sendmsg+0xfc0/0xfc0 [ 551.279535] netlink_rcv_skb+0x35d/0x440 [ 551.283595] ? rtnetlink_put_metrics+0x690/0x690 [ 551.288350] ? netlink_ack+0xbe0/0xbe0 [ 551.292227] rtnetlink_rcv+0x1c/0x20 [ 551.295926] netlink_unicast+0x5a0/0x760 [ 551.299974] ? netlink_attachskb+0x9a0/0x9a0 [ 551.304363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 551.309888] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 551.314899] netlink_sendmsg+0xa18/0xfc0 [ 551.318954] ? netlink_unicast+0x760/0x760 [ 551.323172] ? move_addr_to_kernel.part.20+0x100/0x100 [ 551.328443] ? security_socket_sendmsg+0x94/0xc0 [ 551.333189] ? netlink_unicast+0x760/0x760 [ 551.337413] sock_sendmsg+0xd5/0x120 [ 551.341112] ___sys_sendmsg+0x7fd/0x930 [ 551.345081] ? find_vpid+0xf0/0xf0 [ 551.348603] ? copy_msghdr_from_user+0x580/0x580 [ 551.353349] ? __f_unlock_pos+0x19/0x20 [ 551.357314] ? lock_downgrade+0x8f0/0x8f0 [ 551.361451] ? proc_fail_nth_write+0x9e/0x210 [ 551.365931] ? __fget_light+0x2f7/0x440 [ 551.369894] ? fget_raw+0x20/0x20 [ 551.373330] ? kasan_check_write+0x14/0x20 [ 551.377641] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 551.382559] ? fsnotify+0xbac/0x14e0 [ 551.386523] ? vfs_write+0x2f3/0x560 [ 551.390226] ? wait_for_completion+0x8d0/0x8d0 [ 551.394810] ? lock_release+0xa30/0xa30 [ 551.398776] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 551.404308] ? sockfd_lookup_light+0xc5/0x160 [ 551.408784] __sys_sendmsg+0x11d/0x290 [ 551.412654] ? __ia32_sys_shutdown+0x80/0x80 [ 551.417049] ? __sb_end_write+0xac/0xe0 [ 551.421009] ? fput+0x130/0x1a0 [ 551.424284] ? ksys_write+0x1ae/0x260 [ 551.428079] ? syscall_slow_exit_work+0x500/0x500 [ 551.432909] ? ksys_ioctl+0x81/0xd0 [ 551.436528] __x64_sys_sendmsg+0x78/0xb0 [ 551.440581] do_syscall_64+0x1b9/0x820 [ 551.444460] ? finish_task_switch+0x1d3/0x870 [ 551.448950] ? syscall_return_slowpath+0x5e0/0x5e0 [ 551.453869] ? syscall_return_slowpath+0x31d/0x5e0 [ 551.458795] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 551.463802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 551.468635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 551.473818] RIP: 0033:0x456959 [ 551.477012] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 551.495912] RSP: 002b:00007febbeb78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.503630] RAX: ffffffffffffffda RBX: 00007febbeb796d4 RCX: 0000000000456959 [ 551.510884] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000014 20:41:52 executing program 1 (fault-call:4 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) accept$alg(r2, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) ioctl(r3, 0x7, &(0x7f0000002640)="dfebbf84d1b502210950a9de5c2b8b77152297950f27b081ce8cb6957646ccfd5636f3c9cb9c6e174e88e234e317f037f0c07e4932e778c29d9d22432e35ea2b76a1f718fb1dd85d118eb6345d1c957738ddf958c31b8a") write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) sendmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="594d2067188feed3737e76c60136cc6fd071b81002ecf50891f93a6d052f0901994818acf6fa10f70a65d59219e476231f0deda7094e25a696efdce73107a5fac09bbc7bda73bb93537c872b68142856bae13bc80f6e54b3d869f2b4e94eaf9829d8a22a2dd9923c3d0ee91f97338682ca503c35abf044370d9e53f7a0852a3944f65a4a6302f8e07d8ffb50bf74c6be374cf17fc4f7bbef3d3632166ad09869ab94ccbe3efdc803bac8388c5634385d60a4863c59ee73744ccb9023e8eb5e477dc8c092b485d9927fa44c696836d3c0a6f4e322e5ef32d5e6b9a67aacbdda83159e54cfb4e7959a61e33212", 0xec}, {&(0x7f00000002c0)="61fe60675f9319bd64fe8ae3dbe3eb8b392d628a3e9ae4165403d24b574220870b041ed6913deaa15110993343b5736ded995dafdd4c2e0d7ac82b6c2740f4d06f805c146a74818380647e5a72fa29668b88e0786c3cfb537f041cf1588af6bf749e44d1", 0x64}, {&(0x7f0000001440)="b4d0c05d37344d92d83c9e416698481ee3afc3c606c170cde36e37820cb1030fb074ca065569dd2aa970a13f0ce4561eed7c4bc33b6b8a82cb7e87910c750da9607f9cf29519fb5c7a430d56ac8f31f78cdb84e9db6489baf93fc3fa8f303e135aa4ec45099d999361575743148a27499b52983e40679d2c7b4da90dcb3ad704297ff5197c39c47630adad4592dd8f7522f75af3c137488e38efaafcfdce35e86dc543452b3abe184fefd09055651d643259a0d70bbabe1b84106ae757b8c693a4b607a8915f2f769775bae168042641f7483a400e8618", 0xd7}], 0x3, &(0x7f0000001540)=[{0x18, 0x103, 0xb64e, "755791"}, {0xd8, 0x10c, 0x1, "56d538d81f1bf6f3d557d718911e41c80943f6c7c0e7a64eabceec64397a66a2a433dcaefa4fc9a4ab6eb31ea84b0bd9b754bf402e76fcec6fd1cb245df909c06bd46c2afcf70e1f94c14cfa8b606c1222e1b21852bc897179472dc9f0e81d1b12ef6f1c456470a29ac837e8584166e08e5d53cd197209a9d8ecd3315a6cecece02a54f3bc30c6e8da229351c0d339df8aa6dd945f3eb2a587ee0425853b07226073a8778a83eaf66ce591845d536cdee79729f44eb35ed1585590ca8d73e636c9fe0e63c6154d87"}, {0x1010, 0x10d, 0x3, "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"}], 0x1100, 0x4040080}, 0x4800) r5 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f00000000c0)={{0x7, 0x9}, 'port0\x00', 0x8c, 0x0, 0x1000, 0x7ff, 0x9, 0x208d0dc, 0x6, 0x0, 0x1, 0x6}) r6 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000440), 0x1000) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) write$P9_RMKNOD(r4, &(0x7f00000026c0)={0x14, 0x13, 0x1, {0x44, 0x4, 0x6}}, 0x14) [ 551.518146] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 551.525406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 551.532665] R13: 00000000004d2fe8 R14: 00000000004c7cc4 R15: 0000000000000004 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x20000550}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x3}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x34000) close(r2) close(r1) 20:41:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = epoll_create1(0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5451, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfe030000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfe03}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001f00)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x4, 0x2, 0x0, {0xa, 0x4e20, 0x1, @mcast1, 0x5cb}}}, 0x80, &(0x7f0000001740)=[{&(0x7f00000001c0)="da806b371c0f6003c730f75bfc84e91c742305a8a175961ab8b3f24ac52a6b631aa27d8cbeb59fff36697dcfc0fb184d0ac7d3731e02fc9f8202a51ac5d74fd05f933c54fd4bb7ad23601da9c2b1392abb90301ea2904d8394954ed8b831cc223ba5ac11f554bf824afc74531bf5f11a31eb1211e71bdd46a5199de630fa33ea45dfdfc1248d6a894077eeaea9e8fdf8399da3ffd34135eef9495c36a0db2939c8c71874f1ec40030a927a58f6be3d6f049da3", 0xb3}, {&(0x7f0000001440)="2e3af937b0adeddf01ee366988143bca0fbec61148b03de1787f2682c8090267ddd0005c7f3ed5ebf03c582abf5a639b9100bbc5a59c134d0cce70a15449c17116f8173969bb6476945661649c0a17873ac612cf85f40227404264f211e3c3aa040fea68aa80fbd02754139627620aaddd9c7fab9515271d1c1719fe6d691bc16fe3e25816a3e9b604e31e2d197fc7f04a2a3d98efec3ac95778635a20c0959a94fb9a3e075d594c2b44cb443a0979bf7880cf8b029bca7c614388fb6be6b17a0c664807f4f6b15c56664b7f020b58cccfba319e85055d6a02b0350c4f2f88a080b8f50056998644b90fae7a072959944a88", 0xf2}, {&(0x7f0000001540)="4f7f4f006c7898511750fba8d403313bfa53f9a128a6b532a23bc5f420642525ad52a406da1fc7937b16cb70272b543d4a26a995a5940a7aec505299c77f0d52978506ef6ad2924d3a5669f9a5cd0eb1f845bced06fc2630ad06ef681c096d16b08379a4027e8f8f80c1f87daac185a9a36822aac131998a141fcda3c45b0726eef30e812eba73739516e0734e2ad40fbcac1aeb00ea263dcf4a0c72901ef9a4a6c4fce605f21d8da56c0d499bf85ddcd4b8e8944a0b53e3c558dda5fa98c3cb35625ade3548b9ef4ae2abee559239827e4d61f4e8c55e2a78f8a5661a0b9cb184c4b7ac75a4701252752a", 0xeb}, {&(0x7f0000001640)="6f3c33449fca35bad210c848a42dd3572edb561eff5b377de3cb3eaa25cceae2cd1c973a283880cc8eb43efe28455068574d2db04e6fee9343d7a045b323e0d167093ec394829f39c465a6733d3a58dbb16bcb2cf8cf92939ecda71deb2494ceb57856aecd26e218a39b5a66ae47553aa8d7a12c503c7a2a7601c4d35df81da216411ec49e627b9338e818a3bc8b073b70d2cd59e04a9b2ae8b361931787aa73c5b88764c3deffbe86e532cdf9b2727309ef79acd0f927b9718c7b8691bc236ba75762600b3b903c", 0xc8}, {&(0x7f00000002c0)="ba98bcf3480fadc7e2d1d7e029d7aefd65c78802e1b4e5016d4b3033813249dee052548f888bd43dce97a66b7e0c02c3cb9494b9144afc64b3546e7abb9093d18a921a66748506072b1f7e6822ae1e2d3089de3ec2cf", 0x56}, {&(0x7f0000000380)="e3b4774b877c4828064824e4446ab1591f3204a599c355891f24afa352b7b05e412361abc654dec2d9ac9d80f29b03058f4320fe84506fd0b4d5fbddbb11d1b1c164b23c88a24118d4d177806f1dcfa1c7d6fdcd925ab0f5b2aa61561c596be3d2f526f26521e0a9a3ff9851", 0x6c}], 0x6, &(0x7f00000017c0)=[{0x80, 0x113, 0xc192, "2db33290ae1cf30375f02f35629fb2e6b04e2a80184f0d6ab248d251d31f8937f3574081bbe8bf68bd0024e0a1398175f9d92dd8be08e6d9b03d0fccf5d67b903a9d0994576a4bf381a25a70381185952cc73dbc0bef605ab1613ca6bc74f733c7ddb35fe4fa7bb2916c68333f9316"}, {0x68, 0x100, 0x5, "557fadae2176f6a063016ce2e2dce40813b22d0102f2896683395a92bea1450e5581cf353872e8f31339d6a333d76d94f98d5e21800217c916be5d5362e305da0e206ac5f1154fd6f84961d736492e0e56"}, {0x100, 0x115, 0xff, "28d0c1bfe9b96c6d7fc3fa9d61633c3967dbf00f7d9a210feef3dbf0b2be73a6999320651485a8f881ee57237923808c06ff82f208de0200003fa26ac708659d5bda14c395098efcdd808bd67a7e03a2d7c61d334dcbec6dab39ced18d2eff1723e738fce3e77625a474977a939cf06ef682a649554376f7e499930797750edc62b14b968eac8a0dd2cc290c409f8df54370b23e5a70e722d88a6ea9a53be7a3d990ca75d94bddf5aec525d3c472f28aa50117b2e291e50468b932e9e873af34c5b4b3c531ea612a67c97b8c48371e5b0009d2799088caae168ac6787c9e0e1472cb7dd812069022ed1496d1dd"}], 0x1e8}, 0xe9e1}, {{&(0x7f0000002000)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a40)="04d78491c1f797c59e2856d0dc470d4665029573c8e7dee2cb1496599ae095a941f0ab2f13a37f42696fd2e7bcf4cb2b", 0x30}, {&(0x7f0000001a80)="6bd22d8cd7161426861b49208177584dd3b5d63b8026d9da175fbf8c514c374aa7d1aef80c45974ea56aaec4ebc6a87ce220569b24ede69ae3ea180d2b6204c81fc9a40ce89315642c5c66eb4b86f09d435c1408c0baca06bcf856b5c186bee1edad84b2", 0x64}, {&(0x7f0000001f80)="6a20a54551db65872cc1bb4161c26101e5bda38b99f88775fd2b7e2f303a1facf14ab1928cdbc7f0f15edbdbe34a6c87f208069f11a735678c5a9a3cec5fa75485f32a4b606484dacd2e87230dbd8e5630fdf20eed7d0f447b39", 0x5a}, {&(0x7f0000001b80)="03b59e1c10a35ccd7f08a600444dd5b2462393b7b7603246e85fdb4a5e06d9771a287ad01f31e6f816eb9d8e169b3a075cbcfa18b86f486ec62ed923086370ad47ddb93da0bdd2b5ed9702eb962f56802203842178eb5dd04a58763aceb885ec0dd90ab510c602e7217f750bb9a5ca6acb4c596f82d1b5805abd4286e7b76ad5fc474de3618c33760a7e22b10afd490e20c7850c14a16a2bdf59f42988f19e83fe7ed0c8206761960d194bca15babe6e385a2c585e0d", 0xb6}], 0x4, &(0x7f0000001c80)=[{0x20, 0x110, 0x7, "334f9001fde08bc496dc6fec23cff3c6"}, {0x88, 0x102, 0x7b68, "6eeae1e295cf6ab8eaa736e2f2992c6665f8a047e17b379bfd9fbef4c2ef071291b763ca3dd3d782d863575a2170e896dbd679100e9a495ee432eb38e548b58ee52f0c0766ec25e7faad91c5ab896da3f2a771b1ee7b32f0cb8f7c2659c5b1c5ced4389827cde113ec9e40dfb32a50844418ba1a"}, {0xb0, 0x108, 0x5, "d37fd9b0d74e0271e1efb498e1897a11534947e3a49ea9de6696df2f2ec6db0d4e199252aa2e2584192a5060ef67847792e67e787b8ab7533374f06bd5a98c1575d0769af8dd99329abdb44b60d04c775ca674be7ea4a9a337c721225e658215bc8b6d6644a0c4a60377a6314e4bd0ac56bbc3903420362ae4e7f999eff8e0370cec74ffae3ee31fc8bca81f855b22a8aa45577c2ea5abe952c7c16dac2df4"}, {0x78, 0x6, 0x2, "87c088766227ebb57e3169d4f2b94887e15f707b60d85485a09f18d1fa836b5bbf2dd63aac23dd97c12399d852b7ff0f6d8c368f30151d2045c559029afbf6a519c692544f6a4955e1e8be825d2a699619dbce91fbe3bb1984e05439e234cbbe54304492ad6e72ee"}, {0x88, 0x107, 0xd6, "2be780eaca64705d75bedbc45fadcacdbddc764855764e4dc3e794cd87f17e3a136fe7e7402d5b32b92a7425e862886ec140bb6bf6f27a1f195585906a070cc19a9f05fd48b34ec934b46fa51ee8a098691f28e02757b9bfb422955c84d26473d53388172cb70ade1881c35d5bf177bba102de80"}], 0x258, 0x80}, 0x9}], 0x2, 0x0) 20:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xff000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) [ 552.728806] dccp_close: ABORT with 40 bytes unread 20:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x8c140000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x4000000000000000) close(r2) close(r1) 20:41:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x54a1, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfdffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfffffff0}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 20:41:53 executing program 7: r0 = socket$inet6(0xa, 0x7ffffffffffd, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x3}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x9effffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f00000000c0)=0xfffffffffffffeca) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x2000000) close(r2) close(r1) 20:41:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0f85403, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5b969427, 0x400003) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000140)) ioctl(r0, 0x8912, &(0x7f0000000100)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) ioctl$TCFLSH(r1, 0x540b, 0xffffffffffffff8e) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r3, r2, 0x0) 20:41:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) dup3(r2, r1, 0x0) 20:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfffffffd}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfe}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x148c}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfe00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfe03000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x200000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5420, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xffffff7f}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x40000000) close(r2) close(r1) 20:41:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) dup3(r2, r1, 0x0) 20:41:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x2000000, &(0x7f0000001440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmsde=00000000000000000120000,ucer_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',max_read=0xffffffffffffff35,max_read=0x00000000000005b7,allow_other,blksize=0x0000000000000000,\x00']) 20:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x6, 0x4010, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100000001, 0x400) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000000c0)={0x8, 0x6, 0x1701, 0xffffffff}, 0x6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5e58, 0x2) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14, 0x80000) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000bc0)={@dev={0xac, 0x14, 0x14, 0x14}, @loopback, r3}, 0xc) r4 = epoll_create1(0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000001c0)={0x3, "e98aec"}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0505405, &(0x7f0000000000)) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) dup3(r4, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000c00)={{0x3, 0x6, 0x0, 0x1, '\x00', 0x2}, 0x1, [0x5, 0x4, 0xfffffffffffffff8, 0x28000000000000, 0x0, 0x0, 0x0, 0x9, 0x7, 0x3a0, 0x0, 0x2, 0x1ff, 0x5, 0x4, 0x1ff, 0x4, 0x4000000, 0x9, 0x9, 0x4, 0x5, 0x8, 0x8, 0x3, 0x3aa, 0x11, 0x6, 0x0, 0x7fffffff, 0x5, 0x9, 0x2, 0x5, 0x4, 0x2, 0x8000, 0x8, 0x4, 0x0, 0x8, 0x9, 0x1, 0x0, 0x0, 0xb3b84f7, 0x8, 0x87, 0x9, 0x100, 0x66c7, 0x4, 0x400, 0x8, 0x2, 0x9, 0x8, 0x5, 0x606a, 0x2, 0x8, 0xffffffffffff98e0, 0x100000000, 0x101, 0x1, 0x2, 0x7fffffff, 0x8, 0x4, 0x1, 0xbbc, 0x6, 0x180000000000, 0x10000, 0xfffffffffffffff7, 0x6, 0x38, 0x800, 0x9873, 0x270, 0x1c00000, 0x7, 0x800, 0x8, 0x5, 0x1, 0x5, 0x7f, 0x4, 0x6afb, 0x1, 0x2, 0x100000000, 0x0, 0x2, 0x2, 0x1, 0x5, 0x4, 0x1f, 0x8e37, 0x1, 0x2, 0x8, 0x3f, 0x800, 0xffff, 0x0, 0xd0a, 0x2, 0xffffffffffffff5f, 0x1ff, 0x3, 0x9, 0x3, 0x8, 0x1000, 0xfffffffffffff94a, 0x4, 0x8, 0x1, 0x5, 0x80, 0x3f, 0x81, 0xffffffff, 0x0, 0x7], {0x77359400}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7d8, 0x0, 0x138, 0x388, 0x5d0, 0x5d0, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={[], [], @local}, 'team0\x00', 0xfffffffffffffffd}}}, {{@ipv6={@ipv4={[], [], @remote}, @mcast2, [0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xffffff00], 'syz_tun\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x1786, 0x1, 0x36}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @common=@rt={0x138, 'rt\x00', 0x0, {0x400, 0x100, 0xe40f, 0x5, 0x20, 0x2, [@dev={0xfe, 0x80, [], 0xd}, @mcast1, @ipv4={[], [], @multicast1}, @mcast1, @local, @mcast1, @local, @local, @mcast1, @mcast2, @local, @remote, @dev={0xfe, 0x80, [], 0x1b}, @dev={0xfe, 0x80, [], 0x20}, @dev={0xfe, 0x80, [], 0x18}, @local]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x36}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@state={0x28, 'state\x00', 0x0, {0x400}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@loopback, 0x6, 0x2d, 0x7fff}}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'bond_slave_1\x00', 'syzkaller0\x00', {}, {}, 0x87, 0x5}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@ipv4={[], [], @loopback}, 0x0, 0x38, 0x4}}}, {{@ipv6={@mcast2, @empty, [0xffffffff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 'erspan0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x2b, 0x7, 0x6, 0x4}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x9f6a, 0x4, 0x1, [0xffff, 0xefc, 0x7, 0x4, 0x5, 0x2, 0x5, 0x702, 0x5, 0x8, 0x3f, 0x3ff, 0x2, 0x800, 0x9], 0xd}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x21}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x3fe}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xff00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x800000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfdffffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x2, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) dup3(r2, r1, 0x0) 20:41:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0xff0f000000000000) close(r2) close(r1) 20:41:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = dup2(r0, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) waitid(0x3, 0x0, 0x0, 0x4, &(0x7f0000c21f70)) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000000c0)={0x972, 0x7fffffff, 0x5, 0x4, 0x4, 0x5, 0x2, 0x5, 0xffffffffffffffc0, 0x0, 0x80000001, 0x100}) sendmmsg(r1, &(0x7f0000000140), 0x4000353, 0x0) 20:41:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)={0x30, 0x18, 0x1, 0x0, 0x0, {0x7}, [@typed={0xc, 0x3, @u64}, @nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x30}}, 0x0) dup3(r2, r1, 0x0) 20:41:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xff00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf0ffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfe00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x34000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5422, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x8c14}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x4000000000000) close(r2) close(r1) 20:41:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000040), &(0x7f00000000c0)) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:41:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="fb2fc1c036507d291aeef6b1e845dcadf8f85dd6281722b3ec744ffae89313d0488578276b70886b3a699f0892d45542554ee1f5368669f96f799625c3ef73fe38", 0x41, 0xfffffffffffffff8) keyctl$revoke(0x3, r2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0x20000010}) r5 = semget$private(0x0, 0x4, 0x80) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f00000001c0)=""/110) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r3, r1, 0x0) 20:41:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x8c14000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x3000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5450, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x1000000) close(r2) close(r1) 20:41:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) recvmsg(r1, &(0x7f00000034c0)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002240)=""/122, 0x7a}, {&(0x7f00000022c0)=""/141, 0x8d}, {&(0x7f0000002380)=""/62, 0x3e}, {&(0x7f00000023c0)=""/134, 0x86}], 0x4, &(0x7f00000024c0)=""/4096, 0x1000, 0x9}, 0x10000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000003500)) listen(r1, 0x5eb857) write$binfmt_elf32(r0, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x2, 0x4, 0x1ff, 0xffffffff, 0x2, 0x3, 0x2, 0xe6, 0x38, 0x2fa, 0xff, 0x6, 0x20, 0x2, 0x6a5, 0x7f7, 0x5}, [{0x7, 0xed, 0xfffffffffffff801, 0x10001, 0x7, 0x80, 0x1, 0x8}, {0x6, 0x6, 0xe4e, 0x17, 0x80000001, 0x7, 0x2, 0x939}], "1ad443eac0c3b8c1c6c5cf7a05c3b12b1ed53bdf33079cf0d7ecbf0a919e99d635886203226fa071d41f6fa47d584a4a0197726523896d09b5f72f66401bc30ba49d5f636c2692a97478cfa09a3962", [[], [], [], [], [], []]}, 0x6c7) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r1, &(0x7f0000975000)=@can={0x1d, 0x0}, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000440), 0x1000) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x16e) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001b40)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) accept4$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000002200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001d40)={0x4bc, r8, 0x18, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0xf0, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r11}, {0x1b0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xd12c}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x10, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:41:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x2000000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x2010, 0xffffffffffffffff, 0x7ffffffffffe) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x400300}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fchdir(r0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040)={0x80000002}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfe000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc020660b, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:41:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x200000000000000) close(r2) close(r1) 20:41:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x300}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:41:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(0xffffffffffffffff, r1, 0x0) 20:41:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:41:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x4000000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 2: r0 = socket$inet6(0xa, 0xf, 0x20) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000300)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000001440)=""/232, 0xe8}, {&(0x7f0000001540)=""/164, 0xa4}], 0x3, &(0x7f0000001600)=""/129, 0x81, 0x3}, 0x10000) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) accept4$inet(r2, &(0x7f00000016c0)={0x2, 0x0, @loopback}, &(0x7f0000001700)=0x10, 0x80800) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r2, 0x37) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000019c0)={'IDLETIMER\x00'}, &(0x7f0000001a00)=0x1e) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000001740)={0xb0a1, 0xfffffffffffffffe, 0x1, 0x7, 0xa, [{0x8, 0x4, 0x200, 0x0, 0x0, 0x108}, {0xe2, 0x8, 0x3, 0x0, 0x0, 0x1000}, {0x4, 0x4, 0x5}, {0x7, 0x400, 0x3, 0x0, 0x0, 0x500}, {0x4, 0x80, 0x8001, 0x0, 0x0, 0x100}, {0xaae, 0x80000000, 0x3ff, 0x0, 0x0, 0x200}, {0x7fffffff, 0x1, 0x61c6, 0x0, 0x0, 0x204}, {0x81, 0x7ff, 0x3, 0x0, 0x0, 0x2104}, {0x9, 0x100, 0x7f, 0x0, 0x0, 0x103}, {0x7, 0x7ff, 0x10000}]}) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) setsockopt(r5, 0x5, 0x6, &(0x7f0000001b80)="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", 0x1000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) recvfrom$inet6(r1, &(0x7f0000001a40)=""/201, 0xc9, 0x40002103, &(0x7f0000001b40)={0xa, 0x4e20, 0x9, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0045878, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0xff0f) close(r2) close(r1) 20:42:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(0xffffffffffffffff, r1, 0x0) 20:42:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001a00)={0x11, 0x0, 0x0}, &(0x7f0000001a40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000001e00)=0xe8) getpeername$packet(r0, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001f80)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002000)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002040)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000002140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000002180)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002340)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000002440)=0xe8) clock_gettime(0x0, &(0x7f000000eb80)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000e980)=[{{&(0x7f0000002480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)=""/234, 0xea}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/26, 0x1a}], 0x4, &(0x7f00000036c0)=""/161, 0xa1, 0xffffffffffffffff}, 0x81}, {{&(0x7f0000003780)=@can, 0x80, &(0x7f0000006a00)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/147, 0x93}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/48, 0x30}, {&(0x7f0000006900)=""/128, 0x80}, {&(0x7f0000006980)=""/23, 0x17}, {&(0x7f00000069c0)=""/31, 0x1f}], 0x8, &(0x7f0000006a80)=""/216, 0xd8, 0x3}, 0x2}, {{0x0, 0x0, &(0x7f000000a080)=[{&(0x7f0000006b80)=""/203, 0xcb}, {&(0x7f0000006c80)=""/4096, 0x1000}, {&(0x7f0000007c80)=""/237, 0xed}, {&(0x7f0000007d80)=""/239, 0xef}, {&(0x7f0000007e80)=""/218, 0xda}, {&(0x7f0000007f80)=""/25, 0x19}, {&(0x7f0000007fc0)=""/176, 0xb0}, {&(0x7f0000008080)=""/4096, 0x1000}, {&(0x7f0000009080)=""/4096, 0x1000}], 0x9, &(0x7f000000a140)=""/4096, 0x1000, 0xfffffffffffffcfe}, 0x4}, {{&(0x7f000000b140)=@hci={0x1f, 0x0}, 0x80, &(0x7f000000b200)=[{&(0x7f000000b1c0)=""/45, 0x2d}], 0x1, &(0x7f000000b240)=""/4096, 0x1000, 0xc1b4}, 0x4de}, {{&(0x7f000000c240)=@ipx, 0x80, &(0x7f000000c680)=[{&(0x7f000000c2c0)=""/7, 0x7}, {&(0x7f000000c300)=""/47, 0x2f}, {&(0x7f000000c340)}, {&(0x7f000000c380)=""/194, 0xc2}, {&(0x7f000000c480)=""/194, 0xc2}, {&(0x7f000000c580)=""/183, 0xb7}, {&(0x7f000000c640)=""/2, 0x2}], 0x7, 0x0, 0x0, 0x200}, 0x9}, {{&(0x7f000000c700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f000000dc00)=[{&(0x7f000000c780)=""/123, 0x7b}, {&(0x7f000000c800)=""/34, 0x22}, {&(0x7f000000c840)=""/218, 0xda}, {&(0x7f000000c940)=""/144, 0x90}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/247, 0xf7}, {&(0x7f000000db00)=""/202, 0xca}], 0x7, &(0x7f000000dc80)=""/233, 0xe9, 0x3ff}, 0x4}, {{&(0x7f000000dd80)=@nl=@unspec, 0x80, &(0x7f000000e2c0)=[{&(0x7f000000de00)=""/241, 0xf1}, {&(0x7f000000df00)=""/195, 0xc3}, {&(0x7f000000e000)=""/41, 0x29}, {&(0x7f000000e040)=""/172, 0xac}, {&(0x7f000000e100)=""/39, 0x27}, {&(0x7f000000e140)=""/130, 0x82}, {&(0x7f000000e200)=""/170, 0xaa}], 0x7, 0x0, 0x0, 0x1}, 0xff}, {{&(0x7f000000e340)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f000000e800)=[{&(0x7f000000e3c0)=""/68, 0x44}, {&(0x7f000000e440)=""/18, 0x12}, {&(0x7f000000e480)=""/95, 0x5f}, {&(0x7f000000e500)=""/121, 0x79}, {&(0x7f000000e580)=""/162, 0xa2}, {&(0x7f000000e640)=""/210, 0xd2}, {&(0x7f000000e740)=""/154, 0x9a}], 0x7, &(0x7f000000e880)=""/234, 0xea, 0x8001}, 0x1ff}], 0x8, 0x20, &(0x7f000000ebc0)={r13, r14+10000000}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000ec00)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000ec80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000ed80)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f000000ee80)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f000000ef80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000efc0)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000010700)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000010800)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000010900)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000010940)={'bridge_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000010980)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000109c0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000010ac0)={0x0, @rand_addr, @broadcast}, &(0x7f0000010b00)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000010b40)={'veth0_to_team\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000010b80)={0x0, @remote, @broadcast}, &(0x7f0000010bc0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000010c00)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000010d00)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000010d40)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000010f00)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000011000)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000011880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000011840)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4070000", @ANYRES16=r4, @ANYBLOB="040026bd7000ffdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="f401020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004003b00000008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004009300000008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000008000100", @ANYRES32=r15, @ANYBLOB="b40002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800042cfe730009000000080006000cc209f4660a39af1cebebb42a51e5cb6caa975ee29c0cf551fd0ac0c094a18f36c1fd234d1497c3e95e5b97bbf5c2e300a1bb6888c3c84907276d1bef38198eeec5e22e86ae0c2316ca7d30110934fd535a03e17567fc4d4bdbe075fb2944673e2bcae8187542602423056c2b63067311e2", @ANYRES32=r17, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000008000100", @ANYRES32=r18, @ANYBLOB="7402020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400f7ffffff08000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400070000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000104000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000240004000800090208000000ff000f07200000000700ff0100000000ffff050509000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400a60f000008000600", @ANYRES32=r21, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="08000100", @ANYRES32=r25, @ANYBLOB="e800020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400910400003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32=r27, @ANYBLOB="ac00020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004006002000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000700000008000100", @ANYRES32=r28, @ANYBLOB="f000020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r29, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ff0f0000"], 0x7e4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_addrs=@in={0x2, 0x4e21, @multicast1}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r31 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x143600000, 0x260040) renameat2(r31, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x1) dup3(r2, r1, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xf0}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x100000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0xfffff000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x10080) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) write$P9_RLOCK(r5, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x3}, 0x8) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x2) close(r2) close(r1) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000000c0)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5460, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(0xffffffffffffffff, r1, 0x0) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfe03}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x40030000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x8c14000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfdffffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x40000000003, 0xfffffffffffffffe) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) write$vnet(r4, &(0x7f00000002c0)={0x1, {&(0x7f0000000200)=""/43, 0x2b, &(0x7f0000002440)=""/187, 0x3, 0x2}}, 0x68) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) sendto$llc(r4, &(0x7f0000001440)="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", 0x1000, 0x4800, &(0x7f00000001c0)={0x1a, 0x104, 0x4, 0x3, 0x81, 0x1, @random="750a38123345"}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000040)=0x84) ioctl$TCSBRKP(r4, 0x5425, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0xfffffffffffffffe}, 0x8) 20:42:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfe03000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x40030000000000) close(r2) close(r1) 20:42:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40049409, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:02 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) r1 = getpgrp(0x0) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000540)=0x1c) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) kcmp(r0, r1, 0x2, r2, r3) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000040)="025c3f0a00145f8f8940707e6a87bcefc9506d78aa38b9c918d9844a1fe5eafa425c9ebeeabdfad8f33c1b24ba98c1016188a8cdede3b3") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) r6 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x4}, &(0x7f00000001c0)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0x50, &(0x7f0000000600)}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000200)={r7, 0xb55}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000700)={{{@in, @in6}}, {{@in6=@dev}}}, &(0x7f0000000800)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000880)={@dev, @dev, 0x0}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000840)={'vcan0\x00', r8}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000140)={@local, r9}, 0x14) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r10 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000013000)) r11 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0xc5, 0x6, &(0x7f0000000300)="962f2980481d934c79ab4c4effaab497686115171fcc13ba2cbb3112ae6d156b6ac05ac561c6f23228a01b66141fb33256d1b297f56f582eda8b92b183a76e0d9bbe4346361b6fc2e150ea24b7966bfa947ccd5a66d8957c61c6ea0051bb064fdbbd86804f74cf83921ba0dc74397e652833963409b150efb24992a20c4a9f38f249235b058c60d6ccfb858efd40056d54f0f706b11e5b51f4600d2694438b508b9439e6844a702f9ea19cf0ea38700c1662236d1dfb7f1898b4cffa57150f029a6cff5df8", &(0x7f0000000400)=""/6, 0x9}, 0x28) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$TIOCLINUX7(r10, 0x541c, &(0x7f00000000c0)={0x7, 0x6}) openat$cgroup(r3, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) dup3(r6, r5, 0x0) 20:42:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xff000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, 0xffffffffffffffff, 0x0) 20:42:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x300}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, 0xffffffffffffffff, 0x0) 20:42:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x3000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, 0xffffffffffffffff, 0x0) 20:42:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x100000000000000) close(r2) close(r1) 20:42:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2a8000, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0045878, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r1, 0x0) 20:42:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x8c14}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:04 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 20:42:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x400300) close(r2) close(r1) 20:42:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x54a0, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x2000000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001440)=""/4096, &(0x7f0000000040)=0x1000) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x800000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000040)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$TCSBRK(r4, 0x5409, 0xfffffffffffff000) dup3(r2, r1, 0x0) 20:42:05 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) [ 564.488525] IPVS: length: 4096 != 8 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfe}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x54a3, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000000ffffffff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x4000) close(r2) close(r1) [ 565.437703] IPVS: length: 4096 != 8 20:42:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) flock(r0, 0x2) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 20:42:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfe000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x8c140000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x400300}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x65, 0x1, 0x3, 0x4, 0x3, 0x7}, 0x20) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0xfffffffffffffffe}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r1, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r1) close(0xffffffffffffffff) 20:42:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x80605414, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x82, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', r2}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r4, &(0x7f0000000440)=ANY=[], 0x0) r6 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000440), 0x1000) sendmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xff00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:07 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 20:42:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) userfaultfd(0x800) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) dup3(r2, r1, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x148c}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x300000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x34000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xff00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x3fe}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfe00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x82000, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000084000000060000000000000000000000981bd9f21fb1832aee67564c6f8ac53f90b184b1c996"], 0x18}], 0x1, 0x0) close(r3) close(r2) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfe00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 20:42:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x8}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40505412, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x241, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f00000001c0)="5b82138a0f4789e4da3a303192325da2355144c8b5037a684296d7ddf82b82f0e1b313cd7752026343c684c4d0a24d001eb6856dab22d5a18fa61e1024cebc2998ce4b7cf5183a211d2b904ae4e2d5aa3b39bd1702af37a02725978bbf57ef0dd4f6a2", 0x63}, {&(0x7f0000002440)="ff298c1951b0483e8884b4ff56b8914e9c69ab890f4bbf83cb5683e62fbb0cbfcf4ef309c6bb75880654a34d0601b147c6c61dde64ecfde377bce6d6dd921847c8988ab4907994b0ae8cfe60651c14a5b0891e1554c5c2ed513d632f1924b91a0a19088f50057ea1b927bb01d0ea051b869c10fbbbabf6268507adcf1ff8729bde222c966c8f2978520b8f19ae0182c0fde25aa5da0c95a27392d5072b6621726dafde1a914e0ef4d974b422b830b73824fcf6a8b40730c79dfb0b66e734c88c", 0xc0}], 0x3, &(0x7f0000002500)=[{0x18, 0x10f, 0x7c, "a6909c7246218a"}, {0xd8, 0x0, 0x9, "6ca52a58febadb7bd0a3c41d09409b21f5e38717787ca08c42569b7ef6a400f7d1b26078ad332d030eca574d258cadb057332ab18ec3ed6964221769d1534e5f66d2cd713d8aa5a11fce75aa9b5e22f8ba5c103148d42ab05d2e1341fc8f204bb755b9eb6e417131b992951691ef36cb473d0b0d97d49d0501d3ff36f3431a8f2b48d231547218792e4e99bbb3c9912219ef92ed6aaa8cb5e2ef87d89671eaf3fcefd2bd11164ebc833a6245a7619ea1ecd66dfd847d238510876ddfa9eb1fc3b26bd13e"}, {0x88, 0x1, 0xaa, "93b45d14d75b2f8c2eb30816d9a979a85702aa96f627081c150e8307c8fd77d928e62a56bb8b203057f69fdbd6c43bdd9ec51445446515883041a50959167491dae5eca758e8f6df7f753fbc8e8065c3aeab052b11fc52b6d0bed489f8202bf644c087b5dae0efc904e106f5d93d073fc07e"}, {0x10, 0x103, 0x40}, {0xc8, 0x11f, 0x0, "449d31d4332c6d75af744b5265ffbafb4110e8eb38c8dd63b905f08c966709bd78ea852465e5d90a083c359ab1254e4d3f5b83eaf29ad22179e53bddde816438b119ef3f9af84c2ed8bee1e07470472b6bf5dc7ce378eca544b698daf07a3bba67b11e2b7e3f30b9339e0688390d9c19c135f9dd0a513cd8571c5a5c02c5e56fe4b0d2a82a15964dce682ddfeb8092ac54c23e94ab49925d1d30320623c4c70c35090e76cd96d29b810978e8228dc0806f"}], 0x250, 0x20000010}, 0x4000010) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x4000000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xfe030000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0xf00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000c062876f215529bccb29feae3967ffffffffffffff7ded0aac17acf7000000fa729b9afce50701caa7936a1c965e6bfdf38649f2cdb4b7ae54de07", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x18) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x200, 0x200000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r4, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000000000009fb7a35e40d2750bbf47aff92fcb95b817f498d8246101c08aaba69f0f907e6374cb078f4e7081f50f4336bf569b030dc7a8e1348979b5aed0b4853afe1ad36192604e86da56484fb70ef0db404e3fe72b61d3262a4920e1213bf3d230e6654d01d3a9166463b2e0c118c764a0f5c44b9eb1b97063a0ee5e581a750a3dfd10d4eee5c3565671a1f9e2605e189d009afc0bd8418196ad99d"], 0x18}], 0x1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20, 0xffffffffffffffda, 0x7, {0x1, 0x4, 0x5, 0xff}}, 0x20) close(r5) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 20:42:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000001c0)="cb8cf7701bc41eb81ade8c8bf7d08fb49eeb82f6fcf9cd202cc998b14a392a8f65d2d047439cbf66df7fd845c310e2494ecedb2e5314e649b00a4cbe3044aa7411ece021fb1a") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000140)) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)={0x0, 0x3, 0xfffffffffffffffc}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 20:42:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40345410, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xff000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd89}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4008851) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x34000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfe}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfe030000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfe00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000000004, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="120000060000000000000000000000"], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:10 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x54a2, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x84) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000180), 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80006, 0x3f) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0xeb, 0x4) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) r4 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x8000000000001ffd) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000013000)) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0505405, &(0x7f0000000000)) epoll_create1(0x80000) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r4, r3, 0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x80000000) 20:42:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfe03000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) accept(r0, &(0x7f00000002c0)=@un=@abs, &(0x7f0000000380)=0x80) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) accept4$unix(r4, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80800) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @loopback, 0x8}}, 0x9, 0x9, 0x3, 0x2, 0x2725}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x22, 0x100000000}, 0x8) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) r4 = dup(r3) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000040), 0x4) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40030000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8c14}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfffff000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl(r1, 0x1, &(0x7f0000000000)="9c70d8da4e47259a51a3a648cf6f4ce6a85f23c5e3c6c47a212e255943e595524522d9d3849ca38af0527158b1d5c2d4e850dae52f9156aaf450272fb599c090e8797f738d627eabb5ee71c6664a8f7ef1e130994edf894cd6e0680496b62157cd757aadd03a38b65456d1e17d81be4607650e26122445675df146d4a459f5d9c22730fa077495ec1903b8d1ca2455bf892eb991cd378f05317143fc00c6522d2c4e89686d647e") ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfe03}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x2}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:11 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfe00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001440)={0x1, 0x0, [{0x2ab}]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r2, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) umount2(&(0x7f0000000380)='./file0\x00', 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x20d, 0x0, 0x6, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000002c0)={r6, 0x36d}, &(0x7f0000000300)=0x8) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f00000000c0)=""/177, 0xb1, 0x2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000040)={0x3, 0xffffffffffffff9c}) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c3000000000000000000000000000000000000") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xff00000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/213, 0xd5}, {&(0x7f0000000180)=""/116, 0x74}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000200)=""/102, 0x66}], 0x4, &(0x7f0000000400)=""/203, 0xcb, 0x4}, 0x2020) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000580)=0x1713800000000, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/audio\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000006c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000600)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) close(r2) close(r1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'bridge_slave_0\x00', {0x2, 0x4e22, @remote}}) 20:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0xfdfdffff}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:12 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002980)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002940)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000029c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x10001, @mcast1, 0x6b}, r5}}, 0x30) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0xa, &(0x7f0000002800)=[{&(0x7f0000000100)="9e82fa47be34cb131ee00d1f139a91ffeff74631e5d1df31e87acf09631e8a5c6cb5c5201086279729357992e9474fbcbb4155dfacb7d5a2a8f33c548fabfbdbe700738c4ecb9de11cd7cabbf669e6664f4ed9b5a54cf7defe94867b0744c19c4748b3ccce7610a93b296b448a38c8b532c49099afb38da72fae4528b6470f07c603a8c0607ee72ca524c17af3664c21015ea426caa42ed03fad38fe22be3e0ea00756de8ff8e3d86cf37c583dce2fe174f4ecc64c4b16c53d92af4b7b5edcf04414d7b820b3da3cbabe91125b0dbd", 0xcf, 0x22c1}, {&(0x7f0000001440)="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", 0x1000, 0x7}, {&(0x7f0000000200)="4d0dce3232440f255b14b528607832cefdce476e2b4a455fb9bc1517481344150057a6a1e27fa93fc78d5532e78605d03e5fb535b0962d586bc1e9113afc40d2ab0c651ef258b1327b8a68b8d55a741483dcf17412633b4f84be1877e98e", 0x5e, 0x3f}, {&(0x7f0000002440)="fc459a537e9379aee38cc5d20359cf7d2c720c73846ee3c3bb63bf24f81341296ff30fdc54ea859a8d97e23b7f315dd28d9bea8f89a1b3a96f5d959f9852ce3d0c226d453e3983f0a6fce9b4555c105d83acf01b24c8783c676b512ffb40c61696751ee70f7186b20dbeef6463830a2aed816630bac8d483af6a61dc3f1c79e65ce327bf73696583da4273b939df95c4680f2c823f6a628f8558cc97bbdaf7e1eb271ba897c45cf880b6fcdeb4b7ff07670f6856021a13773a0d6f4d764e40ecaca04ac6e0c18a387d548703784b6e729a9552bad9460f197ea85f379a93405e6b457d5dd11c8ca3b65081851d0e6cf6c57c8bb4e022a73af6", 0xf9, 0xffffffffffffffe0}, {&(0x7f00000002c0)="e32f776b940aec4e3dc32a47ea38a370f55d6dea3c2bcfd80d76d40d217dd5b5b27e176811618c80b169edea2e090b275bbb108d796fcf7691c66e9bec9b067a7c86da6a7fcaa1503fc6", 0x4a, 0x7}, {&(0x7f0000002540)="ee213fb9cb2bd8a85d5363d313220b64cd650158ee9ba649b9c2a8ffdc91127fa93245cefc29fa2cdfdc282e4bb581501308b4c13e6729205dec8ec8327a800b278506f6341d8b79293e9cfdd13cf32d51a4e2ff0fb77f526fd4af0bb20b6d251f4335097e3b2e4ed2f4cbb12c9d1341b1ddd036091ed71e11b9a1ddb36344ad36341e1512a5cb9205d6e0158cf694ff5c62582fa009a66b1812910eda6b74b72f73cf6ee31a02035e50b74f527b1b219041dc409bda08f3112a2e6c360c0c0206f847c07fd920eca6e3640dc794786afe4a90547141fb0d", 0xd8, 0x8b}, {&(0x7f0000000380)="769b9051655234388c1787e043df3b86b1c474e6e8ed835253823b81fe28ea8b3994fec4f86829f694635b1db95ab83d2c6cb4b968aeb79e7a60ad3351409418d7", 0x41, 0x64}, {&(0x7f0000002640)="b1d5ea294b84225bfd1cca688ac1dc675e0e8501d8506cdf9ca9676badc4bfc0f53f5d063e9dee5065bf8ae7da19752d7f9bad5b54e8e449756d5a3b7722d1816a14762248818c0c2eb5bbbb8bfa1db23677d6dc1a1f79716ca5a4b9b98839fb51d51bc310466b6daa9d8399ec", 0x6d, 0x5}, {&(0x7f00000026c0)="d9f506c0829bccbbbf26627302d4ec89efc5928f5fc6372b6763d0ffe21308b756b98b8477935cf0b8d5e8774187796e59e3ad57c8e7b9d1f9fd2da7f01f2fd27f6129ca24d7909f6eefe95b45d156ece30e95539e48b71cf51ba3b6bdaa25f4d6085bc73a92e61b21de306712956f022d4772cdba", 0x75, 0x8}, {&(0x7f0000002740)="66b9bfab46555ccbae9a9957f0e43787c5144e6dcfb026f54796efbae546a82ab1cf5b9b03f43572e0dd6c8a953a370152a2d5f9fa200853cdf3ba0629320dfd0385bab59dd0a9178c10901f8ab5bf8276c89152afcf67b8b54a4acd5bf6e1c0dc93296af00734c82abe51fdb1e4b5b7d9f9db64c38b5e6a3282252ee30ce3dae5258a190896441b6df074a1d2a02466117de83c86b1cd235765649adc723f78d147b1e09f955debb1d394d0b56795b1a2f4adc535556a", 0xb7, 0x6}], 0x20, &(0x7f0000002900)={[{@largeio='largeio'}, {@norecovery='norecovery'}, {@wsync='wsync'}, {@barrier='barrier'}, {@noattr2='noattr2'}, {@usrquota='usrquota'}, {@ikeep='ikeep'}]}) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xff, &(0x7f0000000180)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x1, "06"}, &(0x7f00000000c0)=0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x0, 0x5, 0x8, r5}, &(0x7f0000000140)=0x10) 20:42:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8c14000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x4000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x0) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x8001, 0x4d, 0x9, 0x2, 0x100, 0x9, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x1, @loopback, 0x3}}, 0x4, 0x0, 0x401, 0x6, 0x5f1}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={r4, 0x1000, 0x30}, &(0x7f00000002c0)=0xc) close(r3) close(r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1ff, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x5, 0x2, 0x6, 0x2a, 0x100000001, 0x3, 0x9, r6}, 0x20) ioctl$LOOP_CLR_FD(r2, 0x4c01) 20:42:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x300000000000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x88400) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="d7492310fd648b643652a194e36a781f", 0x10) clone(0x3, &(0x7f0000000840)="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", &(0x7f0000000400), &(0x7f00000003c0), &(0x7f0000000b00)="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") ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x40001, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000240)={0x3003, 0x10000}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r4, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000000000084000000060000000000000000000000b569cd8081c9295fa5cd1b2017efb2e6daa483d358dbdc23b111ff9f3256d17a11fc5b4f196212c10d25226f8611c21f23b1e836377e5f023ce45c03f896b9d38199082ec03e71f9240a18b0e817d52d3470da36f14c4759a68e707621f8099a8f1836baae2c585dffeade6d36fd7b6256692d58ed9c445674f6312d9ffe27483b0fe783112723f9df0463d46ab4ad2a66121a16c6ba8567286d0e58e95c53be4c9695"], 0x18}], 0x1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000004c0)={@llc={0x1a, 0x33f, 0x5, 0xec, 0x100000000, 0x81, @broadcast}, {&(0x7f00000002c0)=""/170, 0xaa}, &(0x7f0000000480), 0x1}, 0xa0) close(r4) close(r1) close(r0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x10, 0x20000) 20:42:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xff00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x0, 0xff}, 0x8) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x101000) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0xfffffdfd}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000000ffffffff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4, 0x35, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x1}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000800000000000000e4011ae4b3a2de86eeac21369456eb37277f893dbabe8cc3c4a385e8484be807d12bdd5932cce3c7dfda76c029010025596b8685b7bd28c055220000000000"], 0x18}], 0x1, 0x0) close(r3) close(r1) 20:42:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x0, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @rand_addr=0xae2, 0xffffffff, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff]}, 0x2, 0x3, 0x8000, 0x7, 0xc2b0, 0x4, 'ip6tnl0\x00', 'tunl0\x00', {0xff}}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1f, 0x100000000}}}, {{@arp={@broadcast, @remote, 0xff, 0xff, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x8, 0x9, 0x4, 0x80000000, 0x7, 0xffffffff, 'ip_vti0\x00', 'dummy0\x00', {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @multicast2, @multicast2, 0x0, 0x1}}}, {{@arp={@broadcast, @rand_addr=0x2, 0xffffff00, 0x0, @mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, 0x5, 0xfffffffffffffff7, 0x5dd0, 0x42a0, 0xffffffffffffff00, 0x1e, 'teql0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x0, 0x20}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@dev={[], 0xe}, @broadcast, @remote, 0x8, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="120000000000000084000000040800000000000000000000"], 0x18}], 0x1, 0x0) close(r3) close(r1) 20:42:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x148c}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfe000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x4000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = dup(r2) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000040)=0xffffffff80000001) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000140)={&(0x7f0000001440)={0x360, 0x0, 0xe, 0x70b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x6}, [@generic="a29bdb65e7204633336cd3b0fe88adba999390189697db99b26cccd2bfd6539510fa3b5c2802e816eaf8e088508c4161b264d86b83a24f74e36baa07ed831f97c9f04b07fe283d1809fe8f296a95b85f04db7132460eb1cfd4e321f939c6580b885cd65a60d0f7ebe8248cfd9a1efd07f800140f2d5030fb77a17f65078b57dea214c80baf5b89bc9111607fd36b7d9996c27d79f04cd40498eba089c95cb81c3b8a90deadb71eb4d906b49a43373bda319e61ee4b12e73ef8f7b68b6d7451b4259bea44df843f95d84d3d62844de449c1", @typed={0x8, 0x4c, @ipv4=@loopback}, @generic="2ebec033724b444574cae4ac157fc20375912fa7178a296c09c9af6c3490b371579d3df834f53102806eefa9bd04d555bfa78ed428569002b7c95dbf43fcf23ab4482f316225e3c766ff934efcb79a2eb5b81471a324a54d3036b041a949dd393542f93aac3f3d2f0f00b9a66591d8eafa66f97def7a6510946c5886fa7330fb0bba1f7181c4adb9f8dcd4263a48bcd5ab05d0dcd00eb6faf52ee29cbbb95cb301b3afaaecaed94482bb2a39d8ea49cb151c4cd8d4f7", @nested={0x1a0, 0x48, [@generic="cc1393b235b95f358ac569a8bb", @generic="1fa9617110050fe479a0756b347a2f5adc3814", @typed={0x14, 0x52, @str='self*security@\x00'}, @generic="b6a70bda1e8402fb918c30abcb1ae80f037fbb331f5464fa32508e3cc0e23bf172e66f6ec6084f3985d31086e426f5152792cc124b29258b017c0bae", @typed={0x44, 0x74, @binary="afa1b90845797321a62c08d8e987b7cb7e23551ae68434abff42ff0d383989bc8dd46984664375dbd41872b49fa3cbebca0374911f737bcb09945954628556c8"}, @typed={0x8, 0x16, @pid=r6}, @typed={0x4, 0x3}, @generic="7d4309e9f56366138358327b93f69e96e3dfd8cceaade63c23dbf555759a021a304663f304aa34e83d46dac0e6893419abbfa26e137dfa6ff504c24107f0f809059d0f893282275bf04741ac95b67cb3ab66151565414038bec38b4874ab4f9a701d221a5f89d2792584cb6a5907937d2db97527d2054a8d109ae0d67318d43904287ff71e152210485eb9d9f08e317c899cf45977a93ac37c11f2d068bb634fba6d33d1b930dc67724e315ccabd77307e0abe7438345519784d1e5e529b7794a3181d5c15645217cc287a41023928c2651df6bee0b2d3080da4"]}, @generic="bb94880849e6df1a09a031eaea561a4eb4", @typed={0xc, 0x69, @u64=0x7fffffff}]}, 0x360}}, 0x1) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) preadv(r1, &(0x7f0000000000), 0x0, 0x5b) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf00}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8c140000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x3fe}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfdffffff00000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0xfdfdffff00000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x1000000000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x800000004e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x32, r0, 0x4) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000a00)={0x8, 0x8, 0x7ff, 'queue1\x00', 0x7fffffff}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000180)='nfs\x00', &(0x7f00000001c0)='./file0\x00', 0x40, 0xa, &(0x7f00000008c0)=[{&(0x7f00000002c0)="4093ec8332cf789739d3b60ccc8628d4e19ff3d0c371ef7da4c6de5f97cfa665c012de2dce6aaa76bf52e7bdadca8cf32c322798e9068e725e29f52157eda37222741fd12554ed9edacf6ed4c7ff1f62f1516244971f48a8dd4518c2cb2a860b9d3f94df6bc8b1715fb3af0da880c875741ab5503f6ba00426030a178166f0af49120140cfd7991c9c", 0x89, 0x6}, {&(0x7f0000000200), 0x0, 0x1e0}, {&(0x7f0000000380)="6bfb5f62b24b2a4a5e797377760c48b1b8d1e6ad2c8a43f5be2ce9b55f660597f92e5054e523ef9d", 0x28, 0xfffffffffffffffa}, {&(0x7f00000003c0)="5550a29470a479e0f7ee7a91393316e23868aa18a063cfcd7a7d1edb22e32d15992171f5ce3ef0e0a4a7db2fbffb7bd65cb62aa72be1d61d2ba9e9a17a6c981e20e0b94c1afc0619fc372cfbf0ab7d92f6a63b81d76264963b80d6284a8b8f8fb1fad545f298ff105a797784735e4f2dda662987962f1a96a9ca01f881b13c2fc8cb214d6517bcc6f5d03c24a7b2a7a879895aa584e1d7c2063ce388483c443459e7515af1", 0xa5, 0x9}, {&(0x7f0000000480)='u', 0x1, 0x1f}, {&(0x7f00000004c0)="3356ffed93be8d2b761ba1e780ab797fc967dfa31b1f11eb97fd2908f57885d811d2a7d1d091e2f5665eca1d73583177a791b6fe5808a44fb453eedfb5a65998857a045b73de1767722d67fc1e72dc74174179abe968f40acf98d2804dc8697dff2d3c9a41a83ee425fdef266ba5a3d40675e0fbbcc4bd7601a66bc7c954f14ef0a9aa30db66f593dcc6ed6de47620", 0x8f, 0x3}, {&(0x7f0000000580)="c9337bc9d17436f2f9a49eab0d0adcea94f1e3a6fedd0c7da6fc5842011903a75c2cc14ef1dec7f96f3755fd918ab55d1f6e790d642ae3a50a75e78341737ab75172", 0x42, 0x5}, {&(0x7f0000000600)="0b1f47f36642450689bcc056762b3ee24d4066720a09aba4a530b44bba2cc1d91fc6b1f2c0139cde899b2f43b6e91e1ec7da093cfde3f31ac6e625147daa1345aaa09bd7b70b52c58f3fe210eceac7e3c5e65aa010f20ac321f4268d85a672fab970f343d217c19c979c83bb7c05603f6855664105427ad08d9367a6decd6c22227cf3f67d3229f5fb6a35daa732ee1d3efc17dc592e5cb6dc3b9aa8417917926605058652a02b59363734ed0def1c809b3b9e7b7aeda0ef084fabf342cb856613c774e2bd282a", 0xc7, 0x6}, {&(0x7f0000000700)="77c986948e154225ed01cb64252a16bce0157428bf9dbc11cf9481c6374ea57c0677e86b640694ed722e5d394e2d74883b869acfb2a0c8595f9f24a1f3ed4f26cab2c681583a43f97f3e7c3384ad6bd30921e51dce17c9d6a1452c7acd7a40db49ddbcae65b94af1d16d15550d0f8e93e4c485474f703957938dbd1bbe67d751ad72de67f806b2937d002202b3e694b89464513d6b6a3b78d3f946a7aa3d63d1ba005a4c1362", 0xa6, 0x40}, {&(0x7f00000007c0)="c263da7a548af889bd41f3d6385db80a8247c54e179ca2465bd6204d4806e6013303af2866a2170dea832bfeee98d2a1f8725eec70c3deac963d50f833fd86eb88dbeda4c3da34c01980d6607e0670c2d85a3eeaf74287deb65c681292876b1236dc26c592ef128e427fbf2eaa09494a2806e24cbb18fcc5129d0d8c583e3d38f51044d0cbdaba54af3f1e4d9452cd2af362f520fdbacc4bda56d4a168571cbcbfc35cbcac6b1f03474ed66ad26e162aab48e086c8e1761119e2da49a1583c1c6c1ea2434df304624bd4a62f8c84ce1a74b87689cefa2fd2b2acd14bde30fe4d136937757dfdafeb6c", 0xe9, 0x2}], 0x310008, &(0x7f00000009c0)='GPL\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x305) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f00000000c0)={0x10001, 0xfffffffffffffe00, 0x80000001, 'queue0\x00', 0xffffffff}) dup3(r3, r2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x11f, {0xa122, 0x3ff, 0x4, 0xfff, 0x5b, 0x7}, 0x0, 0x1}, 0xe) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xb251, 0x98000) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000240)=""/248, 0xf8, &(0x7f0000000380)={&(0x7f0000000340)={'ghash\x00'}, 0x0, 0x0, [0xfffffffc]}) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000080)) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000002c0)=ANY=[@ANYBLOB="5e000000eed0b8c1f2effbd88f21c76373f8f07f78ed0a70fe38d6abe9555740ab673da73f564bbcb21147fbc518cc91daf1d2806c19acc02d3295f56121ef9c3e605874dd0ae4f6ba616f0816b9bb168d8f49748d57b77e414e902a686a248ad3cb"]) close(r2) close(r1) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0x14, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xb, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0x25, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0x2000050c, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x8000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r5 = semget$private(0x0, 0x0, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000001440)=0x0) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000001480)={{0x303, r6, r7, r8, r9, 0x40, 0x3}, 0x10000, 0x7230063c, 0x6}) read$FUSE(r4, &(0x7f0000000440), 0x594) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x80000001) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) clock_gettime(0x4, &(0x7f0000000000)) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x6, &(0x7f0000000000)="0b5c61132000fad4b8744e8656be9241fc6652ba214a6d") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x80002, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000001c0)=""/37) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, 0xa, 0x8, "df0e56e4fec06dbfe75b33c42faf0903806702abf52662368de2513b816228354fa1cef8992de78c5d54ae877e3323e8765b0fd9a7e29872968bafb1f99850bd", "dbb143a3af3f1059819bf82b114cf6ecd21e4e73de1cfdf6d538f3e5ec3355b7", [0xfa, 0x4]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r4 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r4, r2, 0x0) 20:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x40000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0xb, 0x1b20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r4) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) flock(r1, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) close(r2) close(r1) 20:42:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000040)=""/57) setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f00000000c0)=0x1, 0x4) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r3, r1, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x8000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f00000000c0)) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f0000000380)="bba3e50b711513ee6ebe2c0389fb1fd263c9c4e1e864faab1843c133c9d8196cab4d91d03074cf994c119df2dd4362656905a9d76f0bff7f0000000000003ccb26cc764e00b3b54d088fdd12cf9ac86816d98041bb5606c4ce383876bdeda9bd0b92c34f8e602ba92e895dbb7485b94246e8261c9e236eb0f3409f145b0e3f016f6252795d650c2327a89ac455ab1d3721de2bdfe501f029ab99cc3da6", &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000040)="a542d090b705a2fdb7b9313204a71cf05e65f5defdaebb92547d37cd64f4fef0496a9131e51b9cf272146fca0ede879c64ea8e") r4 = dup3(r2, r1, 0x0) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) 20:42:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r4, &(0x7f0000000280), 0x314, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) shutdown(r4, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) close(r1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r5, 0x2}, &(0x7f00000001c0)=0x8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$sock_bt_hci(r6, 0xc00448fd, &(0x7f0000000200)="dc88b8f3800654c39b0e73571a160cc3a8c0f40bc382b419df9e7031f490702efc95c7b4fd8f171ad1e6") accept$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x113) close(r6) bind$packet(r6, &(0x7f00000000c0)={0x11, 0xd, r7, 0x1, 0x0, 0x6, @random="69ed2cb2de02"}, 0x14) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x40000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x7) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) socketpair(0x10, 0x8080a, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000040)={{0x80000001, 0x3}, {0x3, 0x14}, 0xeb00000000000000, 0x4, 0xfffffffffffff16c}) close(r1) 20:42:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 7: r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x6d, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x400, 0x198, 0x198, 0xd0, 0x198, 0x268, 0x368, 0x368, 0x368, 0x368, 0x368, 0x5, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @remote, @remote, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xc8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xca, 0x8, 0x2}}}, {{@uncond, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @empty, @multicast1, @port=0x4e20, @gre_key=0xfffffffffffffffd}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x40}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @multicast2, @rand_addr=0x563, @gre_key=0x8, @icmp_id=0x65}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r1 = semget(0x1, 0x0, 0x10) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f00000002c0)=""/217) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) r4 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000013000)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) move_pages(r6, 0x7, &(0x7f0000000100)=[&(0x7f0000011000/0x2000)=nil, &(0x7f0000013000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000013000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000140)=[0x5, 0x9, 0xc41], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0505405, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r4, r3, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='/selftrusted$/ppp1\x00', 0xffffffffffffff9c}, 0x10) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000001440)={[], 0xffffffff, 0x1, 0x11, 0x0, 0xef, 0x3001, 0x7000, [], 0x8}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0xfffffffffffffffe}, 0x11) listen(r2, 0x5eb857) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x100000000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r5, 0x3}, 0xc) r6 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000440), 0x1000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000140)={0xd4, 0x7fffffff, 0x0, "e3a16750592b5cb66499a0280e9a38d35db42ab1708cde8c3c1ec183aeade0e9fd6b0dfc2c3cebd977615072f7accec8c4aa2c6f169b2dbff02e505a186f6f9993203f6c2158ac0596d53ea2bb950dcbc1b10c2a36970e62f20c6a5dd7ffd62d9d2a6c75b30dd22ed54baa7bff8d9dc17e4dac20c0b40458ef4ec33a28d3ba614cdb4169f93c4c40cdd43d497fa6ec0815b57d13760ec2cf595b7c254a503d6e636e82345df7da4555c88b251cc32cb8ae03b2ca74be45b6f431b62644fa43439e2e701c5574124ae965740b763612b54872f37f"}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001600)) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f00000002c0)={{0x5}, {0x3, 0x199}, 0x7, 0x7, 0x1}) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a0014") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_read_part_table(0x7fff, 0xa, &(0x7f0000001500)=[{&(0x7f0000000000)="b6f1", 0x2, 0x3}, {&(0x7f0000000040)="52a4301c1d8206b2c895bf6beb985386a8098b83ef1f4783012a32a0d29cc174803daf6daef6a151662cad47a944776e90140dc95923b6b4d737441934014ab7535f6fa440fb3067c670dca95e", 0x4d, 0x9}, {&(0x7f00000000c0), 0x0, 0x6}, {&(0x7f0000000100)="ad2a6cbf60717851265c5444481a2a6cd18042d64534c257f0297155e7e9f08844fc42108c94dde01322ecbe4f146604ac20d4033648f9306ddb85d1ba208e698676af", 0x43, 0xfff}, {&(0x7f0000000180)="19e10b21ecc21a1f5be207beae6867f4c672cbc5a905677bfb49fca2daeba4164ad47b01490852fc2b4f45e21218fe6b5dc932", 0x33, 0xfffffffffffffff8}, {&(0x7f00000001c0)="6c1892744a0a2bc7fd5b3dd5a1bef03d448064f551041b21f6efb30cee1f96277187d75bcead0c3b5d7b10747b8bada4b5daae4bd97a59c739402f8728016752ea0da7f2770869c1bd95789105e948de6d97d8e819d44138516f9abdbdfbfb3b1978457a2ab30a605961a8116eeab77cb5267d1149830161c3b9f0d26da544235e6591e2f57d2ccec4321c6407da22c3e2775112ebfd9e5602df990c3b6d6f882336872684", 0xa5, 0x1}, {&(0x7f00000002c0)="210ce4e006b2c0b790f3fd2d89d724ea382cbf3c0eb37b08d40559c994703e6f61b77f692c5ff1e5b6671feb0d611275b05d2893b3fc1dca711128e9d1364e79c2e505eb2c3d8c1308e73adefed10a1963da38ca5e9b8113355453a6e49ecce47dc6683d23fa5efd36bddc1b6625be611b984134e5b6533ec38e57304073e15835a82affe7a5a04048def29ceb12796d644b47806f7224be48691e49332f17c178487da4e22d2a59273783722d25a27b3dc58109a7ff1c12501d2016acdbfb62b7d74ba6454c4913ca8f17882e620f528f56873193c907caad2d670608148c4fb03d583d98a9076f1c65e49d7452c55c4f04da76e43863b4018099f340a7680b4754e5b2e6f7b34b95f0de57102ebc66a73a40e52bbd061f263433f95ef09d95c7e28b688710eb108780b48fc96fb3ec9acd77e0daa4b017410bac680637cee4f5f3346ec775540df4e36710d3c1be927605f5917f0a1e9f36f5a68af264d6b63a38dd6f1358cbefeeba250ec67208525b2cf9ac553d87ea9469d7bd268712807c3af4233ba364bba5b854cafb051ce7bfb0a473fb8a7f8be55f28c617ed5c82bf617797c651843cbcb4c6e87cde505810628c2310fbc09fa432634b6f8962781dfcb5be4e276312635439410c9b8f0750d76d7318cc24a4e2779c52e6a97283cd1b032ce76d7753a427872f4048431478b2a5aa28a551f9e624cea65a09ca5662394cb8e47c114cced5c2d144af4126c9425020cb5e3c2e7548fa3eb071d7cdd592f1bd9b513a1769aa3695bd17e170026c27aec7eda2cd0505ad8353fb8c17f374f03ac351f6c3023ea9036ae5d1db206362bc91fefd7a92283de0f40224e09e5ae5fc4440c2af9234222f62174f0ee3f974ec238e60a0f44784ba7e05e26909db95250b47233e52b354e41f39fcc3dda4cda720596ed6cdcda126004a7fdfccc49bd1b1879e8873203e27982107bf5cf82cd6324765ba91105aab8648c3ce1f789faf1e6ff8f65d804dc9712deb7d105e309b75a16526a0bb8479b4eef4c5b07bd65518b80d6d83d41487645f17d7ce159b729e0b2bbfbcc371bb5f570abc5cf65688d853fe79316996fccbfd85081be343f4b7008e616aeeec6ead3f12f9fd14e8956c157207be8dd128a0bfc366235cc48586a21ce845d1b13ea94a6692ae5baabf58ce5cbe33eaa221d51858dc1bceebd4732606f7439c32e9aad3f11830051649b34549926a707f4d0fb169cc1adf4011ba4b60e9e4c62e812000ad17f16e61fcfd0e9fe821a9d74d2a32f17c3781bb70cabb5f6449fe1b5b1cee1ef2b61113941c746662b934dd74e8bedcf5e5c2561bdbd027d57d19aa318c6ed841f83a673f2efe375375b61e201d8f9a1ffb1824f5eda5598c60353e745084ae67b804826b3fd95d0bdef585807fd1d6b37555efd2e09744f2cdab9b2b75c1e1d63846ac61c42248e87483abed99afb01a1ee819678398f3a2ab94b506862e76a204d1a2911b1b12f1b6a330f90a3d4763d16b88016291ba547e5bdfb7d2134391822789abf2fdf6c00fcd01f187ec5edf445406d364aac742e30290fd2ba06fba156886cf508473d4cd056e7699ecf9ba5b8025e1a8f074bfdb64af2fbfe67e3e5f0c9cdb63f562c9941a5bec980170af84181c29ea9fdca4edce2c2b49b649e5f027bc7fc2c17f61a3f3018640eeca3e5519cea4921aeff98af715d2760d9e7b4fcbbf9b5b9e7fba09a0490c49db7dbb3b6d278ace8e9e2c9bf9719d2600f9a4fb913e303d10e3ab3fb51a5ead4d478c0c85aca3c4adb02ad8801c85cafeb1a2781126a05a7e1fb8130bd2334d7c803ecf651cdfa929dcd9f8ce2e32365d7ecf93be9837d67c8f5123f85d273471ac8701356d17338141b3ad3b1ce5e7fe02f8dfa8c0a0b96ffe3d2893e34417e9ea12a71d9927b71ebdb2838188604991a9bbd59adcde266323f9ac7aff5cfbb0a88b9d585c3ecfdee5ddc3b9741bb5ace6f7cf441692f71af7334cad8d50ef834da29b2391237e7fdda89b45590536ff931f0b2ed775f7465e108f90f00143a19265b3dcfb2fa6c9b9c2fed5dcac593207fa436c6382eadbad59690a452483dfdab95b90dc7ae6bb8763803821690df6f36e299d6924996d77c0d573479bcf177c3025b70108ec9c752caa5b10364ccb3ffe9d1f19c8172b106a5fb6f40444a7f39665ce2d017081539dd1bd3c5ea226be797936a54adee17d529016ef4cc1d07c79e8b8b485dd2f08ef86626caeabe2d8648c84a1acf1918c20a832bb9bb6bdb1784dce7aa038fd62cbe8c3be5805f9c02358537f5d49ff0631362f6f2210f9acc8a4ee0160761a06ce8d6281858b7153ad5c40ea7859e2d09c80f3b27e59fd0fb76257457823b16e768e2c6560633215cfc924ce84207540ed769c37e1f295ded87311023c1fbf894213208d1ca1b25ba7cd3aab4cb3199e87c76c4b769953ec627a694e0b725f9b88be193a040b021e39c6f76c3f6f49851b7edc24b96b7ea6778746c654c37512658e019e905118fd6d57e136c4ca6bfe1820ace15025160a95186cc4abe306249b6274896b12e32243612569889ff03b5d3d1bca853a1fe1f9e6a0c173d97c0d194b01b3154cbb74770a26e8f296c0db48a4a0c01afbf36fe4e93827665aa2bb65a0c4b8869a6860298a736fd51f58b575d6bbf70cd5863890897433298626d8fe006461a57f8ec93f873c26d8dc056b2ac7eb89b6f637f954e2ca571ef99b957dd79dd99a7c5bf5ee6023f7fee821ee970971707c494e44bced634b86a2de27c36ffefd81729b50b37250ef29a043b836bc127c88cc4a3df9002a797b2a99f661403b880122804abba690fb45256a92e7354c69298759a5ba5c581beabf4df12161d8e25ab9fe9db1a65fbcbd9a2286a1f57f02e232e47eb0495310dc8d832efceefd583b822c104d017befae8790608ea5a7990d4bec9d7dd43e9f4f442753bc955f84d77b2d8e0b9650c55ae0503de28c939d822dc8eb9a2e0c2fd58e0bed86a4b4d70ce53af10c0303013f916b0c1b1c95c9fc2d8efec6f8b775df5772f587331219993293ffb1c72ebe110a03786914f0b02376fc08b2f73bc20408e5f5f28c33993499cf9c85d8847749af86bb3eaf92398f582ed343bcdbc430fc4becd75bc8c976760a719c0f6dc09585a8105ef2de210e7b1f63f4a274b16643a71246983e9807fa20f89a39eba2d25efa357755f3bae1ff3238ac13eb091ff794e020149baccc5c9d286fde2bdc3c60ff3a68be99b9d4ef98d610c3a89bdb7c246499c1829ba4958e8c4bebf59fc4f52b0af6693a73f28e6f8e8bb74f86610d22181fa7e0aba4106a256375407d0e98ca42d299b919ef5522a415525ca488d0f2b5cbe32a23ef9b2a36437b65d0fa418c240d328505fc23efcf0979c7afe446b6076e8fa600dbe050d15feb614015d093cf33a3fe9853b8148ce55288a1988e171cc46bc805fddeea7412d9e02d59c4e32d99934c4d952708b386be00ead2eb6bec5b026719d3f8b8585db62bb0e388b2c1c39252d59efdae9afa11429747bb5ea711c25484a09d455eea31c94c8d6cafd1d93121f48f3ff374db6591099b6df3780c142e8e363cf52198d00beaf140e52ce9928517f61aa05916d22ab17f1a87c3a966bc1a2c70404b4961b2d13c1f355a21ab3d0a68efd3878d756471ca5eec8d4b32f13c9672d92b341cb295accca00a4e6c100933fdb52481bb902b3d5b8aeca4aa7b13d2eef3d34b750e1a3fab5693aa4be60d55d319db80968c415e7d6f88120a8bc18828333dd18468763674a644ad1628b34cc77dcda69d8bb1853c244f659227d514814720223517e381e8cbfaa857084b32c5c985a31f09b5bc64b269d24d6a5833cf1915b689bf3f7b3df78609f0cb644761f67f50152c0b07567e39f4d5aceb0732fc606129d054a24a34c7bb017377fa9da5f75526f4cd547362a15e0dcb568d5edb794d5fdcdab9222931279f4dbee6651038de73943be63d2dbd87b15bfb8e018c3d688493bf37272be6b68887ca954bd334eebe121915e3317bf25f44450488e76dc1781837cfc49363e33fecd33bc9ab863e2025d28c41acc11ee918dd66d0262502ad98cc8b3c96f2aa3d634f036ac50496f310ea97630fef552de68aa2e36065c6753551368a8865f14d7e7d4ff7b7bff4200bca84598dc6ec8dc2cdc3b6ede043e61b9a4a4f7ff6e81eab172b36265d727fdaa0b4749e97ddd37bf7e65dfc0c0008f003f64888c09c5753677b239f238e7e38a48532446615aff1a7449733566ab25541dc9a26b1dcf26e00a41cbee2b3eaca68e2ba67f93284077055e512b8d035544d9238a1fb35aa5a607d951161374e49aec5240e84348fb921b69fbd6eef0a2377c398fef050d986faf83c9c874fab1cda7b95ce3ca90a0c2868daa9be66b70aa086c4b40aac1453d384f8fdc2d25382b3a4c23ca07711cd231030ea4356490a1713716d9653a4010ff8072a3df82c5e17e713004059665890bf43b60f6549c54c09ccbe309b93384f79756beddb2be600af2318d497e38915f02923ebdba7b5b8962464db32fc97f5ca79da6f9cd31159f5d53b23a064327e061f0a71d2809a194b0a0849e2c3e0d0cb00387ca38d494e8165d19bcb2719db90af6070a8f7f56f192c76f17c3e623d6ec165d9f4f664da7e00ea8b4404c88281eb3ce117cace4c51adb410503bcf39361e6ab5d7d9eb10b145a27349a0038e3097abc8ebf78dc5ecbdab177500f30083ad1e0e831b162bce42d2f2c6fcc58e2cf59dfeb01f00be25b05d8a3d1d8107c60dd2ffe55a855f13e8661317786ae1315f714b22af2d3cd6cdf46440c5d0b4882069c8b7ea84f055402ff547afa08f11854493c18cec953f12f9b6c9e131eedb9378a4cd7763da303a47b090dfd83dd761e32d65f362b6c44386fb1484b6c4de9baf620b017941f943e583c54bdafdc6f09fdd1c35a09d968cc8e66104b335e8cb23a164e36b317d5bfa5d77c94e83b42b66fff2d9df80d909cbc3e849a569d3476e5591b3c279c9a6f3637f3e0b26f45ca2a8c01090ae2afdf6d3aaef1cf4b8a749af61f26b82c0f04492e4cb33b697332b6abdc8dde1593a053ecb9c077fb1d0ba3946249c13f73024c1c767a73797b60389c0d95df2c5f5f3afe534fc69abebd750e87b88e2788ca9900f448dd7ecd8c6a3353aa81798b4e49bbd72d9e87743c1a8996b5df360e55229f4f9e68753468f58d2da62488853317fceceaa99ccad0c943edd66682b0e4ea2c1d60a99c88552de5cd817ea9ee545f4c5e4b25d35d523b680e8a7077901e4fe0de1a7c6f5c9df05ab15198cb367d93927c65bd204f12d970a7a4c87b096cd224cb99573799fda88ea293074fd3b8b95f0af18c8f82019422bd9d98ea3f1de62a6715f9592f6324afc476c599e2d82265f1634d69fcecb3e7bd269868466219737dc6e2213c2191b30fb0bb78dc93a2756c59cffb6cfb0cef807165e472ad5d066e478972f124162313c93b53f6e22a1ff29a516f9fd90f87f24b4dbf2af8037b4aeb67e55e8ccef1bb7c7da8f2d9dfaccde7ec4f6568e9e7c204b595c3a282d3bc000097f220bada0273149b10cfdc829e7fa693471541374e806318a5b46f87b935dd68e69abbdb43f9c8c1889998bbf43ddd1a79b843839e1372ad205f85d6c2fc5e4bda6204665ae247ed56d6625c3dd9630e75e9296ef30066ecde35c21e8c7566c574984ef23f6108c99aa4d96037da77007f143a8ff4e0460af45ec1c75c9ecf029db4d7e36", 0x1000, 0x7f}, {&(0x7f00000012c0)="5d363e3141593e4b7689659c84b048723a13fbc73eabe7731b6fff124c4c829ceb1256ee36637dfe9b2c88128726b1f0a448512b1dcea2a8d788f06812eebd1a0b4d4cde9e67d316f3b55c5c32d1a2df0b5099729ba550080fd3ded8e9822a27d0a26f269e972ee1873988cbd4bf81c6ff9415f821c14b665902a4946279f3ca4340b2da3a5c52d13c3a287ad5cdc430d11f922038fa15ecd1dbcb267e0a2b2c78fd09c266ba94393d211519c219a8d04d1ac9a96d3eb972e1f9d0dfb7a1b5cf46173d277e4fb9b2c3a2856328975a1eaa65e97676b7647152798fc1ff622bf09260221a64dd", 0xe6}, {&(0x7f00000013c0)="e74c0f6c0e1670f65ad0a0801738a345f439b100282621c54d91ce67dd95089fb728f9d48e242b071046045464033ccd75bdd70fcd0c18ecf5d6b561c0a32096e06e993c325f8bf6c9bf4ea72e0f2ac39e1d1761096c4071445ff97c81662ce14675942f7aa0df4311e8641a824c548adf5831b814e1f0673eda212372955845fa81ba0695f3b6323fb9c729ed3ec65105fb164663fe4be5a8f0b9", 0x9b, 0x7}, {&(0x7f0000001480)="33dfd743db6fc41b9c8d8e65f17a979d76cdeed5e7188fb130793aa0acce7ba6b6bed9e3f752f18f56d64b0017b143b6bce5864f12101f370cbbdabe3b560a07e5dd76d04f975f332befe1e30d539160f1c0421914995acb8a2b4d778304ea07f7debf4d69ef8cc522", 0x69, 0x4}]) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x4000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="000af4a19f21f4c6048a00") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r2, 0x2000) 20:42:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000002600)='/dev/zero\x00', 0x58574fcfc6c4a715, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000002680)={0x3142d1a3, 0x10001, 0x8, 0x3d}, 0x6) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) write$P9_RCREATE(r4, &(0x7f0000002640)={0x18, 0x73, 0x1, {{0x40, 0x2, 0x2}, 0x9}}, 0x18) sendmmsg(r3, &(0x7f0000002580)=[{{&(0x7f0000000140)=@llc={0x1a, 0x227, 0x9, 0x0, 0x7, 0x27d, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f00000001c0)="6255919af2eb54cb19407a3b0d44d54fb1cbf075f5e92b5f570d3eaa18378a3ab82fc5a8622be64dd6a055de8605326563e001620d0b784863d6d51a5835ca7962e9c84e63889f1ef497c895dfed4da569160061ce2a5ee055", 0x59}], 0x2, 0x0, 0x0, 0x8000}, 0x14}, {{&(0x7f00000002c0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000380)="b81cca3dfe572e9f0951fd93e65286257d1823e9fa5615fbf0660fb46960ca3f06a641fd4526087dc2e7acfc70ad140236fa0541ec48d1cd6122c815f8ce73c7da341a44155dd8a6", 0x48}, {&(0x7f0000002440)="41a1e8f37f618f90a3260b62da2a8f76fa5bab241c8bf29dc936682f818291ed82c46ebc2ceb28d1a50c72bfc0614737add8f65d209bc80eb71cee116e15295f19044ae76a1910fab476faf2e382245815bae2a2270a12f8a55db70fcc6a59bea6281a54cf733d23f2b104fd48f33d1186cdfd637d66c9bf871b2bfb17f215e5b95f7860828e24ae3a53cc11b1af62fc339f724f8a46ba02f6bd7ea847418ba420e26d6203009871782374edf4d7c8a9ab27313c05340e18e49fb42ac73f3ab98f985e6b2df403ccfeb6ccff959b1db8fc7aea025b8388", 0xd7}, {&(0x7f00000000c0)="d3323f16c8780f880d6abe50af5349fbdccbc682795281aa3b568f153515a3197618ef0a86e9310c5ec286812d", 0x2d}, {&(0x7f0000000240)="4c078661a05aa0e85d39aa7a6739ee7e62d515e4968d6ed7d0908501dd380c3050a8a8e8ba6072ff0bb590f3712a", 0x2e}], 0x4, 0x0, 0x0, 0x24040800}, 0x7}], 0x3fffffffffffde8, 0x80) 20:42:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a0014") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0xfffffdfd}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x6000) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x1, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000080)=r3) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r4, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r4) close(r1) 20:42:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x7fd) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000000c0)="27222b101f0e6c93bda5e0e1478fe156231f6f337a0fbf854fcdad5aea1b8b083e421f2fe99eed7f487ecc0fe6219583bc16ee02ff13b4659e71e5b6a8eeb7f9c15007dc7c1e90378d8d13b58e167ba15a6e1f88ea13a9bbb8ccf0567e6f19ff8737ee4f3520c93f9a461d3078a4324d876c9a4b06ded854fe2e6209547fdd8e57bb62ca2deba22eeb3db19024a8d90217d1") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) r5 = getegid() setgroups(0x1, &(0x7f0000000040)=[r5]) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0xec0, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) rt_sigpending(&(0x7f00000000c0), 0x8) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffc) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) fgetxattr(r3, &(0x7f0000000040)=@random={'system.', 'md5sumlo\x00'}, &(0x7f00000002c0)=""/4096, 0x1000) dup3(r2, r1, 0x0) 20:42:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a0014") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x20, 0x30, 0x5, 0x1}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r2, 0x0, 0xba, "92e14df9961bbfc395880b1f3956cd385bf265b8d2219c5034dba3e8e8d83a27cb6bcc10a82e13254e3d9372a8a5917d1ea518ece2ec95bdb8635575514e78b7ecba8eb42968b44b9991dc6d205bbd274dea258fb90d2ceeb28144c24dac683f56d93e6e5ab4340239880d7f85b7fed1de8f7c531df189bd385d8589e285023783e51b650a32e0837215dc63d0b884faaf20b7822ad1bc85fd2b1b0c88285f24219161ab34d254e076fc2943a982f5332457bc572b55475a5bcf"}, 0xc2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r3) close(r1) 20:42:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x4000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0xfffffdef, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x100) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0xd000, 0xed, &(0x7f0000000100)=""/237}, {0x5000, 0x4, &(0x7f0000000200)=""/4}]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r3, r2, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0xc0, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0xf, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x1b, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x33fe0, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x7ffff000, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x10, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x200015ec, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0xf, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff00000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r2, 0x6, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r3) close(r1) 20:42:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_ifreq(r0, 0x893e, &(0x7f0000000140)={'bond_slave_1\x00', @ifru_addrs=@ax25={0x3, {"4ab56b4b5fb500"}, 0x1}}) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000100)={0x10}) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000040)) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x40}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0xa, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x63, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x9effffff00000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x3000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x9effffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfdffffff00000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x40030000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x4000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)=""/53, 0x35) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x140) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000100)={0xfffffffffffffffc, 0x10001, 0x0, {r3, r4+10000000}, 0x8001, 0x5}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23}, 0x7) r6 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r5, &(0x7f0000000440)=ANY=[], 0x0) r7 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000440), 0x1000) sendmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r5, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000000c0)={0x3, 0x0, [{}, {}, {}]}) dup3(r2, r1, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf0ffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xffffff7f00000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x2000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x4000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xffffff7f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000000ffffffff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xff00000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x4000000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f76") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x20000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffdfd}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1, &(0x7f0000000000)="54c83f33b2840aade82317f3e3812d5499c14edaf2d6d64fd5b3a961baba076fbfe3ad8d2a731d14bff07ec70dea1691bfe267a0a599dee0b55e9612369878e5fc9d05c9870fe0b30888142ab95004a4e2abace465e7728039ef6b8f18f527ce266dc8aec71af8084e66d15257c78b05d2cbf6910935ce984c2d0599f86aba2ed6988e5625ac1d66") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000100)={0x7f, 0x9, 0x101}, 0x10) close(r1) 20:42:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x101, 0x400000) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x2}, 0x0) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) readahead(r1, 0x7c37, 0x9) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r6, 0x1}}, 0x10) accept4$inet(r5, 0x0, &(0x7f0000000040), 0x80800) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfe000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = dup3(0xffffffffffffffff, r1, 0x80000) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, 0x1, 0x7, 0x103, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x2}, [@nested={0x88, 0x1a, [@typed={0x8, 0x15, @ipv4=@remote}, @generic="65efbeeae5305d36d23a325e1c9f2c45bc805e266e1b2a6cac1db7718754d005c57a635deabddd93b81ec60b56fd585ef160641f1a1a63b43c9bed9a529f6dd30c9b0dcffefebc2cb35ded81f061394ef882b534733520cb59246b420b65f5055065d32e6fe83c5628972eafbd21174289", @typed={0x8, 0x82, @u32=0xee}]}, @nested={0x20, 0x52, [@typed={0x1c, 0x39, @str='posix_acl_accessvmnet0!\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x24044000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000400)={{0x0, 0x3, 0x72, 0x2, 0x5}}) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r3) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x3f, 0x20, 0x10000, 0x100}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r4}, &(0x7f0000000200)=0x8) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close(r1) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000000)=""/245, &(0x7f0000000100)=0xf5) 20:42:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x0, 0x0, 0x4}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000002c0)=""/4096) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)}) dup3(r2, r1, 0x0) 20:42:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf00, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfe03, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x3fe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfe00000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfe03000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f7640") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x4000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xff000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfdffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x40) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x3c68}, 0x1) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x400000000000000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200003, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'memory'}, {0x2f, 'rdma'}, {0x2b, 'io'}, {0x2f, 'io'}, {0x2d, 'pids'}]}, 0x22) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r3, r1, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfe00, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffe6c) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r3) close(r1) 20:42:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff00000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f7640") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="7e000000e619c3128a41151ab23728cfd08524b5d14bc9fe9fd67a2c00f829b82b684787a0b6dad345b6cc75619d450d4968b2003a79dad19ab0fb7d34e3124db591c16f83b877557ac6e27bd704df371144ab1c654df0fb53bd5543e8214f7b538cb9c173e4d35b7cb4405111c7057848e8e2ea8de5d04d8c9b8e7f516cb2b476941954266317d7fd30f6e2998b7000072a5578879421"], &(0x7f0000000200)=0x86) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfffffff0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x800000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x8c140000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf0ffffff00000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x2000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xffffff9e, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x148c, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f7640") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000200)=0x4) r3 = accept4(r2, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x80, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000000c0)={0xcc4b, {{0xa, 0x4e23, 0x400, @mcast1, 0x5000}}, {{0xa, 0x4e24, 0x8001, @remote, 0x1000}}}, 0x108) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="9997bc0f8a86baf5e06c562afcbcc8a520b4c9f4a309c2c0239b15", 0x1b}], 0x1000, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c6f63616c666c6994f3e42c64000100be279649042568199d7bed106c000000000000000000000000"]) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000180)) dup3(r2, r1, 0x0) 20:42:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="120000848e0fc0c34b8dd2150000170000"], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x200000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x2000000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x400300, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf0ffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x8c14, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x100000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x300000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x2, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xff00, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000000100"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20000, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0xfff, 0x9578}) listen(r1, 0x5eb857) socket(0x13, 0x806, 0x1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000003c0), 0xffffffa3) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) r3 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0xdc, "498cfb6e5155db95f2eb709849eba04c954f054ebbd2458594f0de074a28a2faf16ad710d2787f5e4e9e6f80ba22230dc8ffc1af41fa7bd5b1f82c04d7289c9150df8db65fb9c24241dda172b094f010687bd890949c88a46bcfc3f530d7cca087a88fce5d0a06acfeeea93b1c42188f9ccb7df0acf6d3124b6b262d95d23f300154739b99186616f2cb6b3b31c456632c5943e0b71f49b807f871aee09fc082bf36a8a102adcf5e1d43d660f8b98707399167de7bf51b580636691b4826fe674963c143d2877a58a36d1d6317c231dc11e317fea60cba1eaf7d40d6"}, &(0x7f0000000500)=0xe4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000700)={0x0, 0x2, 0x20, 0x9}, &(0x7f0000000740)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000ec0)={0x0, 0x132886da, 0x3f, 0xbdc, 0x20, 0x8076, 0x7, 0x24000000000, {0x0, @in6={{0xa, 0x4e22, 0x2b6, @empty, 0x9}}, 0x0, 0x40, 0x3, 0x100, 0x2}}, &(0x7f0000000f80)=0xb0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000002040)={0x7, 0x1, 0x6, 0x0, 0x3, [{0x1, 0x80000000, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x5, 0x1f, 0x0, 0x0, 0x2000}, {0x5, 0x3, 0x1, 0x0, 0x0, 0x1802}]}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001600)={0x0, 0x1000}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000001680)={0x0, 0xbe, "b2d5cc305f21adcef244c0c087834ac31d240e8166fc19835a88d8caeb6e625f863060afdf03927c490b57de797857563c6121af51d2d2941d564d2de9103d92b6a5e42b6eaa3fd4f86f424702ee577dc0ddd799c050c222e0fa221114c88c2184db6e19bf847ce79c562742ad39d225d9c84feb8dab1fc9ab80a9a869c3b9f2c251738af69b0e934dde3827727d7a9f9aa101d4f50488ef44c393786df4633efb7fdd24ab470457b381c62a17116f2c16cf755ad065107ade40aea7ec19"}, &(0x7f0000001780)=0xc6) sendmmsg$inet_sctp(r3, &(0x7f0000001cc0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0xfffffffffffffffa, @ipv4={[], [], @multicast2}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="748f5caee876fa8bc5bbe0c8ab235f091776bfb1dbde9c5f8de6422ad4ae1b99e8105a32757bf64a4448bcadcf6801ee5032d775392d569ed97efac5abd1fb9b126c91066f7dddf406e07488f0791aa1872e5fb2b1155e6fea3275ab4eb0571e6da9c5634d69711878cae662db57c6e5269b69aea467c9dcaab179deb3c9a3303339bf9d47e4495015a13a429057d75120021961d7ba2611695b53a181c853b95a39585ee9e88ce580640e53183d7d11a0de72bff0458323bf7e6998ca2de5c130fb8eb20a434c273d5af1e48362293e4890ea144da6c3559dceb7612d378191c158acbd8704531d52", 0xe9}, {&(0x7f0000000140)="a7abf5e398115719c9f37f8875813824c29c5571eb735063f8ec19aa23da23dc26299a59c6073a9ab3ac41d5ebec2adbfbe30fd89ca40411115149b2a8fa9ab6412991dbcff7d5914b94aecaefccf97d2fe2f0345a12bb74e3db2f33a704acad6aade8282432411b4f2887c0665072e14700d4f44586508825d02abfde6762e389eff8cb42456533dd87a5b1938ddf2b0550678a631a76366af24cc7ce9b89597cbf36331903e96f896d349c1a7ce2e696b7d6f830eeecbe6a5bb338da535372ffeadc0d2b", 0xc5}, {&(0x7f00000002c0)="de9b651024c7697cb15e99d49ca7d82ffc0be6b7455eef9d24c6f06c546bab317b11e786b7ff4c65ff7786b8e6a9e58dd180f531ae33482afb27583d79d9f20c3d4508ecbeccf3005b5e1b07c6377f0b7af5ada096e4c3c079b3d15d19bc7946666a93788328ce51243ed96e86ce322f89b93563ea3881303aa6fa635aff5978e217f408acae83bc154defee68008aa32ae38e4d", 0x94}], 0x3, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0xfc, 0x4, 0x1, 0x14273740, 0x8001, 0x4, 0x1, r4}}, @authinfo={0x18, 0x84, 0x6, {0x9}}], 0x48}, {&(0x7f00000005c0)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000600)="9c43fc8211cd5753adb71583e77aecb64913da8a89e3eb2c57236dbcef59", 0x1e}, {&(0x7f0000000640)="eba2ac68960ad5c79fccf0f04cf9fffced76e00487a1e31865c8b17914dc386bac0517fed0e7746f9940988a85f052efba7a8340e0088f80d1b66ab67cbd562ff541c2d43978acd0ee397e2f7969e53b0ec4ada07213f43cf7914a54af871d5f66c78ef9f26a694a5c73f7966c019b", 0x6f}], 0x2, &(0x7f0000000780)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @init={0x18, 0x84, 0x0, {0x4, 0x9, 0x4, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8006, 0x4, 0x400, r5}}, @authinfo={0x18, 0x84, 0x6, {0x9344}}], 0x88, 0x4000000}, {&(0x7f0000000840)=@in={0x2, 0x4e22}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000880)="58b508600777002fd39030eaa42682f64356fbf3e44c5c5a65993ffdc8dba5b213652db3c77a7907c75ade6a02ad903270f9eceac75e012dbf1630656430b8be13939377a5a93a784fd3a94f69a3cb8a11d344d24b79dc228d5c3412a98afa4d2ed6e079b1e8fec1ac46ff09b9c5814a1c58c624e84519d9d9cbc5c86f33f6e109333462f2fc872033454519", 0x8c}, {&(0x7f0000000940)="31de46ec4891dae9047f96045f6bc34bf75479ad94611eeba860eeee8c9a70154d02fa833374b36f62b771a01c6f", 0x2e}, {&(0x7f0000000980)="de4dbdc63549f60d10cf338074cd11051a6c8e58914bd9d9544a27bb9e7d8051969b2a673393bc78d42818451b54364318e17020f9503ed54c81505fb24b99a46c94601a8df9f5c9f05819ddebf2e5e3425e5bb7d34c376870b9b6dac9c25282a277119c5c325c00948358cde2a3bf0cae2c2c6c099bd02b913c38a36cc18200539dec8e", 0x84}, {&(0x7f0000000a40)="2a9d915f97d71997a769ba3b97eae1d613ea454978ffd0d56e05e7c80d22a19c26f830f1a675d721c8f29dd5d7b7bacba5080b6c7e9ca07878a5672eb2b2629bec871109ca26c5c5c55ca9d6e590d4187a57c5389948217d850a3349dc16d3bc0073299c091cf5b15a", 0x69}, {&(0x7f0000000ac0)="7b945ab524e1efa112166bace3ca655710d633fbe044a2a8e1e6eb0a01aa6f488bed30da2a86ed9e5a23e207922d77cca86581c3fa95364c4ce193bd3a33da4f6e7e93591964f3ca3164d4277a417e7b58d30633f7036156dc3543e7a69549d98f5fdb4ea5d9ed2fd0453f5f21af466beff0b8e771853f769cbb68de2aacf7d9f75f3a31a771b3daa99d58908a238815b834b23fa2b68e258dc22af93077f817b623ed12c37ae3f7ec8b52135bd758f612f1a04be94d141919d9a8ea74fcf0fc2b1f081585e8", 0xc6}, {&(0x7f0000000bc0)="968ae672a0fc6da5b13a056a82451f10d2c75c07a32609d7d7279f9d29f9edb5d120fa8b29f57e1bbc6a790879c1b5d0140c42978a215195451d21e81e36dd96b6f93e2f9e3c54caf45175d3660ce0b14e59", 0x52}, {&(0x7f0000000c40)="66a84baf73689c58e4255e7b81adabb47935a15052be2192cc270d0ed29f68fc65c05f551295ae139de49ab6e35040fe80852b2fc81b13f578050c53b920f16f97908f8076db067ae7666518c87d51b2482b73969756952444b2e9bc6250b90d7127c9b3f9488203c14bda8a9e585ae65e7b4293", 0x74}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)="ee2046dcf2eeb8acc6ce3b6a85d92e037d78021075ed757593d5e38c78d1b0e6078d6b3b11ca7644f83e1ab751cac4ec8351becdd0f3a36a3cf79f670dc77b3b72857d06ab636d8a32acaa9ad11e43a03badd75b4876331e89a379a7c465d009c7c78b4d4da93a923393afbab3a74c501b6406ff4813dc18058f0919a268bebd0f1766ce3c2cd05ff891da2aa2ab0b40786f174c2feaf98eed0b10796226cb38456c376745a8727179d5de7836e392390d24ec46a71ac1e68170f4a93229686a14110d36bf0045f158fe4ba6c4", 0xcd}], 0x9, &(0x7f0000000fc0)=ANY=[@ANYBLOB="20000039d39565797f692a00020000000a00060201800000de000000", @ANYRES32=r6], 0x20, 0x4}, {&(0x7f0000001000)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001040)="789483aabf78d89fbc966a8c89c2ab53f3369e2f7e1fd8f0fd5114f58c3439aa7e44a6926afc59239f715c65368b65a7168d86987fea148cf19db4f6e3e7a102c3f5313222088840339c66f8f09be2b0eb0cfbc3f40052eab24b08d2053ac6541287a0f1a7c42ffe2fe32eadc940f739f53744b619f5787f99337d85ac5b08f202bc0c1d0590f4ab670187fe07c6bea55afde7b94024e44941bd0c9a3f0606c78fa96033ae7c76ac2f961a446992cc268d", 0xb1}, {&(0x7f0000001100)="3f35a5993236aec47dc5c0704407f48b6cf7975b966b1d477f7346c981786408a9b21e8b3a5d9cbfbdf2a3512a0d72814b4e66b3e31f304859c8d4f65915e644f30252155bb0b9c6e925483dfd86db5f58da485293e80239790e34017b988021eee6d0424fe4b5d48443db8c704076875cfd4e137b5a3a48b35d99fbb4e5f1ca24981560c6add11d070007aaa948513b5df4c86047ab7b402e9da84d710b8abcbd806fb1c3d3673016b2a4432f00077002", 0xb1}, {&(0x7f0000002480)="142f02b7db11eca7a28511219f07c0e4f0005d277408d86bec037a6ea75c0349e0720d863e8dfe0f81d32a472943854a39671ce1d766773ea951de6721d4ffe83fa52fc22d0143722f6f32a3ba6e696d7cbb9e889466ea2db49d5e6399585e9fca66076fabac1d1b69472bc77d9ab3f64be3e9c8d4bb7ef70efa4123975aee9263e3869886b32e0b1f5da7a66a1971ba97c877396a120adb6db00548c82f6c43192c8f9ffe107d63d44a228cba2e37200027aff4dfe8edfa8721d15875dd2967206de7d7f57e8eebe53ea6b13950b78688e549716f194a24e2f3d892172a4b3b1953be5b8cdf6acf8b07909e1b0dc3123bd0ab40fcfc5e6859c6068e357b35580f6e593df3bad95ef736659e37ee219b2d128117ad6745255221c9b8b3090419078f71ba8daa933d1302910006264617d6d20fc27d2275a01144c85c7a4b4c0e8b6d0483d9c8025aee955dda2b16d452d2f1f03894323b09c641f7d3956133996cac9fcc365da6e267aad4a21ab34dd71e639a85f45807250e6c0437e4822ba8a1b3e470c7dc813c9c68f729dcd87ed2dba4a09332c5b935d2ae0607da1895e866c75e917dd4a5d601fae1b687fed4057650db531dc3d0eda7dc3eaef9b2c593b66c45f673522fb67b0086d90228fcb5a27e09a794e722e015f3b127fd87b66b69a71691ca38ee417ef7da1c861a7c6197ca0d8444b128a8cc12e3eff7f65515a524d3e5ba0b3060e3f246277d1c4c78a8f3242ec2379565ce37acedfb343d3517884dcacb0b0140da371294dd4b1f64dfb4618fc18eb23de65b54cc5efbefa65f814d50f01bcac3111ccf8519fabbfed15ed434998c6c4589ef9ccedced53e982d5a9cc4981dade8fd86396da55462499cad414d40ec892e6e1187cfe1efc2d492cead812f36789f939b42d7a6acd640fbd95bbd73e1a2b8d7bd019fddcc0be770b67ce947538e9a50452c176448612a40550f3f868015a74605e7b0ee69d9e6c7ebf86ff3adf3a35d3a3bc49aca811779f3519b1f2493db0bd231d34f0ba609929168f5ac3f3423dbc9a1c416f424e34e1e081a4d4135bf18440a34cf25e968e26690c94c115fdf3ef9f9d1d2f16563d5418b3cda705b882b44bbc05a7846ce58fcb19ad51227ba474e9e63db3bbc51b60fabce41630e334b3ca29be298738b89e10ee6f2c5d3d4576fa6fda220d2a770bc24a4c4f83248917ab05014f53cb6d2b9cc8ee72ea637cef8ed3bcfe8981fb04ed57338ea72cff5991169fdf6e4db40b8462bf684bdb9577e11fa24536d2ff59ef67fb879379cdc2962e79c77859d113416f83d99808c0eb55fb30d22f92af6843fc01cf7ffe2b9cd7e723a9ddf3be43d186509e4b68044902782f5cbdbc020603b4de0660eea63a0a883f75554ac55b10fdf6332fe6a6a8e700f5b3c396053abc485514f9c5f144c47435d757a81693735e5549ab1455d33bc7a121f8d4e6697986cf65afbdd9319d984fe3c3cdc3824b8c05fd5e81b8088e4ee4025c27ebef376001cf31386e559ce66ef41e246d32f2c4f4d257aedb0fcf51443a8a1e03c52354a097d42a502865f1663037b34e4bf07c557daf6616cf3f28224dc7fbbe91595fff84d8b99a29dc8907fa33a00a48ceb96234cf816411ed6e62bf434e02159b45f071a63237e944401b91ec95534daadf82c54aa5969d47b02935c549b8a648dafbef1f22f75cb931e984bbb26859348d7ddbad0ed78e33b23d69ce77bd9258a5941831314a1dc501972b8a06e9ecdf16a8468f5a285b6885f20dda65085a17e83b105fbd6177c2e4ddb6713aa26c0851bd8dfe9fca43053bb8bbe9fcad66866bc757a41f74b44e4aad3fbf6453a6ef79c1af9fe5907deee745f8f43a6df89cfd7f4f3b0f3fdc26c23e9f62f650017f9223f4126ff40871de56b04352064eb49699072d48321bb31c43a2d119456dd1b816b594c719efc682217c86750767febd245b35321b628c44cfa6baac8a8aaa06b021007c2d840f193cc2c04f010405b2cf921803342e3bab97e9f7fbed12030a714eafeba831591e6228bc63a01698f62f06e9d3bd42a349ff7c003275546e374de6539b118530762f7205b7b655b0671b2407ad6868a5d391acb6828341f5170ee0f4c6a92b3d6746cdfe8a60d854da9d3cc05d1cbf89e14d6b66ab7949c99ac1d4191fa8b773f2b70c4921a2e6680a203d8c2a3ba22b28e596afa83f7fecd60a12c0a968772d7da66afbc16a575bce7f229e461f9b062e5c9a43b9957df59230ae36e2b826dd1c76013568300d49d5a71dba03b4b97da6b5ad5959e579ad09e0451c831b6de3543d3c77b882bef3a11dc6726ef9b7871565e44a49f853f304bb83dcee3baab070462ccda59bc2eaabd6e25a6ed2ca6a7e0e5be72d81f3c9fa852640f313047f7fe62208fbc11066a3a24679ff140e23bf4e9adb0aae9093ed74df6c00a3fc6ac596c677bfc4ceb46dbb269fedc4ed0f3770631310ff850e129ceaa66bbe55d70792d5fbb8971e87e589b4122bb0ed6c58f9336252d70ab7d6a0e8e156fb6470b21712b51e52c124c58ae1f6117c61e85c7672beb17ad773e6e5ce4b63b96f556892b30e6c3b982581ef3c440ac62d79c4a93071e4ae4a6d03150f7cc7a18821f93b36ff4b13ad6631a28f6b97597a0bbad2e73cd8d4395e0762a5bc8446baf436629eaa06c06be57461856491386ab79094fda0ca5e7237b551bdab03ebe89ecc0e5a1eb74295507354f6921bca616def0fa9231ea61b540ea0e8524f7743a9c02f51aded7c358a6201b36f730fc621c322b83c4d6892c87d59360e92efda91443cd510e371ad4eb848aa11886230413a6b5173024a6fd5648fbba3cd72d4074cfa30b215140438dea4b5eedb9afa016ff08ad0e8cb9b29f93339a0ba5c090ccf81b59603687001e7dc89bc9e989ead6f2f18452a73c0f971abdd7c0897acd818cf7b2975072a3f8f0bec7bb3cb5e43e614483591ae30af3361e403ee360495c091a8bad2bc02240b3fd56d98862b6a6e64a1e27995dd482806bcaf144ecc6cc2c71b09dfbf3d437f44efcff82772e3dacd1147e986ac42f087212ecd0965e85efb8fbe0b22b940b7d7ef03cb9ef116fa675113b435382781218ad84a42a77ee3f14511542bf0f0fb2b5aeb0608f5ea5e6e88aa9267293f6ba81e378be1f21b5eff9970be0c5c34e543cba5074a76f0f728861e093665b1093b25984c3213a0886739f60fc4341bac47ea2a7598dc5215a7e25e3408defebd05e5a901e01a7ae891f88592f8313fcb3fac38b5c980c85a6a5cc04593fb5d75c6498a609b03644436a6d80af9272eb4984bcb41f5a6e4487ce38c29fa163ddc7ab1583a09a365d5bb1001cdb0351539e8730fb3dca25c8ff3f3fa92dd74d9c4f4212c69fcf6de818119c0343bb9a2d209fdcd2c763729e23585cd83b63223294d905288677cda758ddb7e8282ab2d312ccc2bf4fb8229918f6d746d5590bc56c753b6a553c0eb5131669d27619b6aca118d2231c44d6250cb2d1ee68e8af853a1e8de32c1fd2b4dfd188f6bfe4d9ea0f00caf6ff59983af5ba063ce30441185a3efcf90efe942ff51473d619e87d805ffce4163ae9f02b0328b579d2a1943bb959939a2b9419d816654d0db6a934100707459b8c701dd9ca0ce46ee24c1af98024d3f27905ac4042f7a3f32f2e2b3a61fd7d2ed90dd3ecf95a9a92279ce8cbe703b183d15fcf2df792ff8a02e32f4e291688df2350b1256608cf8cc69d92e4972892e6cbce872dd458af76302de5bb64eb0c0c508a9660d99c74434f5342b4db0860564d84e4ff95e5ffbd5aef5c22e15c9441ee7aa62efbdc36d2cb231df8f152fba61f99143ba394a40316f7a9bfc2b35ec3dd0bd2e4ff313e03204a9c37086c0a170fe310f296cd40cdd23d1093c4271e005a4a4d7f85f44021517403d25c11edab8d4ddf77f3e1aab868871fce974a6ba6e8205e4a95065fb7299c508fa8fd818830b2c83f3f644df838e1b146e1581a04297a4a00c0a11e73805aafee91fa7ff3aabe25fdd35108c524a58a7f264a7558a9e8051ed8b4e837698a3ebefccb82405013165a6098cb86d56947bd3a99bb0b01a68129ac1d763017f2deff9c73a6a6d0caff3a44fe61ef1fea8a46ef6ab3ef7ec8543dc3a05cf8a5f60542200d9105bc96ced9cb472d13d5c24e8c3997bc7fb0bbd96ccdcea88f5ebebd23ce06d034dc24d801e00bf901e62c76ac70225e29703562136ae34dc1da6493e8f1d579ee833af3fb069b4471beca77ccc6d54ed18a8281345af3a58c31047fa57cd95f948817f1965d4ddc684c1457269f2ec13d63bfd6f86edb387011645c7c43c2b4c0e2e6d571510ed8c5d0e03901a88b10addd16d7d4e21152a6d0d866eb557f3b46140c2f19d25997ce685a34aeef6cf17f5d42e91bb7d99dfbd975cde4ae133374473e17fa334c8b021fd71a9ebbd0d1bd2a403e297326029e386994f106ce23d6af2b8ea79ee91b3ce94c02e606e21f3316fea4c947295d443b3ad41a7bb36d3ce52b18973567a38c26c130774f9d2c7a038083b83465d944a0ce9e359feb1b9dcf7fe9c10fbd58bb728e0cd63a46e603959d4a3e0abf88cf9f79111dd5030929f80753366c0a597dffb02ff8d40dd1da6929abdd977ade93d4f17f42c5273b8c566f82171a4aa0f06b9d276102011b4e1f3e46fd728410a79b6a0d48899ac4d0c677eb8a9d12de4f77bb141f3f928681dcc5dbd4a28f0209107d17416db2922080ee197ea232df34e3f17c3b12637f9580518bb50e228ae9426c2c90c0dd087ebd3cbaed0d5291f672e934652f19ca2ba4a578bd008303b49e7066c38c3d69126ff27f7d9db11e4b8fe9b0864920d25d40e92c4f48ad6c9b87893a94d086e5c9e14cfc782a5fee81f9c5aa0a54e11c0714ea39e15c2daf1d0665802d32c1dd7c8d29eae450fffcbeade87bc8cf4af62d3450a985de85ed60ae418d9959e0edb6de94c78f2c6caea8ba29cff07888e287f24c3526e6c9030f63f502400675039e6138036714b48ea456138db8ea71a6ec482fdc4fe5c2da0fbf28b0e577e245f762e74036f97b8606d402167d7ae7b44516288b566ddad4b8a41ba415e4b98119ccc0c0d26ff6f0c0d38839ee16ac841ca30222646257bf103963a6e904620807bd81f7d8f2ea9ad6fda992cbbf920a6c3e842529b835c2a35adf657827e3dabd028a26c9cbe958e4a4d7720f4eaceb462947d7618ee067ff23e6d515f58466e6597002fea8d07bc4f5cc3819f1c1f6330cda68a451b84bc7f7c7aa581d986553452ce46d3de72fcef420f44bfe147f07ccbb436e0a539e251842d98296e311a548b2f8387ef9b2d6bca137848b692404b5735e1ea889b0e9d38e343bb3d5b5d7a30ae36a8e8a5539d0947c41dd22ef171ee4e037dcedf92f62f4491da3f61f766c21e0dbfd3e7e4c8dbc0efb3c5df5db84ad154ae6823b257fe52feb808401ac4c796ef750c758d478c4048813c683fa43789e585d3e8ad5b242daff155238da8c35294caf13582aad60c4b8ea1fb02736048f7a5d139226410af21c568462d0e41a0ec23c96754a6e7eee951abe75a782ee5ed958cde26951bc18efc1d0dd6c2432b689946e154be09021e7897519f747d535112123c9ce31226cf8f6fa40b37fc7b765f6e3becea13c2cd961e7b40a08bde9e4f041abce3f5ae480896726ef0a4c28d12f28af1e1ed8c922b36930629e650230e5db953a5fe746081b61230551a1fb786e971baaaf8d98891ccfdccac1ecfc3f983d975b9", 0x1000}, {&(0x7f00000011c0)="1af13baaf6c3109d93127c99", 0xc}, {&(0x7f0000001200)="7eebd18589a2343c705a7cf51eaaf2c9e0b5558ec2a14c4605c3c41b7953ae54f4fe59874731bf3e8719045b063c6ccd97b041afd2754e52246dfa31cdbd2e0e9300bb570bc3e810a58750f0f791307536e564c9b3007130e763b78e5e31a663867786cf41ad989096f607c9d114f29561", 0x71}], 0x5, &(0x7f0000001300)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xf}}, @init={0x18, 0x84, 0x0, {0xfffffffffffffffd, 0x100000000, 0x20, 0x10001}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x1b}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x18}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x108, 0x80}, {&(0x7f0000001440)=@in6={0xa, 0x4e23, 0xbc8, @remote, 0xd75}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001480)="a4f99d29163ab1151a08b06980137da11a43fefba464d30ba5f137259e5b621722321f7a65a2a16b7fc8b8c83accfc382c27c278467d394b5feb4e9f161540b7a4f6c06bf3e26b904b15bddc59fe0c2002eca37ce6ae4db787f0e73738ba96e2a4acefecbec2ed0059da75145cce14ddc3", 0x71}, {&(0x7f0000001500)="a128ebc91160b45d5324dafbb80229aa2fb34623d8dc5a0c35269829a910b8bc023c1220b21189a5b5842f8f105b716026866c133f5e5b7fd6a9aa89", 0x3c}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000001540)="c21971db3788e385ded6f22af1270fd275d683dd81a60f2e0d72aa8a933746951650c55efaf684e1a7493dfaf3ab4b0698ccabf49dc2f43f77ed7c1bd6082ddc7cb9fb30fd3c191e83d30278493a6a", 0x4f}], 0x4, &(0x7f00000017c0)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x3, 0x8000, 0x6d4, 0x101, 0x1, 0x200, 0x2, r7}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x200, 0x2, 0x9, r8}}], 0x50, 0x4000000}, {&(0x7f0000001840)=@in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x20}, 0x2}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001880)="bcb75df177dc4f454b67ee859d778222fc54431f2ac4e644cee3047ba7f03536be58b2564266", 0x26}, {&(0x7f00000018c0)="04e3d282d67577bc58ce74c6323b08f89bf5acb8848b490e9fc873ecf5cc640df67a25b88f659cbb27021904188099a95a4c320b4276d26b5c92df18d07471d805a18f945199c6c43d3bef108c4425c10e2b1fcce246ec76752af8012f62090010af93429d2c8b11fd17dfa0207515e86ff8fc1b98b0a0d82c99f790af38f92587461abb808be64fcd3f79c1139608297230ef021a0e5ec0824d9d1d14ebf5fe8b4de784190ebcb77cafd6b665073025db49dd72ee3aea8745aff4501b69ff72822568d3e5ee8230748c19f50e439da0028fe3b0f1ccaa7ac9180fad75553dfe0f", 0xe1}, {&(0x7f00000019c0)="94d1ef5dc1e0b8e85b2e91fbd2194ee038bf0814", 0x14}, {&(0x7f0000001a00)="e0e92781cac2a00985f6d2f697b93b05f138266dcd7944eed5efb805ebc68341a6a37ed7e856f65ff61b473ccb8ebedea23c88", 0x33}, {&(0x7f0000001a40)="9f34c710b3f17f313263acab83a99dae24d063dbc4dc78ef1d72af2cf5035560a792eb0bcf0e7b0b70847612071f6fadf1f4b452ecdf536591b094993979682c7c8c5a98885d2e0c8feb982e788f80240891327a4fda951107f6148dbaa7e1810b8e43de9447a490c978067324a4", 0x6e}, {&(0x7f0000001ac0)="d6dc21e17337040866dc815f2436de64ae18de8670f898e29bdd3b581df076ea8417c131702020270d10610dfedfddc689c81e03ce113ca9a775f2c5ffa4ecaa5130ede0c80a236f474a146b19e3a279dd2c42d3808c01c5539bbc60960c06759552869a150a4fd177405b025644f8e7db3d7e49349ebf10bb80f60008f6e26585cb2dab1c705ce7e9339f5159047c5e0ac7ef1ebfddc780f24b753c94b465afb4eb9cb695506901532eb8efcaad6e84f2f3b467566bcdad26dbcb6183", 0xbd}, {&(0x7f0000001b80)="b341ac76be8da584f3c8c952ebd9395b78a68de9610a706b9c74307907862e46cc3972067f5018c3cac7b7edb132900f19cd62de65859151677c6489f3a68a1b535a1130d272e5e16a5506b4f683b0e8557fe40841ae567df17fdb0779615499e765bec872c80e2423f4", 0x6a}], 0x7, &(0x7f0000001c80)=[@dstaddrv6={0x20}, @init={0x18, 0x84, 0x0, {0x6, 0x200, 0x4, 0x44}}], 0x38, 0x85}], 0x6, 0x1) r9 = add_key(&(0x7f0000000380)='rxrpc\x00', &(0x7f0000000cc0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001e40)="f04f5372aef75a5e62e71d1a8c41402f0c10f517397f06875b115c0d3d0761b34caefece59b95c1ab504b291cc2542d3035e97c2466082cd397cee55587e46860fa2174c783025fc79aa3a4c0386e92bcc0387f004e4f82f81657693904a770a6ff669b022b16f068305a8473cf95a53d2b690e59ce5010182b971cf49f52e7463705bcf3e34ea303da341fe806fda2b917ef7fcebc3e5451cffe1eef152efcc19bc16f35eda493437f52101bc0fa2137440f3ca801573bf5650d0f6", 0xbc, 0xfffffffffffffffb) r10 = add_key(&(0x7f0000001f00)='user\x00', &(0x7f0000001f40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001f80)="efa38063e0669bffe8d810b6d011d1f5a5d415e7eb7f5db029bce867927db057efea21ef7c369cb82868848ce6984f5d", 0x30, 0xfffffffffffffffb) keyctl$reject(0x13, r9, 0x8, 0x401, r10) close(r2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000002140)=""/68, &(0x7f00000021c0)=0x44) close(r1) 20:42:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x8, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = getgid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f0000000540)=[{&(0x7f00000000c0)="086dee1cd289349602628962ce356d50f66c89f90c50f6da37542b93d96a5a64298b11824ef73b78cab7f8461370ce91d320a6ea18b98c5e1bf01555ed2b8bf3", 0x40, 0x68}, {&(0x7f0000000100)="b02080957cbda96a9e7c1ef0d6954f10d14b063401ac4eea28a8936138c1a060c845d02b72d3f00a9249967ed5d34d4e6d7452cc79808caff1dcd794068eb1cf8b63c7d43a9dee12f021ec34e85c120b3736ab13dadc2ccac55997549f6b472d63d7d4af950a02482e2729b056171e0a19a66d6259182334897b7a96fa792da048d3e1129595d218a91405bb47a85bf1c17a3c34b059c38c3721a31822db0beb383e88a286f98412d1abe00c1f98bb0a33b077b289f056ce6c98c83def7d600e9facf2705b24c3cebfff6ad9dfb8cf51", 0xd0, 0x7}, {&(0x7f00000002c0)="02870c0c5fe7d355842dcf5855e7a27b7ecea51c569298c2b792c99aae12fa21fc95ff7e99085836bffbbdb5d22f2da43f535713e8cc6b6f563974308460fc18bd9243ae33ee02a88af5e5e733f1b35f5c78a6111026dfe8198f4ae9344d620e8b197316d67c172430f059f1a17d1ec33a579f210e10ccc706130183bc8b09f1cfe41da502aebf98507a2f53b628972d524b2f58fae08b850a3463f38b2bcf550835e299c5618d08208659a0e5953218baac996f8aaeea671d734e91cd", 0xbd, 0x1ff}, {&(0x7f0000000200)="5c46f7ce368f974db7ae2d701e553207b1449a3a2f2f1aae50d2cbca14793ca1765df03673223c8b494faed7bafc8a621c6e171bf8a2aeba9e17a6ca50e376621a064f13d3fb3a493334d1ffb979027dcbec3c881a6f35e5f418e19799c91455ed4c203cf63a322e6ff4661d3a8efd392c3829322af0ada11cc76ae547", 0x7d, 0x1}, {&(0x7f0000000380)="05589bfd9352966a68b3fecca73f3ff882c149107a0d5b0ec48504b7935e1d1b60e347423047be319f5e3a1901ef36a4834ce06f468ea8aab74dc03c6917361697b73381193848b35c6e603c96d8430ea822c63587b8d4e5177af3c3b932a22ce5d279341ffeffc0609b7f79179b34da578dfaab6c5e15bfc8ac897104913c9b37a8d6166608dbc0ae651fdbd766b95803066d3baa2893daf83578ed86a71d8b", 0xa0, 0x51}, {&(0x7f0000000440)="14f93ba2edf78d7bfb4f1a909fe46172e2603577215c969cb764cc83c14f34eabe7365e932a9c36241d54d386ff98cf85d37db1c1b9fa6f727c059f8d86cee9cf46845aa207485082b6fa6b1e4b7604b358ad3573a28a99837d2d6e21efc408b39a5472b200f7325f19b3cec78481098f174bf5eb47b94c425521a9ff71c88dadd6aa25a492c21d5ad2a7ef6542b69bac69fddd3225a25f59f4102b39f7333e8fe0f61a909d4868c4f0be8b7e1165005459f1d932b9881ce038e0afa263b17305ebe8c03ea991bbbbb2fbcae81810c8ad9d3b255", 0xd4, 0x8000}], 0x8080, &(0x7f0000000600)=ANY=[@ANYBLOB='session=0x0000000000000401,codepage=cp866,iocharset=macgreek,gid=', @ANYRESHEX=r1, @ANYBLOB="2c6469725f756d61736b3d30303030303030303030c02c91932f999a630af7920104303030303030303030303030352c6469725f756d61736b3d303030303030303030303030"]) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), 0x4) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000006c0), 0x4) close(r3) close(r2) 20:42:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf00000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfffff000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 591.666752] hfs: unable to parse mount options 20:42:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x8c14000000000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) [ 591.688176] hfs: unable to parse mount options 20:42:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf0ffffffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xf000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"000000000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000040)=0x94a7dd9356d8dba5) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@mcast2, r2}, 0x14) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r4 = open(&(0x7f0000000200)='./file0\x00', 0x200040, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000003c0)=""/1) r5 = epoll_create1(0x4000000000080000) r6 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000200)) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000400)={{0x7000, 0xd000, 0xf, 0xcb8, 0x4, 0xfffffffffffffff7, 0x1ff, 0x1, 0x7, 0x0, 0x80000001, 0x2}, {0x0, 0x4000, 0xf, 0x6, 0x7f, 0x80000001, 0x3, 0x0, 0x5, 0x5, 0x323}, {0x100001, 0x6000, 0xf, 0x6, 0x5, 0x2, 0x9, 0x2, 0x7ff, 0x0, 0x94d5, 0x10000}, {0x10000, 0x1004, 0xf, 0x2, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x2, 0x2, 0x7, 0xa2, 0xd997, 0xa5c}, {0x100000, 0x3004, 0x4, 0x2, 0xd406, 0x3ff, 0x3, 0x7, 0x8001, 0x10, 0x4, 0x2}, {0x13000, 0x13000, 0xf, 0x7ff, 0x8, 0x376, 0x2, 0x3f, 0x2, 0x6, 0x3, 0x10000}, {0x106001, 0x0, 0xf, 0x0, 0xff, 0x6, 0x40, 0x2, 0x6, 0x5, 0x7, 0x1}, {0x1f001, 0x10000, 0xf, 0x20, 0x1aa, 0x7, 0x3f, 0x7, 0x36, 0x9, 0x5, 0xffffffff}, {0x5000, 0xf000}, {0x4000, 0x3000}, 0xa001000a, 0x0, 0x3000, 0x400200, 0xc, 0x8000, 0x1000, [0xffffffffffffff82, 0x81, 0x80, 0x4]}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in=@loopback, 0x4e20, 0x1, 0x4e24, 0x1, 0x0, 0x20, 0xa0, 0x3b, 0x0, r3}, {0x3, 0x0, 0x1, 0x10000, 0x1dfc, 0x80000000, 0x9, 0x10000}, {0x4b36, 0x0, 0x5, 0x100000001}, 0x1, 0x6e6bb8, 0x1, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x17}, 0x4d2, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x13}, 0x3503, 0x3, 0x1, 0x300, 0x7, 0x3f, 0x8}}, 0xe8) dup3(r5, r4, 0x80000) 20:42:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x5080, &(0x7f0000001440)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x4}}, {@common=@dfltuid={'dfltuid', 0x3d, r1}}, {@common=@dfltuid={'dfltuid', 0x3d, r2}}, {@sq={'sq', 0x3d, 0x9}}, {@common=@afid={'afid', 0x3d, 0x7}}, {@timeout={'timeout'}}]}}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r3, 0x5eb857) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = dup(r3) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x1c, r5, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r6 = accept4(r3, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r4, &(0x7f0000000440)=ANY=[], 0x0) r7 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000440), 0x1000) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x37, 0x1b, 0x10, 0x8, "3dc2c36498b3128f13cabb8d4447ff458eb5127493b669b518a21874d918ed9b0f84ae10d82ff233e76a8ea355f5b9f0aafb90eb315c506fbf6b4848223cb98f", "4a18bc98f01e6635f3e7fd78bb89bf058802ad66056393ccea39eb2b11b6fc0a", [0xfffffffffffffffe, 0x3f]}) sendmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x300, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/net\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) get_thread_area(&(0x7f0000000040)={0x5, 0x100000, 0x400, 0x4, 0xc287, 0x7, 0x10001, 0x5, 0xb9, 0x10000}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="7c093ec74480ed6f0d5b4c2020ecc674", 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, 0xffffffffffffffff, 0x0) 20:42:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x34000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x4000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) write$P9_RLERRORu(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='!'], 0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) dup2(r2, r4) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) r6 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r7 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0x3b, 0x4, @thr={&(0x7f00000000c0)="6991b661e864e4dc38b2aab982", &(0x7f0000000100)="d2ee37c9eb50f896d7e6b11a27ec20f24de47e139813f0092d7e420c8c2cffd4e132a9a8aaf2608fd7af55ed15d6b2895b453c583921ea5ba58af6f96d9f4cb1c698a93ded0cb400130b7696830c698c1ee1474ab6698f0448690132779c06bc1202e99a1fe68eaaedf773c54be76fe2a1cf"}}, &(0x7f00000001c0)=0x0) timer_delete(r8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000002c0)={0x1}) dup3(r6, r5, 0x0) 20:42:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfffffffffffff000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x0) close(r2) close(r1) 20:42:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0xfe030000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = socket$inet6(0xa, 0x8000a, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r2, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @loopback}}, 0x9, 0x7, 0x8, "3531ef451c3cb26b0d5588eb32888afbdbe475bbe79c095d4b388afa32d2a81d5c050545cec3f5eb142373b2185c3c21ee1a57a08a9fd1b0313cbd35877427359664fc367aaac839f31801bf3216b2ae"}, 0xd8) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) sendmsg$alg(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="2fd7b6b0425eebf3e37bbdf905284e55db00d1d489081d396f91952d2e26b5e8", 0x20}, {&(0x7f0000000380)="61418a21d0e669926ac29c427497e279b9406cc109c3fa7662fcf4cd9f53f036db169d8b444474671f38ee7ddd589361d7d024e5d6681c81ee35def138649c8a7473c2ffdadf96c6fd9f61", 0x4b}, {&(0x7f0000001440)="2ef0bc299909a9fa491872d457dedd9bb6643a6dc5de5d438085b0c672dd7fd6fe2fd515c8af5ff334d54d957b043da0dd09eeb599fdff6072e645413ce482820727f702482e7d0c8d3fce608a7ecf424dad8e35d36e64842874e90bd9271809af0ae803ee0b51d343a0c054a726190f7261bc1792d167f0301cf8159fa0cce4792a8f1d4a2b0f01d7b154a66595", 0x8e}], 0x3, &(0x7f0000001500)=[@op={0x18}], 0x18, 0x40}, 0x8000) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000440), 0x1000) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x8000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xf00, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0xfffffdfd}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffff7, 0x6, 0x0, 0xfffffffffffffffc}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x8, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e24}}, 0x101, 0x1c00, 0x7, 0x800, 0x7f}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240)={r4, 0xff}, &(0x7f0000001380)=0x8) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000180)=""/73) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffffffffffffff9c}, 0x10) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000002c0)=""/4096) r6 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x800) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000040)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, {0x1, @broadcast}, 0xc, {0x2, 0x4e20, @broadcast}, 'bridge_slave_0\x00'}) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) close(r1) 20:42:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x2000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d45520000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) signalfd(r3, &(0x7f0000000040)={0x1}, 0x8) dup3(r2, r1, 0x0) 20:42:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x3fe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x100000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x4000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x8c14, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x400000000000001}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000240)={0x4, 0x7, 0x5, 0x2}, 0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="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", 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000010000/0x3000)=nil, 0x3000}, 0x2}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x3, {{0x2, 0x4e21, @loopback}}}, 0x88) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000013000/0x2000)=nil}) close(r1) fcntl$setlease(r0, 0x400, 0x3) 20:42:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x148c, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0xffffffffffffff9f, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x0, 0x0) close(r2) close(r1) 20:42:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xfffffff0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xffffff9e, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x8c14000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000000ffffffff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"0000000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xf00000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r4 = dup3(r2, r1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x400300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002d00)={0x0, @broadcast}, &(0x7f0000002d40)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000002d80)={@mcast1, 0x22, r2}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa8b8, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100), 0x10) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f00000000c0)) r5 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[], 0x0) r6 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000440), 0x1000) sendmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x5a8}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x8c140000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xf0ffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0xb1f8) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xa00) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000040)=0x200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r3, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=[@authinfo={0x12}], 0x18}], 0x1, 0x0) close(r3) close(r1) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xfe03, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x9effffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xfe030000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x3000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d4552000000000000000000000000000600"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xf000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"00000000000000000000000000000fff00"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = socket$inet(0x2, 0x7, 0x7fffffff) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x7, 0xd6e]}, &(0x7f00000000c0)=0x8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x20000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={0x3}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)=""/252, &(0x7f00000001c0)=""/135, &(0x7f0000001440)=""/4096, 0xf002}) read$FUSE(r4, &(0x7f0000000440), 0x1000) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x8000000000000000}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x4, 0x1a802) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000840)={0x2, 0x5}) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000005c0)={0x4, 0x2, 0x743f, 0x7}, 0x8) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = semget$private(0x0, 0x2, 0x11) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000740)) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) sendmmsg$inet_sctp(r4, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1200000000385bb553000000060000000000000000000000"], 0x18}], 0x1, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x161) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x6d7fe448, @ipv4={[], [], @remote}}}, 0x4, 0x3, 0x1d47d8f5, "f0eb4970c07d1e163394b1a5c5bbef1d1295d5a45b902ac67598e0f3ee68aa65a39a0e3b28763b26a0bcc4794328a4d254718f6638909d5bd86247d83e1701529239891e64bed0f411af1be3432d25a5"}, 0xd8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @broadcast, @local}, &(0x7f00000006c0)=0xc) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000700)={r8, 0x1, 0x6, @local}, 0x10) recvmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f0000000880)=@ax25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/180, 0xb4}, {&(0x7f00000019c0)=""/98, 0x62}], 0x3, &(0x7f0000001a40)=""/219, 0xdb, 0x81}, 0xfffffffffffffc00}], 0x1, 0x100, &(0x7f0000001b80)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x1}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000500)={r9, 0x4, 0xffffffffffff1569}, 0x8) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000007c0)={0x1, 0x0, [0x9, 0x8, 0x8, 0x4, 0x1, 0x9, 0x624, 0x2]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0xfc}}, {@noextend='noextend'}, {@nodevmap='nodevmap'}, {@afid={'afid', 0x3d, 0x9}}, {@version_9p2000='version=9p2000'}, {@uname={'uname', 0x3d, ']ppp0md5sum'}}, {@access_client='access=client'}, {@dfltgid={'dfltgid'}}]}}) close(r4) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000640)) socket$key(0xf, 0x3, 0x2) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x800000000000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xfdffffff00000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xfe000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xfe00, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xf0ffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0xf, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={"49444c4554494d455200000000000000000000000000000200"}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x40000000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000080)=0x1e) close(r3) dup3(r1, r2, 0x0) 20:42:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x5, &(0x7f0000000580)=[{&(0x7f0000000100)="a7289dd68c2336cb27d68eb776b61d9555e925cf920973c112ae37211579b6f3a5a5f41a32f78e7bfbc01ec2fe7918f47f392b92097a47bd3feef369b060998cd4c10f7a030d8c2e94853845271c08bd9ac3cd33aff9c6fc77235292af70a89703baea4499c7f82efa6f6a65ddf8cc6bb243036ba7ef366445b253cf8700f4e4fbb73dd49ec67f51e85a34ef8c45b89aa173ecab8f64b887c439d33ab2cd16e0700a8c8663f2d0410c83bb828f4cc7b284c6e81968e8d401ae18c0bfec6e50b787941bda5181952951ba3f26b468dafe8a6e6552c4bc368f3be96ac9d994422d35b542", 0xe3, 0x3}, {&(0x7f0000000200)="bc5810b842cf728d85a79d5373e4cf8341636106766a774b0e5660e78dac8316", 0x20, 0xffffffff}, {&(0x7f00000002c0)="134b801f9a8cc88289bff39b53efd0400e6c8f4265f7ab8afdff30b8ec5f680ecc92150d7fdb0d8e94d40ecc2bf85b000b662b67eaacf065eae154f98810ee79ea97c2045f53c987cea622a1cca6ffb708631ae576927039652f0793c27b1f2d87c753d0b7a84078b1d9fa6a2661ce9d29e00928baf120ff6499e17974f868a9479eacb740966cf34bf67390ec611d2133a4579d76f5d00ada396b739a8ee801c7ca89050cafee641da807c7ef6470db559fd50f88e3e08a2afbb7f047c87d08a6102aab542c9843df916505d2a3020758460517888b54c98c10a943aa20747461384e2088cb7254e98f6e80feafe1df20", 0xf1, 0x4}, {&(0x7f00000003c0)="05edb0c773f6ba7ea5b6517ca9f0bd7afcc90983e51eb6364ecc72645f6d6102c73d4d38b541d2a7c7c544f0a0476e0e82b35d955355f19c7ddb27591f160af8c00e6f092a5716b832c179a864b3f5752da1f223f35a6bb71616c024e63a2a7a9f16861dd9be61fbe9ddd7f5235937a41e7187448049b621c422a2f94a5f33a4019773d774831ae007c9bbea847078300ef2ce49421301cd2ab9c2a2b9436f2af12b911d9099aafbe1ef67545164726df45d6de8db1c3192a3ec0b6450fe3aaa5ecf838600935a16b4dfc1", 0xcb, 0x6}, {&(0x7f00000004c0)="ddfa83b8e42cc434467aaef12ba615f277cf1daabd6c4575f303d569d00f4f8e9cc6c3775a8a917f00e89c40f0cad7f60f6c1fbb48b134a7c73900b257981ee3c5ac9d36c4ae4213c091a3fd3e190f353bf0bdebc01d41a5b41f362095fc9ceb310727ccf76f075c0a62228080708ecadbc316d822c87f2124787acc04e58e39236f768094cf62c68821613611370c0a4d3956", 0x93, 0x4}], 0x20028, &(0x7f0000000600)={[{@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask', 0x3d, 0x6}}, {@errors_recover='errors=recover'}]}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) 20:42:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x34000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) 20:42:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40485404, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r2, r1, 0x0) [ 597.990442] ================================================================== [ 597.997838] BUG: KASAN: slab-out-of-bounds in pdu_read+0x90/0xd0 [ 598.004054] Read of size 32768 at addr ffff8801ca1827ad by task syz-executor4/13847 [ 598.011822] [ 598.013433] CPU: 0 PID: 13847 Comm: syz-executor4 Not tainted 4.18.0-rc6-next-20180724+ #17 [ 598.021899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.031231] Call Trace: [ 598.033818] dump_stack+0x1c9/0x2b4 [ 598.037439] ? dump_stack_print_inf