, r1}, 0x2c}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="2c6d6d0d61702c87e67c66d219e531ab5a"]) 13:29:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xb898, @loopback={0x0, 0x8}}, 0x1c) 13:29:56 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4280, 0x20) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000240)={0x80000001, 0x81}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000140)={0x0, 0xfff, 0x10, 0x7, 0x8}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x6, 0xc, 0xfffffffffffffff7, 0xf1, 0x100, 0x1ff, 0x7f, r1}, 0x20) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000200)={0x18, 0xd, 0x2, {{0x44, 0x1, 0x5}, 0x2}}, 0x18) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000250007031dfffd946fa2830020200a00090000000600000000ffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:29:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 13:29:56 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000000)=0x54) sendto$inet6(0xffffffffffffffff, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f00000000c0), &(0x7f0000000140)) 13:29:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x2) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)=@allocspi={0x104, 0x16, 0x31d, 0x0, 0x0, {{{@in6, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, {@in6, 0x0, 0x33}, @in, {}, {}, {}, 0x70bd26}, 0x0, 0xfff}, [@mark={0xc, 0x15}]}, 0x104}, 0x1}, 0x0) 13:29:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x3}, 0x0) [ 908.571936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 908.592695] 9pnet: Insufficient options for proto=fd [ 908.597727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 13:29:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffff8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001980)='/proc/self/net/pfkey\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000019c0)={0x0, 0xfffffffffffffffc, 0x3, 0x4708, 0x0, 0x9}, &(0x7f0000001a00)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001a40)={r2, @in6={{0xa, 0x4e23, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}, 0x0, 0x98, 0x80, 0x7fff, 0xffff}, &(0x7f0000001b00)=0x98) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000004d9a982ff498267d04bd0f16146000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff030000000000000000000000"], 0xc8, 0x0, 0x1000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x8, 0x2, 0x0, 0x8, 0x5, 0x1, 0x3ff}, &(0x7f0000000040)=0x20) fgetxattr(r0, &(0x7f0000000080)=@random={'user.', '[securityuser$\x00'}, &(0x7f00000000c0)=""/4, 0x4) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', r3}) 13:29:56 executing program 7: unshare(0x8000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x0, "b22e954511e08c16e300dc65afaaf3258b82be4877434933b4f23f98a99b383cb4831c04288a965f1e63125cd297b222f971c6c2c902c0b8ed358d4a868c135e8c7b606167eb09ee92c12ad5d7bd793001ce16aac2af978c1a84d21b9f1fbf1884a2bdeb04bbdfe224ea952987d682499d9e0410d87f7160f9dcaef04ef1"}, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x800, 0x4) 13:29:56 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xcb6, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r0, r0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x6) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 13:29:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1fc2000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:29:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2001, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x12, 0x3, &(0x7f0000000040), 0x70a000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) ioctl$RTC_VL_CLR(r2, 0x7014) 13:29:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) epoll_create1(0x0) flock(r1, 0x1000002) r2 = epoll_create1(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40040, 0x0) flock(r2, 0x1) r3 = gettid() dup2(r1, r2) timer_create(0x7, &(0x7f0000066000)={0x0, 0x12, 0xfffffffffffffffa}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 13:29:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xe51}, 0x0) 13:29:56 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73797a31f47bcb19f7b00d633d451fe7a827cb8144d764109d792b9dc073844fe5468bcc433c42422e8718179a9e2236aed550841f14dfb6fc2b67b61172777056d976ee0f20b4f9dd4e426e0769a7c711ad6a8405adc2c70ddd8092c95a7a5e12e1f91964dfde55f4e8bc166ee0c25f93058077c63f65e4b8f7"], 0x82) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) writev(r0, &(0x7f000042a000)=[{&(0x7f00001e3f5a)="2db4ff107e00a32a96ccd7785697535fe7e2d1cdf701f5079cde041c224ff8b177c81383265194f55b510ce5107c9164cfda3f99716d35b53be37a7b2a301f9d41650662b66dd4ffca8cf7641b6b5d4d65b9eb195c4666a99f69f89106ee3fc6c6d98f0afc8b4d26aacc19373135822e00f7982a4346", 0x76}], 0x1) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4036965ec69db0415dc26e8c2b5b81bb6210a57214d9593552ac8e30ee51de56820984e8d4bbdda2e37f3dc5f25afa7c7d19280aeea18d905f35e5fea4aee17c535fbb1bf143a165a55d6e9439e81c26cfcddaa293533929570670cc30e3a99dfc474234429d09a11d87b2e3a62f2ca8b07a5fbec43d6987d16c749781d974f2c246943f3ec0d1"], 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)='^', 0x1}], 0x1) shutdown(r0, 0x1) 13:29:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x2]}}) close(r3) dup3(r1, r2, 0x0) 13:29:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x34000}, 0x0) 13:29:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="410b34cc68f8d7c7f2ab129615d2d0f90e54edf6bf4a656aa7ecb3d524b0e61c77da1682cedb9813b29794ff32b0230c475db334ad1581702f4c4a61f62c9a666da71aa8d4713f697bd0b1fe7bdaf3569bc901a8a44727f0299fdf1da9cf6c414f0c1fb3e008c4bd635975a8e84c29fc0ee6a4a7f6937d80c1050bd174c445404525ad1ebc70f0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:29:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x88f00000, @loopback={0x0, 0x8}}, 0x1c) 13:29:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) r4 = add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r3, r4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c379146600006543a02d0000000000000064670f01cab8010000000f01d946d8f1e1b066ba400066edb9f60800000f32f2400f0964460f35", 0x39}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x3}]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13:29:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 13:29:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xb3000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:29:57 executing program 2: r0 = inotify_init() flock(0xffffffffffffffff, 0xfffffffffffffffd) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioprio_set$pid(0x0, r1, 0x3) flock(r0, 0x2) r2 = epoll_create(0x102050204) ioprio_set$pid(0x1, r1, 0x9) flock(r0, 0x0) socketpair$inet6(0xa, 0x80b, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000080)={0x3, {{0xa, 0x4e21, 0x8, @loopback={0x0, 0x1}, 0x5bf}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x9}}]}, 0x110) flock(r2, 0xe) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000200)='wlan1\x00', &(0x7f0000000240)='.\x00', &(0x7f0000000280)="28657468315e7070703162646576896e6f646576dd216b657972696e6725c34000", &(0x7f00000002c0)='\x00'], &(0x7f0000000440)=[&(0x7f0000000340)='(,}mime_typenodev+,nodev\x00', &(0x7f0000000380)='cgroupvboxnet0\\,eth0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='eth0!%-userem1selinux@ppp0\x00']) 13:29:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 13:29:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x20040, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0x80000000) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:29:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xa09c000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:29:57 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)="0e70dfe754302f70726f632f7379732f6e657c2f695076342f76732f7365637572655f7463700087ed5e551c374b9be91a6ca988fed2960109a7216dd1", 0x2, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x2005}, 0xc) arch_prctl(0x1001, &(0x7f0000000000)="d33db8504a9816e7542bd440b0922e9c18afe7e7d5786b833bdece7d5432") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0xff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0x9a0f}, &(0x7f00000002c0)=0x8) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000240)={0xa, 0x4, 0xfa00}, 0xc) ftruncate(r1, 0x7fffffff) 13:29:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grgup_id=', @ANYRESDEC=0x0, @ANYBLOB="04fa"]) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000240)={0x6, 0x401}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20082, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000180)=0x40) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/96, 0x60}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x0, 0x0, 0x1000000000000}}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x24) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={r3, 0x401}, &(0x7f00000004c0)=0x8) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) [ 910.299074] Unknown ioctl 21532 [ 910.323353] Unknown ioctl 21532 13:29:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x800000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:29:59 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x6, 0x28013, r0, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x3ff, 0x400002) r2 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000380)=r2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r3) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff00000001, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001640)={0x0}, &(0x7f0000001680)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000016c0)=@assoc_id=r4, &(0x7f0000001700)=0x4) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) 13:29:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 13:29:59 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x100, 0xde9, 0x2, 0x9}, 0x8) r1 = msgget$private(0x0, 0x200) msgctl$IPC_RMID(r1, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080), 0x4) getegid() 13:29:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)=0x6) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000040)=""/11, 0x155) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) 13:29:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x2000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:29:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000ffffffe500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:29:59 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000100)={0xfffffffffffffeff}) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x2, 0x208000) r3 = memfd_create(&(0x7f00000000c0)='\x00', 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00000003c0)={0x8, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x8, 0x20, 0x8, 0x2}, {0xffffffffffffffff, 0x5, 0x4, 0x401}, {0x100000000, 0x8, 0x8, 0xef8}, {0x80000001, 0x100000000, 0x8, 0x9}, {0x7, 0xffffffffffffa390, 0xde, 0x5}, {0x40, 0x6, 0x8, 0xdcf}, {0x6, 0x3, 0xffff, 0x5}, {0x4, 0x1, 0x7, 0x7}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0xf, 0x4) 13:29:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x510e}, 0x0) 13:29:59 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000340)) memfd_create(&(0x7f0000000000)='/dev/input/event#\x00', 0x2) close(r0) 13:29:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x2, 0x4, 0x100, 0x4, 0x3, 0x6, 0x105f, 0x8a, 0x40, 0x9, 0x8, 0x0, 0x38, 0x1, 0x2, 0x265, 0x8}, [{0x70000000, 0xc0, 0x1000, 0x8, 0x1f, 0x3, 0x8df7, 0x5}, {0x60000000, 0x3, 0x0, 0x4, 0x4, 0xfffffffffffffffd, 0x7fff, 0xac9}], "62f89f4dfd866191d208fc01", [[], [], []]}, 0x3bc) 13:29:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0xc0000000000000, {{0x2, 0x4e20}}, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x108) r1 = socket$inet(0x2, 0x805, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 13:29:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf81b000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:29:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf0}, 0x0) 13:29:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000f00)=@nfc, 0x80, &(0x7f0000002380)=[{&(0x7f0000000f80)=""/167, 0xa7}, {&(0x7f0000002100)=""/194, 0xc2}, {&(0x7f0000002200)=""/175, 0xaf}, {&(0x7f00000022c0)=""/130, 0x82}], 0x4, &(0x7f0000002400)=""/135, 0x87}}, {{&(0x7f00000024c0)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002540)=""/234, 0xea}, {&(0x7f0000002640)=""/211, 0xd3}, {&(0x7f0000001080)=""/48, 0x30}, {&(0x7f0000002740)=""/203, 0xcb}, {&(0x7f0000002840)=""/220, 0xdc}, {&(0x7f0000002940)=""/111, 0x6f}, {&(0x7f00000029c0)=""/36, 0x24}, {&(0x7f0000002a00)=""/84, 0x54}, {&(0x7f0000002a80)=""/4096, 0x1000}], 0x9, &(0x7f0000003b40)=""/221, 0xdd}}], 0x2, 0x0, &(0x7f0000004080)={0x77359400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0xfffffffffffffe90, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)}}], 0x1, 0x40) 13:29:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x172b, @loopback={0x0, 0x8}}, 0x1c) 13:29:59 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6618178a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() move_pages(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil], 0x0, &(0x7f00000000c0), 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '*\'**em1bdev.-\x00'}, &(0x7f0000000040)='/}mime_typesecurity\x00', 0x14, 0x2) kcmp(r1, r1, 0x3, r0, r0) 13:29:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 13:30:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfbb8, @loopback={0x0, 0x8}}, 0x1c) 13:30:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x5e, {0x1000, 0xb1c8, 0x0, 0x5, 0x9, 0x401}, 0x101, 0xfffffffffffff6e4}, 0xe) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') accept4$packet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14, 0x80800) sendfile(r1, r1, &(0x7f0000000140), 0x2) 13:30:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200000, 0x0) write$9p(r3, &(0x7f00000001c0), 0x0) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r4, 0x0, 0x0, 0x73e0) sendfile(r2, r4, &(0x7f00007ed000)=0x3f00, 0x1000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xd, "19d63e416ca105468f53d8cf56"}, &(0x7f00000000c0)=0x15) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r6 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000240)=r6) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000100)={r5, 0x5692d75a, 0x70, "e95789248c68e7f7171989255e875e6fb6a4b4d467bdafdaf2c41427fcc41e992dccc17f95e6cb57bdc9fee3d6879476c07908c2cd1adab5e29f3812d5d0ace037b74b8913c1415f37228cbb2fb24003e9db0bbd732c36a9e3e30300a46ece367ce16dbf879f777cb9c0c9d9a0467611"}, 0x78) 13:30:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x510e000000000000}, 0x0) 13:30:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3d88, @loopback={0x0, 0x8}}, 0x1c) 13:30:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x0, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)={0x0, 0xfffffffffffffb44, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$inet(0x10, 0x3, 0x10) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000017000)}, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 13:30:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0xff0f000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) signalfd4(r0, &(0x7f0000000000)={0x1}, 0x8, 0x800) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000485c38b7ba028f3d2ecdff0bb85a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x0, 0x1002) 13:30:00 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x6857b21ff1155d93) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) pwrite64(r0, &(0x7f0000000040)="af", 0x1, 0x0) ftruncate(r0, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000080)=0xc) 13:30:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc78f000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000000200)=""/98, 0x62}], 0x2, &(0x7f00000002c0)=""/98, 0x62, 0x5}, 0x1}, {{&(0x7f00000003c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000000780)=""/91, 0x5b}], 0x8, &(0x7f0000000880)=""/125, 0x7d, 0x8558}, 0x14}], 0x2, 0x0, &(0x7f00000009c0)={r2, r3+30000000}) fadvise64(r4, 0x0, 0x1, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0600000000000000000a00000014000300080004000000000000000000000000002c40c03ad5d8d007b46719a57463b813086ffb437ff3d0cacfd379034b9cf7f581f111a392cf652a6c3dcc78bcf618f84fef33991ffcd7f9ba6fd9bc636e4400493445c78e18b6b80404048c114b66bc4faed512d0010fd3013362251f8bb53742942cbb2b85511fc9292845c952e78a0cfd526c"], 0x28}, 0x1}, 0x0) 13:30:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 13:30:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @empty, @loopback}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xb9, "06648946de5377801b742c289f1730b68b324807879f48f879a33f922e029ed6fdc074e52485cd1c90a6e262733640445cdf4c687721ed8b74ddf94cb156f5c011b5c099391e193e8551ad78baa8965abada9354eb49576d03231c522dc42e10fb9bfc4ce6b1a6a75b427d547f121c4ef9a6740904423dd9640fed0e91a983e36f30e5ca7a412073010b25d3977a3c389168f8f007416cbee93a15aba3ca71b066c6a4c3f1d6afaea0d4c1187f3df82e83f7337d1a48cd7f18"}, &(0x7f0000000000)=0xc1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x43, "f288e723419a64680ca0e187a7636eef860de1bdeb9a38094f487f3a987228ed4f2a6ea766f3d3b6a269481c2c80f002ff869038ec9667066149e9bc128b160de804a5"}, &(0x7f0000000340)=0x4b) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) r4 = mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="a4e2e0b2e772085a9370fd8d", @ANYRES64=r4], 0x0, 0x0, &(0x7f0000000040)}) 13:30:00 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x288102, 0x84) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000140)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x32, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, [0x2, 0xffffffffffffffff, 0x0, 0xe59]}) socket$unix(0x1, 0x3, 0x0) 13:30:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 13:30:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xdf3b000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffff7) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket(0xd, 0x7, 0xffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002100)={{{@in6=@dev, @in=@rand_addr}}, {{@in=@rand_addr}, 0x0, @in6=@dev}}, &(0x7f0000002200)=0xe8) r2 = socket(0x10, 0x80002, 0x9) r3 = dup2(r0, r2) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x13, 0x11, "582ef082c68c388b59446b6d8d8416db5400ced48102fe17cc229d3663e55c58a2fefd74a275d18a88d0d31d5461eeb3c29f0bd1ed7b89e7e9d7ab08720d023b", "2671fa641247ed521973f7678a3fbb769448f0d8431aa037177680f928461c27", [0xffffffff, 0x10000000000000]}) r4 = getpid() fcntl$setown(r0, 0x8, r4) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000000)=0x1) 13:30:01 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x400100) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xf7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0x4008556c, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 13:30:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x2}, 0x0) 13:30:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x257f, @loopback={0x0, 0x8}}, 0x1c) 13:30:01 executing program 2: setrlimit(0x8, &(0x7f0000000000)={0x4, 0xfffffffffffffffd}) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) mlockall(0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x1fd, 0x0, &(0x7f0000ffe000/0x1000)=nil}) [ 913.629699] binder: 20539:20541 transaction failed 29189/-22, size 0-0 line 2852 [ 913.659604] binder: 20539:20541 unknown command -1293884764 [ 913.669724] binder: 20539:20541 ioctl c0306201 20000080 returned -22 13:30:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x3000000000000}, 0x0) [ 913.678116] binder_alloc: binder_alloc_mmap_handler: 20539 20001000-20004000 already mapped failed -16 [ 913.689983] binder: BINDER_SET_CONTEXT_MGR already set [ 913.695884] binder: 20539:20541 ioctl 40046207 0 returned -16 [ 913.702882] binder: 20539:20550 ioctl c0306201 20007000 returned -14 [ 913.711250] binder: 20539:20550 unknown command -1293884764 [ 913.717853] binder: 20539:20550 ioctl c0306201 20000080 returned -22 [ 913.725776] binder: undelivered TRANSACTION_ERROR: 29189 13:30:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x2000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:01 executing program 0: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x5f69, 0x400000) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000340)={'vlan0\x00', 0x68e}) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000f8dfe0)={{&(0x7f00007ea000/0x2000)=nil, 0x2000}}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x368, 0x1000, 0x8, 0x4, 0x101, 0x100000000, 0x3c, 0x10000, 0x1fe8, 0xbe, 0x1, 0x6, 0x16f, 0x5, 0x3ff]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e23, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x2}}, [0x6, 0x1, 0x88, 0x400, 0x7, 0x1000, 0x8000, 0x4, 0x9, 0xe8, 0xffffffffc02d85dd, 0x7fff, 0xe2c7, 0x0, 0x7]}, &(0x7f0000000180)=0x100) 13:30:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x1ff, 0x0, &(0x7f0000fee000/0xf000)=nil}) 13:30:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1300000000000000, @loopback={0x0, 0x8}}, 0x1c) [ 914.217204] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 914.224676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 13:30:01 executing program 6: r0 = socket$inet6(0xa, 0xfffffffffffe, 0xac82) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060b83fa450497144f5701755a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:30:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) 13:30:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x10001, 0x1) r2 = accept4(r1, 0x0, &(0x7f0000000100)=0x1d7, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmmsg$unix(r2, &(0x7f0000007f40)=[{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000001c00)=[@cred={0x20, 0x117, 0x2}], 0x20}, {&(0x7f00000042c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007500), 0x0, &(0x7f0000007e00)}], 0x2, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000140)='/dev/dsp#\x00'], &(0x7f0000000380)=[&(0x7f00000001c0)='/dev/dsp#\x00', &(0x7f0000000200)='/dev/dsp#\x00', &(0x7f00000002c0)='rfc4106(gcm(aes))\x00', &(0x7f0000000300)='/dev/dsp#\x00', &(0x7f0000000340)='\'\\\x00']) 13:30:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xa74c000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:01 executing program 7: r0 = socket(0x15, 0x80005, 0x0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x114, 0x2710, &(0x7f0000000080), &(0x7f0000000040)=0x4) 13:30:01 executing program 3: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x890f, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000000)) unlink(&(0x7f00000000c0)='./file0\x00') 13:30:01 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r3 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r4, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r3, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r6 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r7 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r6) setsockopt$inet_int(r2, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r7) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000400)=0x3) r8 = socket$inet(0x2, 0x2, 0x1) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000740)) getsockopt(r8, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r3, r9, &(0x7f0000000080), 0x80000003) 13:30:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 13:30:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000900)=0x8573) r3 = socket$inet(0x2, 0x4, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xe47}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x6}], 0x68) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x1000}]}, &(0x7f0000000300)=0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}, 0xc100) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer2\x00', 0x80080, 0x0) write$P9_RATTACH(r5, &(0x7f0000000880)={0x14, 0x69, 0x1, {0x26}}, 0x14) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/47, &(0x7f0000000180)=0x2f) 13:30:01 executing program 3: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x200000, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000400)=""/4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000001800190000003fffffffda060200000000e800010000000000000000000000000000000000", 0x29}], 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x201, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x33, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x84, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, r3, 0x2}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x18]}, 0x8001}}, @release={0x40046306, 0x1}, @release={0x40046306, 0x4}, @increfs={0x40046304, 0x3}, @register_looper={0x630b}, @release={0x40046306, 0x3}], 0xd, 0x0, &(0x7f0000000180)="9d17b79f673b2de7494ac9b378"}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04082abd7000ffdbdf25050000000400010008000500050000001c0002000800060000002f80080008000100030008000600020000000c0003000800080007000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000005}, 0x20004810) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000380)={0x0, 0x8, 0x9, &(0x7f0000000340)=0x9}) 13:30:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000a40)=[{}, {}, {}, {}], 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10840, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '/proc/sys/net/ipv4/vs/nat_icmp_send\x00'}, 0x2c}, {@dfltgid={'dfltgid', 0x3d, r2}, 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@access_any='access=any', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, '/proc/sys/net/ipv4/vs/nat_icmp_send\x00'}, 0x2c}, {@access_client='access=client', 0x2c}, {@cache_none='cache=none', 0x2c}]}}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000040)) 13:30:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe853000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x4000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:02 executing program 0: r0 = socket(0x3, 0x1, 0x5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x3}, &(0x7f0000000100)=0x8) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x4000) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mknod(&(0x7f0000000080)='./file0\x00', 0x4000000000003023, 0x1) 13:30:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 13:30:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000900)=0x8573) r3 = socket$inet(0x2, 0x4, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xe47}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x6}], 0x68) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x1000}]}, &(0x7f0000000300)=0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}, 0xc100) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer2\x00', 0x80080, 0x0) write$P9_RATTACH(r5, &(0x7f0000000880)={0x14, 0x69, 0x1, {0x26}}, 0x14) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/47, &(0x7f0000000180)=0x2f) 13:30:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1000000000000, 0x4003) epoll_create1(0x80000) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000002c0)=0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000040)={0x4, 0x3, 0xdb7, 0x4, 0x9}) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc8, 0x0, 0x1000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x8001}) 13:30:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0xfffffffffffffffd, &(0x7f0000000000)={0x0, 0x37, 0x0, @thr={&(0x7f0000000180), &(0x7f00000002c0)}}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x101002, 0xe3) connect$l2tp(r2, &(0x7f0000001340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e20, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x3a) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000012c0)={r3, &(0x7f00000002c0)="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", &(0x7f00000001c0)="bcb0556c994d1dc764a4ab8a9849615ba2513838213a1f21977bcc05f96fb5cdb5d05343a575a8fcc061f1845d61d8b978c8e4eac40f0618d80be6a83f4f00a4075eb8df7613b22802cb52d299a7df1ccdb847bf62e5979a36f62cb8a4c6298b237fbae361d979890978e0ff8448e48e95452deec4ca9f33b988976bac5411eb61382f796171010abac238bea68044586696fce307b8f29115472db473b879e41811d1bca756c0d3b5df39ae186807b3a6d011a5316bff8c8bd01a2fc0fca7"}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[{0x4, 0x8}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x8001}, {0x4, 0x8}, {0xb, 0xfffffffffffff800}], 0x6) 13:30:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1000, 0x200) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x10000000, 0x5}) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b00090200000009000000000000628517afd95f0000004fc3c2ca9dbc8218ed7f5ca4573075f34b68b7ce4e89be3aa16b366c0c46e284c81c1ce0a3747fa21de13591f4d7f8a325d8508b3572b1af96a258eb48254650ca558bef4cd7d6da1e6af252"], 0x10}, 0x1}, 0x0) 13:30:02 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7f25000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 13:30:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000900)=0x8573) r3 = socket$inet(0x2, 0x4, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xe47}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x6}], 0x68) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x1000}]}, &(0x7f0000000300)=0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}, 0xc100) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer2\x00', 0x80080, 0x0) write$P9_RATTACH(r5, &(0x7f0000000880)={0x14, 0x69, 0x1, {0x26}}, 0x14) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="3a9a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb08ad0491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ee091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db2d6e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d9f44f059a5dd10c0971608f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca116f8f11416e5c1bd5499636ddae25fc49709f0309cf5c0bf8e432160c258d14223b3b0d009b09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243f33e7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff72b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6817b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0efa4d9d3c42e1ba282847d476cef0228b6a1422aba08e5f3c1cd279bb20dcf3e90f80a4a8ac093de9f0d9c11a540aff2de27437787bbed317439cafb71e7f92b7e02cbadb076f04ba2cb8c96aeef53c74d9036c922b1b24a79228e833abc661b5630caa45389341cb8ddf277fd916141023fb53c0d155faf6fdfb593e22db25c4f8afdcd90d437672ebe975f4a5f445bbdd845505fcfea702a42d821d3dc11720de0009e83161e5a089d09184346606e126842de54e85e20aa5bac874367a8690d09d6ee61278bd424eabe824ff22693b0cece9e4d935f28bb7efd85afb1642a363d583eb01f48f25784f80002b163bd3da724b0391dac7c23f76b5c5c6319f7aab18a486d5607f68ce2f83d2a6a8a13f8ecdb845b8af96230f063019ff113698c720403bbf6202b2d50800000000000000d538fc1fa57518769bd3bfc11e743b4e56b01f17483a152abcca0bd84a1011bd703a494150176d17322cf10307d259999622b76ac6a86407c9ed281ae29b9b569b382d3f39fe4d07706c96c41a565437d9edb1cb532d900efe54f518044bba5fa5791c1797c569a3d6c21342d92f4b104a3d957cf85e617c46ac97b6785a455ce7765eb80a02de4dffde0207061e1afb61e777379b202707f0f49edcf21a186ea1f2e08ef1dc15ae3371280d89aabb3bd53408b4cb2a8e42f9f4d0bc11d766eb51940f5e92559b91954649f2786fb6683e19ca5f609c40e327876f5515aeefce0f390d3fd557aabcb091b04131f3edc1ed80a2d5a812786530a302ab54f7e1f3a6bca852722d1af85ceab2e6565733b31f76d795b1a603a780564b181ebadb0028c03d0c2c2831ce3a83369bf4ec61f802633e719040dac86c9c26e01bdad8", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/47, &(0x7f0000000180)=0x2f) 13:30:02 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x101}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r1, 0xffff}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000140)={0x0, 0x7e9, 0x1}) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000780)={0x1, 0x0, [{}]}) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002700ffff00000000000080000400000000002ce4fcf89fe4e1384d"], 0x14}, 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000400)={0x8, 0x7, 0x5, 0xfffffffffffffffb, 'syz1\x00', 0xe4}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x10600, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200002, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000080)={0x6, 0x3ff}) dup2(r2, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) getresgid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) lchown(&(0x7f0000000440)='./file0\x00', r6, r7) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x8001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r8}, &(0x7f0000000480)=0xfffffeae) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000006c0)={{0x2, 0xcbb}, 'port0\x00', 0x2, 0xc, 0x9, 0x58, 0x7, 0x7, 0x4, 0x0, 0x4, 0x9}) 13:30:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 13:30:02 executing program 3: r0 = socket$inet6(0xa, 0x80007, 0x80000004) bind(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x7fffffff, {0xa, 0x4e22, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0xfffffffffffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000240)={r1, 0x1, 0x83, "7187338f16c9bf1db59a4bde551a19c5baa652b0119233d26da10da7d46f5e63179b6357"}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/48) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120005000000000000000000000000"], 0x10}, 0x1}, 0x0) 13:30:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000900)=0x8573) r3 = socket$inet(0x2, 0x4, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xe47}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x6}], 0x68) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x1000}]}, &(0x7f0000000300)=0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}, 0xc100) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer2\x00', 0x80080, 0x0) write$P9_RATTACH(r5, &(0x7f0000000880)={0x14, 0x69, 0x1, {0x26}}, 0x14) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/47, &(0x7f0000000180)=0x2f) 13:30:02 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xffffffff00000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:02 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)='selfvboxnet1.trusyed$\x00', 0x16, 0x3) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000200)=""/245, 0xf5) [ 915.446274] QAT: Invalid ioctl 13:30:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x40000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=""/212, 0xd4) ioctl$TIOCSTI(r0, 0x5412, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x400000ffffff94}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, 0x400000000, 0x7, 0xfff, 0x48, 0x94}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e24}}, 0x6b540, 0x1, 0xca6, 0x5, 0x5a}, 0x98) 13:30:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0) 13:30:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x700000000000000, @loopback={0x0, 0x8}}, 0x1c) [ 916.245531] QAT: Invalid ioctl [ 916.359553] QAT: Invalid ioctl [ 916.366143] QAT: Invalid ioctl 13:30:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8800, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x6, '\x00', 0x4}, 0x18) personality(0x600000b) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0xe, "ad3a928673bb2e6c95fd213c1228"}, &(0x7f0000000180)=0x32) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x80000) 13:30:03 executing program 7: r0 = eventfd(0x3) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x200000032, r0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x200002c) inotify_rm_watch(r1, r3) r4 = shmget$private(0x0, 0x3000, 0x1400, &(0x7f0000001000/0x3000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/15) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000001640)=""/4096, &(0x7f0000000040)=0x1000) 13:30:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000003c0)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x603, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, {0xa, 0x4e21, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x83}, 0x2, [0x7, 0x3, 0x10000, 0xff, 0x8, 0xf7, 0x93, 0x956]}, 0x5c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={r1, r1, 0x0, 0x1}, 0xffffffffffffff6e) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000000)={0x8, &(0x7f00000001c0)=[{}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @remote}, {}]}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x8, 0x3fd) signalfd(r2, &(0x7f0000000040)={0x1}, 0x8) accept4$bt_l2cap(r3, &(0x7f0000000180), &(0x7f0000000140)=0xe, 0x0) 13:30:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 13:30:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x500000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:03 executing program 0: mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000002, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/255, 0xff}], 0x102d) r1 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x100) syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x3f, 0x4000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x22, &(0x7f0000000280), &(0x7f00000000c0)=0x249) 13:30:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) r3 = dup2(r2, r1) io_setup(0x5, &(0x7f0000000040)=0x0) r5 = accept4(r3, &(0x7f0000000100)=@nl=@proc, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @multicast2=0xe0000002}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x200, 0x4000000000, 0x3, 0x6, 0x81, &(0x7f00000003c0)='veth0\x00', 0x0, 0x200, 0x5}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0xb69e, 0x1, 0x1, 0x7f, 0xb30, 0x1ff, 0x7, 0x100}, &(0x7f0000000240)={0x9, 0x81, 0x5, 0xfffffffffffffffa, 0x7, 0x31, 0x5, 0x4}, &(0x7f0000000280)={0xfc35, 0x1f, 0x8000, 0x3, 0x1, 0x8, 0x80, 0x6}, &(0x7f0000000300)={r6, r7+30000000}, &(0x7f0000000380)={&(0x7f0000000340)={0x800}, 0x8}) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000040)}]) 13:30:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 13:30:04 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000100)="9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0x40, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cd83daae65f8f762070") setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x81, @local={0xfe, 0x80, [], 0xaa}, 0x4}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xd85}, 0x200, [0x1000, 0x1, 0x100000001, 0x25ac, 0x2, 0x100, 0x8, 0x81]}, 0x5c) r2 = memfd_create(&(0x7f0000049000)='\x00', 0x1) r3 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0xff, 0x0, 0x0, @tick=0x1, {}, {}, @connect}], 0x30) write$sndseq(r2, &(0x7f0000042f70)=[{0x0, 0xfdffffff, 0x0, 0x0, @tick=0x1f4, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0xffffffbd) 13:30:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x80003}) rt_sigaction(0x4, &(0x7f0000000040)={0x1f, {}, 0x2, 0x8001}, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x800000, @mcast2={0xff, 0x2, [], 0x1}, 0x59}, 0x1c) 13:30:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4fcd000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x2000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge_slave_0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="6dcf", 0x2, 0x800000000008000, &(0x7f00000001c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000200)="0900d13a8e04", 0x6, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 13:30:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x64000400) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000000c0), 0x10) 13:30:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 917.135956] IPVS: ftp: loaded support on port[0] = 21 [ 917.174370] IPVS: ftp: loaded support on port[0] = 21 13:30:04 executing program 6: mount$9p_rdma(&(0x7f0000000440)='127.0.0.1\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x400, &(0x7f0000000500)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x7}, 0x2c}, {@rq={'rq', 0x3d, 0x6}, 0x2c}]}}) r0 = socket$inet6(0xa, 0x10000001, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x0, 0xffffffffffffff9c}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r2 = shmget$private(0x0, 0x1000, 0x7c000020, &(0x7f0000ffd000/0x1000)=nil) getresuid(&(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) getgid() fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000600)={0x1, 0x71, &(0x7f00000003c0)="4bdf2e6c52b2e7d6eaac60d30becbc66e194d6f3d04ef17089a799ac3ede8726b34bf0c57f4b1d44b31827c1c673628aa6f442d0c3f5d3ee72de56097c169ec1c3a91a806429be26bf4dddcd265eb0f399ada3808f7c0fd95ff7ce10df52d065bbf787ee433a159fee13be2daf1b848df8"}) r8 = getpgrp(0xffffffffffffffff) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x9, r3, r7, r4, r5, 0x0, 0x9}, 0x8, 0x380000, 0x0, 0xfffffffffffffffa, r6, r8, 0x8}) 13:30:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000)={0x5, 0xb36, 0x12000000000000, 0x37ba17f3}, 0x6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fadvise64(r2, 0x0, 0x20007, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) 13:30:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x40860000, @loopback={0x0, 0x8}}, 0x1c) 13:30:04 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x5, 0x7, 0x5, "8c0d4cbac53e691d162995efb9af509af10027709c0bbf6d8a42db186b7eca9a8ef35a0d88701459a4c48cc7fdcc3e3f6667dd53dee9c51ae96b44e53a73ce", 0x2a}, 0x60) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) ptrace$getenv(0x4201, r3, 0x2, &(0x7f0000000040)) tkill(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80400, 0x4) 13:30:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 13:30:04 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x400000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x3c, 0x0, @ib={0x1b, 0x8, 0x157, {"c9c8e7043fc79d6196f8ebc2c55a224e"}, 0x400, 0xfffffffffffff698, 0x8ad5}}}, 0x90) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000012f46)=""/186, 0xba}, &(0x7f000001a000)=[{&(0x7f0000001f34)=""/204, 0xcc}, {&(0x7f000000e000)=""/211, 0xd3}, {&(0x7f0000013f5d)=""/163, 0xa3}, {&(0x7f000001fff1)=""/15, 0xf}, {&(0x7f0000006fa1)=""/95, 0x5f}, {&(0x7f000001a000)=""/56, 0x38}, {&(0x7f000001bff7)=""/9, 0x9}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000012fe5)=""/27, 0x1b}], 0x9}}], 0x48}, 0x0) 13:30:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850051702200f9ff0600eeffffff9a009500000000000000"], &(0x7f00000001c0)="73797a6b616c6c65720001be826e8f833152f795b4d9f4bc3ea582523aed371b084fccfc3d2ef2cbe65d30642ca8dcd0f8479be52e66937908f1d8112489e8099d9d4edb806d81189c0fbb6818d028546c35d3363d54db0db780f54977ae6359d617c1d233d8e18abfc75f9a76cd8e1f77583bc02f07a33de6f304e95db82fd4da55ebd25162df6f88e7d1bb0654ffb31e008967", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x1e, 0xdc, &(0x7f0000000100)="0aac1ac22028d576e0e5504088cab48a16fb6c552a50c14abf0fe6059737", &(0x7f0000000000)=""/24}, 0x28) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={0x7, 0x4, 0x1f, 0x9, 'syz1\x00', 0x1ff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x500, 0x70bd2c, 0x5037, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 13:30:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 13:30:04 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20200, 0x10) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x339, 0x6, 0x10000, 0x5f, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_names='bcsf0\x00'}) 13:30:05 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xff000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:05 executing program 0: r0 = socket(0x4, 0x5, 0x5) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x20000) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 13:30:05 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x40) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000180)=0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x3ff, 0x4, 0x2dc63a1f, 0x2, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x10000}, &(0x7f0000000140)=0x8) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000023000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000020d2a758048a2d32ef63ade900ff8a0004000000ef2beb5a5b61579613b261c1cf3b7e370808da56b9ceefc0fbd2350af760e548d199a2177b9e3d1ad87f4165ab0150b40bdd3beb1a25ec9409cee4588f70dd3c0a6fd904255aba280942950e5b0bb4323b052986e8f1d5c4ad4281933d57a8475d5c2fcb771384499cb8e9bddbafeac35c7db03466bf5423b9d96342646c431943bdcbdd1ed8116e22aa"], 0x1c}, 0x1}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000280)={0x4, {{0xa, 0x4e23, 0xfff, @empty, 0x7}}}, 0x88) 13:30:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x2000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:05 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x6, 0x80a, [{0x66ef, 0x0, 0x40}, {0x0, 0x0, 0xffffffff}, {0x4, 0x0, 0x7}, {0x1, 0x0, 0x5}, {0x5, 0x0, 0x6}, {0x9, 0x0, 0x12000000}]}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x38, 0x2e, 0x14, 0x9, 0x8, 0x2, 0x2, 0x169}}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x6, 0x4) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000140)=""/45) r1 = accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host=0x2}, 0x10, 0x80800) setsockopt(r0, 0x9, 0x2, &(0x7f00000001c0)="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", 0xfd) ioctl$KDDISABIO(r0, 0x4b37) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f00000002c0)=""/12, &(0x7f0000000300)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x2000, 0x0) bind$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000003c0)={'bcsf0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000440)) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000480)={0x20, "4c2efc28cc4887a7480621ec63449b08c3d75e1f9e00a66c6910d02becb8a88b"}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000004c0)=0x9, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x9, 0x448040) fcntl$setsig(r1, 0xa, 0x15) rt_sigprocmask(0x2, &(0x7f0000000580)={0x9}, &(0x7f00000005c0), 0x8) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000600)=""/82) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$sock_netdev_private(r2, 0x89f6, &(0x7f0000000680)="a5bfe0c9f89fdede088e114a038b3e0ec4ed8721a3045305314fa18a96bb64c0f941116884054f0c407ca943fcfad48b849e6b9b88f41eb1a1df2c69129f7f9c43bccd88892819f6ac3dc025930656f9d96469873fe1d612df36ee28c642d4b3e4d0038ec46b5228cbbf78506710a3c4eabce17563848d07d4227ff26bd60faf104fcf565296e9232367a1a23c1ed18013d6aa9ffb19ee025fb00d5f88bb96468d2308bac44296ebc366052ef62985a06c") setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000740)={{0x625, 0x2}, 0x8}, 0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000780)) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000a40)=0xe8) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000dc0)=0xe8) lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000ec0)={0x2b8, 0x0, 0x1, [{{0x6, 0x2, 0xfffffffffffffffb, 0x0, 0x1, 0x7, {0x5, 0x8, 0x7, 0x6, 0x773, 0x2e3d, 0x20, 0x7ff, 0x10001, 0x200, 0x3ff, r3, r4, 0x1, 0x1ff}}, {0x2, 0x5e7, 0x1, 0x0, '-'}}, {{0x2, 0x2, 0x7, 0x545d, 0x9, 0x4, {0x4, 0x904, 0x2, 0x6, 0x8, 0x7, 0x4, 0x1f, 0x5, 0xffffffffffff44c6, 0x9, r5, r6, 0x28, 0x751ce15f}}, {0x0, 0x3, 0x19, 0x4, "2d6367726f757059246d696d655f74797065244021405eb477"}}, {{0x2, 0x1, 0x7, 0x9, 0x3, 0x401, {0x6, 0x737, 0xcae, 0x4, 0x8001, 0x3, 0x2, 0x9, 0x200, 0xc37, 0x3ff, r7, r8, 0x100000000, 0x800}}, {0x3, 0xfffffffffffffff7, 0x9, 0x1, '/dev/vcs\x00'}}, {{0x4, 0x3, 0x1000, 0x7, 0xc24, 0x4, {0x1, 0x6, 0x50, 0xa00, 0x1000, 0x4, 0x57b7, 0x9, 0x1, 0x634, 0x3e, r9, r10, 0x3f, 0x7}}, {0x1, 0x7d, 0xd, 0x7, 'self^eth1em0:'}}]}, 0x2b8) 13:30:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000000540)="f174b15455a00fe9874d2d35bfdaf5531233170e0bf1544d6746dbff5f598ba0398a18a59d5b5b50", 0x28, 0x4000, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) dup(r1) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x0) fcntl$setown(r1, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300)=0x4, 0x4) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000007c0)={0x14a, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) eventfd2(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) close(r5) 13:30:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 13:30:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x36, 0x109000) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2000f) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x14020002}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, r2, 0xe08, 0x70bd27, 0x25dfdbfe, {0xd}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x20}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x12f}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_delrule={0x30, 0x21, 0xfdb0c858e588edd, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x30}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x8, 0x4) r3 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x4, 0xa000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000340)=""/138) 13:30:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x100) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280000000000000029000000020000002b02df2fd01effb4d535503b6ad917e30f00000000000000"], 0x28}}], 0x1, 0x0) 13:30:06 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xa08f, @loopback={0x0, 0x8}}, 0x1c) 13:30:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 13:30:06 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") shmdt(r1) 13:30:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000000540)="f174b15455a00fe9874d2d35bfdaf5531233170e0bf1544d6746dbff5f598ba0398a18a59d5b5b50", 0x28, 0x4000, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) dup(r1) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x0) fcntl$setown(r1, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300)=0x4, 0x4) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000007c0)={0x14a, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) eventfd2(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) close(r5) 13:30:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 13:30:06 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045010, &(0x7f0000000080)) getpeername$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xbb}, 0x72, r2}) 13:30:06 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) mq_timedsend(r0, &(0x7f0000000080)="0a1348ef37d9d3ec20f42d2cb4f3ec505b2a90d2bea91fb11d2f5ea405255757cdf343aefae3d82c34dd271ef4f50fd7b0b78adaf139a740dde0fe234ac8d7fc516d97c2eea29fc306ea36d8d2d56fd3de799979c6423b212a4bb1e0fbf90fcfca86be7e0207d745", 0x68, 0x2, &(0x7f0000000100)={0x0, 0x1c9c380}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001cc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 13:30:06 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0xfffffffffffffffe) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r1 = getpgrp(0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'system.', '\x00'}, &(0x7f0000000080)=""/120, 0x78) prctl$setptracer(0x59616d61, r1) 13:30:06 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf037000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xff0f000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000000540)="f174b15455a00fe9874d2d35bfdaf5531233170e0bf1544d6746dbff5f598ba0398a18a59d5b5b50", 0x28, 0x4000, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) dup(r1) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x0) fcntl$setown(r1, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300)=0x4, 0x4) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000007c0)={0x14a, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) eventfd2(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) close(r5) 13:30:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0) 13:30:06 executing program 2: syz_emit_ethernet(0x2e3, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x3c, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xf62]}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x53, 0x204000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000300)="2b0180a56066ba9fe28c45aea8d7208c", 0x10) 13:30:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xe7fb19faefc071a9, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5a8, 0xa080) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x3, 0x9, r3}) 13:30:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x10000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x82000, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000180)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="a3c87a3be5d3d0156cee9bcab2365f81b5d7dfa4be927ede2d8394c69318f69dc640f4cdb3ad4423172c5fc79a3a62903a83874a6dd77865333c3740d83ae9763cb71f405eb89dc2a638d88c31f891dda33459fbe3ccdb5db61caeb716b4f596e4570f752957518e5b8053e8b333f00ea95f304cfccd84b87daea8fcbdf03a89db7d777ec1595564737253decefb9b3b940e21e7538ab74a3971ef6bff49a26fcf62221489fcb4d10378f4e3c2cab62cf914b5426d06586e31eb906738cd26ccff216e7c6082cdb9dfe1d71eb4cba3384480c88b46317144204c7a59344f35a965647dcd10f94fc77b0d07cfd3f72d899c6f531ebe2b1390228ff728d5b7671d") socketpair(0x1d, 0x3, 0x1, &(0x7f0000000140)) 13:30:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KDENABIO(r2, 0x4b36) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) close(r1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x9, 0x7ff, 0x2}) 13:30:07 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x28da0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0) 13:30:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/15) 13:30:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000000540)="f174b15455a00fe9874d2d35bfdaf5531233170e0bf1544d6746dbff5f598ba0398a18a59d5b5b50", 0x28, 0x4000, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) dup(r1) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x0) fcntl$setown(r1, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300)=0x4, 0x4) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000007c0)={0x14a, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) eventfd2(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) close(r5) 13:30:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0x23, 0x3, 0x0, {0x0, 0xffffffe3, 0x0, 'fd'}}, 0x23) 13:30:07 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000400)=0x1) mlockall(0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1f, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000440)) r2 = dup3(r0, r1, 0x80000) r3 = geteuid() symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') ioctl$TUNSETOWNER(r2, 0x400454cc, r3) 13:30:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe51}, 0x0) 13:30:07 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x7, 0x3}, 0x2) ioctl$int_out(r0, 0x5460, &(0x7f0000000100)) 13:30:07 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x107b0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x2000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x4001, 0x8000) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000003021f001cfffd946fa283005b580a000900020009000000010015000404ff7e", 0x24}], 0x1}, 0x0) 13:30:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0) 13:30:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69af40b440e1b9950810bf2c93fd2a26d9e181780aca84f48d19ac75543d591a12c8ea6136d0e14648eedd747c1d27bef0e09f9f54274d9ec66167e0b07656032855958e42d9ba1afadf2edbbafdba24fa53c5591673615b00e2293e6881ff5569e3570dd8136f03433740994d692c54a7524aa79d192afef2467c1f0d02784373ec13ddb490de8d77e553e832098ac9531d451b6447d45838769484bdf") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000080), 0x4) ioctl$fiemap(r2, 0xc020660b, &(0x7f00000002c0)) sendmsg$rds(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000003c0)=""/53, 0x35}], 0x4, &(0x7f00000004c0)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000440)=0x1, &(0x7f0000000480)=0x800, 0x9, 0x1, 0x1, 0x7fffffff, 0x4df65f733834ccfe, 0xff}}], 0x58, 0x8800}, 0x1) 13:30:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x201, &(0x7f0000000380)="dd7e99310304d3a6134ef3a103000000bba480e80487b8390fc5e6dce4982d65fa0ec7e50795a620933560c83dfba21b3546e2d115cc2f0fbb42c055f456063c5e7a65c689d52d6e8c4033da61c50392362c3724e4e4c31fc486fcd3bcf0da6f157011fbcc8f04c293a4f0c8274a5924d8523f7b1c11cd3012d61d6ede1cea595a03c1180e91bc15609e3b41eed6fa65ec1ddbaf444256541d") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x20) getdents64(r1, &(0x7f0000000040)=""/125, 0x7d) 13:30:08 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x1f, &(0x7f0000310f99)=""/103, &(0x7f000039a000)=0x67) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x40) sendto$llc(r1, &(0x7f0000000040)="0df40e94c1e11fac6fdc051464f167ade454b2f064482f894017ec2e13deaae4d2fdca3a14a841d005833d5d5a6209a8afdde7354f9de5ed58c603d60bee1fb6df5c0e20ee7f2e584851e6dd529ac24e3598c5ace2dac2f438e681315e47fcc6eb24c471c88b36c8e537e4d8bab0077b32dd61a57de8f89518508d631b147014b233b5579b8ad591a21a7c71d61b8f6174231dfd582dd8aa0e5564e6b94c02e95cf3fedfd27341c2cb87021cec1da997953998814ddd58b6fcdfbca261221efa9cef03a761f2ad78c5", 0xc9, 0x1, &(0x7f0000000140)={0x1a, 0x305, 0x2, 0x3, 0x3, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 13:30:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc0df0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@l2, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=""/237, 0xfd4f}, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x1fb, 0x0) r1 = accept4(r0, &(0x7f0000000140)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000000)=0x80, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bcsf0\x00', 0x2}, 0x18) 13:30:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) 13:30:08 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0500030000000000000000009e43854ef0044d000000003da7000008000000000000007a030000000000000340000000000000830200000200000008000000000000003b0800000000000000000000000000000000000000ad37713d295014198bb16d56f3d4b6f42b68db5bdf43648c29e80fad212fad3789638e34649f627ead6c0b1cf6d86b1a733c0b63b4fd5231dedba4f4bbfb74c39a4af5a2fe7ce87f3e00244c94"]) 13:30:08 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0xfffffffffffffffe, r0) sendmsg$inet_sctp(r1, &(0x7f0000000940)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000000540), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="ad0800000000000000000000000003000000000000000000"], 0x18}, 0x0) getsockname(r1, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) 13:30:08 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x3ff) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$KDDISABIO(r1, 0x4b37) syz_read_part_table(0x5245, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c, 0x1c0}]) 13:30:08 executing program 7: syz_emit_ethernet(0x11, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@x25={0x805, {0x1, 0x8, 0xb}}}}, &(0x7f0000000040)={0x0, 0x3, [0x3cf, 0x4bc, 0x614, 0xce9]}) r0 = semget$private(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/23) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x13, 0x45, &(0x7f00000000c0)="e5f3451099851762848e8a64fd8321e27c21ab400b5c73ef636eff4be02edf8d8d1373da6f6d6029b2491278d0fb40566ae56d3b87001b7fe02b5d015b6ad021e6f28eecc4"}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='gretap0\x00', 0x10) r3 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_generic(r2, &(0x7f0000002600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000018}, 0xc, &(0x7f00000025c0)={&(0x7f0000000280)={0x232c, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1e, @uid=r3}, @generic="4029ecf9482c9a4145128e5b5b2f83d71b8ead87e8710193fe04aa647ea69830df76d74a16fb5dbbfea4c41c0c3ecbb7cd6dc7663fea1736d052d83f1db555a7ab90b2453e8c8f69f1f9df82c48005cde17b6aea9035f17593e0", @generic="d2698fc6f6a93e7f0806b89ac5e1214da882a3744d90dd049c173a0e9b7ca4ae447de8b2bbe3af00391e2e46f98230fd666911e8124a2a05fff2fbc0bb1eecae17370f41bd3872e671a4aa81096a824f95b52e55a35f13944b22bd4fb965ce8323053275bf409dd1eafae590573053251005f85dd826d4314dbdae094573f4e2e06f08f4ddb5b23591c2ede9244c3ccd1380bc8dd8e8096af8dd1699dc801eff7161afbc41bdfdc086980ee7b2", @generic="0487e2315bb84e6d6b49979a72eb3969b0946990689096e4dc70e16672456c2f05a9b41dfc206fdf4f94de09dbfc7a18ecfb6e18f08bc2032eeebf98c3ff5104bbc35b7617f035b18532792436caa4e44b158bb53fe91cdc03bbe1e32a7d6638db15f517eef552b7d89f737379a113be35bd387bde83d48869ffb1b01a117d96bf648dc74ec3dbda65c34075689c7118eb7a762e27596aa7d9149fbe5a0e44d6d377f6d7f7b35df4f6884765d7175754a5cdfe69ebf083e130bd13c183afda2cb82614785bb286ae6b6f124814e6bbb7239327dbdaf9d1143ca9309e6db3723fc30e4e96", @typed={0x8, 0x93, @u32}, @nested={0x1008, 0x7f, [@generic="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", @typed={0x4, 0x5}]}, @generic="4960d4d4c2606be9d1a75edb4202920acce97ca4791ad00c75ef07008fe2c2a696ba2c5edf995bf17be46997d70dcb", @nested={0x10d0, 0xc, [@typed={0x8, 0x7d, @u32=0x2}, @generic="8894fe0a96d2a4d998c6", @typed={0x8, 0xc, @str='/\x00'}, @generic="57a6290d4c0595291c776be6b67fe1cc3b4e4ba322f9c6d780422a4c2a364ecd64d6aac2b9c7e0a8f63c40f06aa1e174d4778966613ed4b3c1246fdf97c6c70eae5099a2a9ab4e2f6fcf9a5557d8b56b7143dee9dd3914caaebdb84d7a2263795ba28b07f160ac8429eb8c9c065790b3b91160069d6247a6b3d3b5504c85f2b55cf15f35e2bb5d0783d76b8e1e8fd157dac5bbb62dcb0ecfbb0cf126915ac3e38f754d193eab96e1650f97d4a05f9f", @generic="faace8a2a639bd607197e3f806e3e93f3f17c769a7f06da7edc4285f6cd86fa9e3031bb6a76d40c7430d3f65a082cd18b84d89d09a9d5adc39faa1da51eb5c4d1b27e6bab10d6ccb6b301c431cd68999ac49ff32bda1a8cf39411c43e3791264cd3807b56a2a82d077799f7e46637ad1c62978248a93dcb7a76fca6645bfd5d6eadec6df11b169d24a5d4c447c8981f224fddcbe5acfe09ef1f8ed24e0961cbde3e18018b6fcd50f22d3692a9347d7008a2a77c90fc7df289ab6567bdfaa0e9d9bdb42a7105df07deb323dad090d9f95a3d1d0be7e7cda91f68445828d032200d09becb8c481519400f8b9af59202993affaa719da1397f94d7609b0371f615477f47c63eada57681975eb11c8ee0d303689ac0fadf18e9567cc2c370dd258cef06841900bdfaaf2b8a8d33905ba14d2e3ed54bb520a4e8d9c1ae47f97c73b4782aa7dd2306e711c3ca4e47381afc69e4fae31b3a32db1e6e63b3d923323d7187c6fef95ede9008869943298274c11ea72984efeaa42112fed1cc8bea3e0a6c8f6c3c1d01493c5878de2defb3e4f476ad4f4749884eb4a2f48e35d8a99f700723e8dadb67b6d10f8050f29c4d3383c46cb2fe71642d27341f6d9524bf7ce9623a4ad233ea190090974c4eda4484481b86054a3234f0699316e56d41f22de8528fc050fa4713fa049708d4b0c913c54bca37a463be73450ecea57d16e1aca64077d8d33bbe488d05047c7996d2993c2ec5c695529e714c5e30520cc7bc481ff6e37d4ecf3b561c443e5b3521fec6ac4b703d3239e988eb71580d638a491e080cf8910b9638a0d173fb42e74a762273c8961c05613b3957e09f1dd0483ac048dc04b3750d8ed618e237dc93343751d63163043d896865a91ee4c92f49e7096f6f4ed8e4ef66ceb09553d2c81684171f85e157f945b6d6e6ffe812fbc30e79b9c6391bbae25a6f1b7b55f64277a602291adbb3dbf6a58233d493a22520d3ee59d097fd2e55140c4a3eabb955799ae729f5c4c1dd2add27e47b1793f2b32641e1b6b962634b4d4b8d8e48ebb9a50a9a4d1a925d9c36a7352de91425db12ba3aef9379e2492fc37bd4373bf548264b6f2cbef31f5574382c3b16b069d43781737315ec89f106586d892b01642ced6896417a33f07926b7090f2bbc82b36df220f6b9453f08be720ea23b70e3a8691c5ba742fc9302a9376220764b6bedeacc7c47bb47dde2440ee0afe987eddeecc71b935c34af746fec97bf6f5efaa004116cdeb547e71d3e476304c4a9620cbf9598569d9e24149a000ba79a66f21ac19307db87b099251c5cadf8baca265a23edfad39eb12c36e525357d89df09cf75b9e373b0d1caad2ad5458aba6de6cba7a594fd010a1cdd18f9452f490078354fb79553a95200eeee6419705d594573b6981ac89f05f0bbfb9a01ee821c7ec453348a9160f37d28f3fd8834ae3a16c218564dff4c467853ad5cfaaff3a4c129f7a324c15709c5534f8d38ccd262ff4428bbd98f091b26bc2606b1f090006ea62f0b50e8d14a94fab04ab10da63491338c71b76cb0e0e992b731b70d60d0fdfa8a15c29c2f1bcfceb0e1c46724e2c4f2b083f8ab0d81ed2070b55b3ee03b84b59b34e71286d9837ebfc608ebfdca842c9edacda85ef27a2106c722d46cd21cec55ddad954f2e99ca4d4ae18fa2dd5e3c90f406d061a3c5fa6045b48e87d89a6e94f436d6e8423629b5bb3e17b566624e06d78024e6c50f5415907e647f838d20b2b115044bd9ef0c33e7b9ea731bd88eb956c71b45014b46a5b55b0958704508822041e101aab0e3166ab57d44885ef67a556d956d14df73de86315cd8406f4795f6b01e874974cd67b9a7395bacfa4ab4eecd2a9628e6f0306761b3e46665a26a6aad80486b8e7209618440398bba13b0b9487b7b3ed6db91f5689a21dc0fb3fdb7615ae6933a19662315fe4966191435f932818f3e713406ed2ceb179eb6fc7434070e878772e388de3e76404468622e217651567742aa35b8c53498708df21ecfd176fd8dfb389305695e55508a7608a184f081d2314301af7b57cb0ebb38f91d3bc2184f860a0950f59e0675a77735a097931b87c696165d6aad66a006765f73b6456cddd24d9b88a5430de1904cc64b07a2927ffe891c4f8f444175369a21b1325ecbde36679343ae05c38eca78e68d03e0a22de1a6084bd83f4c4e47d4a05dd92e6727c20a491410fbcabf1c06ed3af3b118a4169dc6acd8e039c3d249f24a32668c9707c55449d7bf0d29ea1c4a85233c9639277a0c0b50165cb8500d584b4ab96ef867dac91a3a06d4489e180a3ba6ad915ef6e77660d309931a9010c76aca999b5491b0c14fa9ff4e16d2efb85db30019ae4398fa3adece86befa977d7f1a57abeb7202e4e6c67b6939a40a73d62c8267e720a27a5a12ca3f434b148bdb4da41c51a0e234d616904a9ff16bccf1b84944057ff6bf648fd5d99b3b42bc1cc31e6c9f06766c1f396877fadca5511d1c0537d6fed904be6d12151adde62a73d046d13c3a4bd3fdcf32119fa1c79e2881a3f291d8a6ad57d235ee5ded5f6d2d53ec32d847a75146538d95be8c5eac3072bfe3667be79ab788808f47efdeb7f23f4f9b07a05a7570975c0c02528ba0c9658777d7edbd7abf53303f52326c4c9c6634e7471c3dd4b188949ebbaeca62b5d0a7ce4e6c36510a7702573380241eca4a3df7062c5e911d9a3ea69d5544ff849550c27244c22822f39e55a3b94d4a55edfb7b98105d0a7e8b085a30c2ab40c5ea858672b704084d80e84768fd91b1d5211325920096d580485c304867810dce5cdce28d85b7df51b13e3f019c75afc3f03fc0b6f8f8c4edeac02a320d5964327e1995bf493c2f3153d1d8f5eceb6522841993331f81ee6e1cb262af80d697af646229027f4bfb4f559a40dcd8aad4c9eaa9e3789bd1f7a2e5e8bb85d5230ff4b07f73f97e6df4cbe3ca3d9c34ebc25275df9dc5a417603ffa86621f94a619bfa4c1bf8980cc9a04b4d8c132ac744cd3183155ae3f80f128c526bef9cb28e9507d0852c8fd2479bce0c4e2e6805f183be437df9048a55a61f631b1633a7d5f027b62d20da3e30b7a0dd40278e7579f31fb21f7da37a90bffe200b84fb003c27d82743493122c685a84e7c0aa4e1ae69b7f598dfe4d802e32545530d580f7cd6872c2621c797707a889eb66c0692efbd857e821744e46f77950ff4511e144c352d419de145fe33393bc618f14c98ad87e8a1a0507c22e12e5acbd1b8d0050c191b4fbf0c3e589ebf1384bf5bdb41cb1d54370b3d9f4b41211ef902a4248959c9d033eaf536f4b368778bf73e6c8814fd3031d0e7a6fda7d3e246bb50a418608ee67bdb68caeb8c5dd421f913005bf29fa06760df9d564ba6936d678730a3aacce870ac33e54ecd8d36ea384ac5928464d3cafd09a604e6add4a76837f353c8f9afbc7ae5b77d35cd2f27589a131f26f8e42066a8268196392d609e65504882104b96309e587b2586f301152eaac0c9028a279cb50d0f6dde0ff13937f64a0d0c7434d97ea24ae8a9534ab98b1099fc2179679d88e7b1a8491e73078cc1558a391391a6a76366679eb07b6930e5f3baab15e4fb1fe615a51beac06a241c01a40c304109ccc1bca7b93dde426091eb225f2a4da8df15abb0a244d78945d3eb1db1ea225fe4981c415c3402e91c6c7e8699cccd3e5985c3439214792f181403cb3cdfc98dc47a69f1bc1100d61a1f5a6a89cf7faf0c61e8d16e28fb4bf2216ad6e8e6c2f888d35c0b4000387a3511def0487786a836f004c8fcebc1a3959cf692cf6bca0995ef8651a5e978812b85b079f057a899d5262e813576964951e575ba21450019ffb5f021e287b974c92d9516b39461f11496678eb2d85ef1b2e13955d1d20f532b8754ab3cea5d1fa23ce8cecb50f22ddd08f8f1070d6f61ed32e58a23d7a78777c7186848275e9b95023b49aaec320e4921f42566bfbcff6531211b93d2592e2d41ac9a4e6967ca0e06ca6b5b01c820eea5c39fccff90ec9a700ec2aa8b516f707785263941fb438fd8c3a8a3306d39a3c90893d66c29530730b9b4b3db6aae8357b8fd7e582c6a7cb0c18bb4de801909e75b974b88e2b8a6202c7385d88f8bed65ffa7e5f3e7562633ec872b20f20097d3157d293903dc9ebe6ba7c17b617cdf2aa46c4087e300101eb1f4c2013bb2af93975a34eba5c92543e63e5f6c331163c1b38b56566fa94aadd7155a89a6dfb6550096b54fef41a56dd762fe244194d66264f5c49c10a9b745659d299bd019fa306d017fe3529413f605e27d87cbd8e55b3ec6202f6509740c59de6f443d50adf85d5195a8c6c4ebde844c95411cd167c4477a1968d4ebaa26fa23a5ba6f0e3b3caf8ba940a39ec15813d7e090db47c3388d6df217b81cfc346c2f3c1128d957211fcf44ac488705e563fcbc35d6149d0931a74452d65938fbeb64c997d7899598fdd3e83ec251867e54cdbbf5e74cdbc58e15d52aca424a92438b9ed3806fa19815a2ecbc7d2d2912519e724d7fd699b31572b22b231f481c4505748ebabb01a36d3681b9b7fb1413eaedd38c8e002c1884546b34c2bfe880ad6f0edf1b40724b9321b451a161cbb484bffc1d812eb313604196eeca2452845d20d985cd7785db2b60e08640a646aed73408f3a56509808113ebf8657e1ac36ff63a2621a0fe14dd743cb679b7eeeac67b246f5d3d059d1a3fd94f1d8ff281f438e0f7323067cf52f952785986cce47bccf6b50d9a9590e8eb76076046daaa26de27d2beb950bb29957a6178a54fe2bf9007e4999fa16f8a68f7a347de8a412f0de8ee441f36912f976601523b8a5a167e3623c604cb42334c3d4f09d15751e9b0ce8415d5f19e645b14661665b35854ee16ef43f1e626bf4ee3e7000d05edbbf4cedf87239fa147ebdedb7f2b4f02d1f8e1de3d3e13b9a0ec8eae2433abd59e9ecb53a697e888b0cfdc4eed68e014f433479d6b09a572f378159ba7c895b73bafdfee1e1802c8908a7b9aca68e3be2c1e9c3b01aca129486be7c48650c5f7a29a3644a655f8a1dab6ff90c18bc10001cf626d378462b2a034caac60c365c5002104ca4e14930634d08fc990c2fcc9e3f35c218c0993cbc41796632111cb3281a568c6cf08ca039268cfc99b743de08ca466f2aaa3148e824ac5e06becb1a8c02ed444354798fec11f11bd6733bd0e8dc44e05bfabe47d0c49003becfd62857dbc38a53101417bcddd8de1edcb296a28ca41aacbd80d7f0c5772cd83129a1f8791003fc99a1206f603fa2c6e06f268ea7729a4f4252dd0498b3eb435b7263b669a8fb868d3d7118d892b5100abb100a35a94b3a0815d769e86faa79137fb239f9307c80d0ca1bb14df3592c9d1dae655aefd5fc4b7cb173a42b69eb9138528c4a0ad56f6034f0f60ca259fbf9a64afe57527c445d26e7cf646ebc150a90c6f6f10af7eadaad0f5d454866c0e2b77e985fc3f85f90127f447cbbe59ede3465aeabc78299811e5bf2ca59dd60a68bfa3678a990d2bd9884c167d603447b637acd6c6cb8793a9b8f202bf003e9759d77824e59d31823be5b33e9b6f2e4c59b4b2466dbc8136277a37775ec15ac2b9e1de5173724640c791296643e4ee28c8755049509cff631b94371587b9ea72d2f559af8e7599df6a099c6eeda7420bf8472276d3666ec42ab65d68af8d90f0bf113cb99dbe55bd34150a5dcad8342257fd9bb172dea9889220c1d2b3ed100d448f5011b6824ab9f3336109f7c6359fcebf95db248e85836459"]}, @nested={0x14, 0xb, [@typed={0x8, 0x4e, @u32=0x1}, @typed={0x8, 0x91, @uid=r4}]}]}, 0x232c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002680)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x70, r6, 0x0, 0x70bd28, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa69}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ffc0000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4841) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000027c0)='westwood\x00', 0x9) setsockopt$inet_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000002800)="0e75c807d4e7c4d82619a9a7c2a668eb7a8d52458ff9f243f057feafe3e8ebacc6004cc22566f21caa8296122c1944807023a76417e112f54ce4ccfa29650424353b9237a90d05c982aab135a29e41ce53edf0447cf1b05ee7bd6c1b4a79274078f5846b135de2636a4fb8a4f9a6467a250f25545e93aa80bb26290e31a2a27bb9ff0f89396295c5ae14681305fa35611e9d48fa661326ddee7d264a9bf750b328be8b7f44d764611411", 0xaa) alarm(0xfffffffffffffac0) write$P9_RCLUNK(r2, &(0x7f00000028c0)={0x7, 0x79, 0x2}, 0x7) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000002900)={0x0, 0xe1, "1f2168c2ad336f3197036b3983b8e9281527ccd9d48f769d0c7602f17fc516cd27b4d22ff343180114a656acd5b7ee6868160c472f2e83b4ad7c73738dac610f9d522bd2bf13ff2dfd19b0061b1bd3777915525b63d0f3201c853c8cecfc6f7a76ac935788699f75661516f439af598a182969d81b87bea5655df01b48126d7b171e196a2b27b39f1b0b921072f83a16458a709a86942e8ecdf5a132bd416cf1ed443ec6018f8acc1bdef7453f35ca9f581a9dda6e1c702d7e0abd364aa6b824884c4bcbe82384aa1b944b98a362959eb4334d100b9baa8c6eefbb5b2a8a973b5a"}, &(0x7f0000002a00)=0xe9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000002a40)={0x5, 0x80000001, 0x9, 0x1ff, 0x1f, 0xf591, 0x9, 0xb50, r7}, &(0x7f0000002a80)=0x20) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000002b00)={0x0, 0x3, 0x3ff, &(0x7f0000002ac0)=0x80000001}) ioctl(r2, 0x9, &(0x7f0000002b40)="d841d2302de44a2e3b1fd1b4513dad888e830dba4b344d3b39387992bcb84a94f7702d4f021cf70617bece88987a018d4d20b924e7c11abcf835589b7255998c375424b5063da66012588e26f05da05e19cbb65f64c1195caf9319860fa2e60e820e9c93bb2c047a2fceb756780b63d805a983ef1d4d9e14adbf68b26a2672c5fa48101959ed6c581b6c2f91cb697acedf1484906dcbe9900b0042ebb0590b8175e6669733bf64d626e4e860c55eb36c6944fb42fa9656da7da6a98f14cf6c4bb3babe1fbdad6968301deabe42713a16ca") write$P9_RRENAMEAT(r2, &(0x7f0000002c40)={0x7, 0x4b, 0x2}, 0x7) clock_gettime(0x0, &(0x7f0000002cc0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000002c80)=[{0x1, 0x6da, 0x800}], 0x1, &(0x7f0000002d00)={r8, r9+30000000}) fchown(r1, r4, r5) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000002d40), 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000002d80)={0xff, @loopback=0x7f000001, 0x4e24, 0x1, 'rr\x00', 0x0, 0x6, 0x21}, 0x2c) write$P9_RCLUNK(r2, &(0x7f0000002dc0)={0x7, 0x79, 0x1}, 0x7) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000002e00)={0x9, 0xffffffffffffffff, 0x101}) getsockname$inet(r2, &(0x7f0000002e40)={0x0, 0x0, @multicast1}, &(0x7f0000002e80)=0x10) syz_open_dev$ndb(&(0x7f0000002ec0)='/dev/nbd#\x00', 0x0, 0x105042) 13:30:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x2827, @loopback={0x0, 0x8}}, 0x1c) 13:30:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) 13:30:08 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x500, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x2eb1a1f0, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2b, 0x7, 0xffffffff) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)) bind$inet(r1, &(0x7f0000000600)={0x2, 0x44e23, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) 13:30:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x4000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 13:30:08 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") syz_emit_ethernet(0x22, &(0x7f00000001c0)={@empty=[0x2b], @random="1b207f5c5eeb", [{[], {0x8100, 0x81, 0x80000001, 0x5}}], {@can={0xc, {{0x4, 0x3caeea60, 0x6, 0x100000000}, 0x5, 0x2, 0x0, 0x0, "e471a9d971401737"}}}}, &(0x7f0000000240)) 13:30:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xa, @loopback={0x0, 0x8}}, 0x1c) 13:30:09 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000368e90e2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000aebfebef00000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:30:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="600000ad3a70c1a3f16262e2b92858e4ecff96c5b788bf"], &(0x7f0000000340)=0x1) inotify_init() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaadb3, 0x0, &(0x7f0000000040), 0x3a0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x80000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x10d000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:09 executing program 3: mknod$loop(&(0x7f0000001440)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=""/15, 0xf) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x10001) sendfile(r0, r1, &(0x7f0000000140), 0xffffffff000) 13:30:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0x80, &(0x7f0000008000/0x1000)=nil) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 13:30:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x510e}, 0x0) 13:30:09 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045109, &(0x7f0000000100)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80000000, 0x4) 13:30:09 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1f4, @loopback={0x0, 0x8}}, 0x1c) 13:30:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x4000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:09 executing program 3: seccomp(0x1, 0x7, &(0x7f0000000100)={0x300, &(0x7f00000000c0)=[{0x6}]}) 13:30:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 13:30:09 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x8000, 0x0) sigaltstack(&(0x7f0000fff000/0x1000)=nil, 0x0) dup3(r1, r0, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpriority(0x3, r2, 0x200) 13:30:09 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1bf8, @loopback={0x0, 0x8}}, 0x1c) 13:30:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0xfffffffffffffffe}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r1, 0x0, 0x1300, 0x4}}, 0x20) 13:30:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 13:30:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x2, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r0, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(r0, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x21d) getegid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000040)=0x46b, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) syz_open_dev$ndb(&(0x7f0000000500)='/dev/nbd#\x00', 0x0, 0x2400) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000002c0), 0x4) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, {0xa, 0x4e20, 0x412, @mcast1={0xff, 0x1, [], 0x1}, 0x100}, 0x8, [0x6, 0x1, 0x40000000000000, 0x2, 0x1ff, 0xfffffffffffffffc, 0x9955, 0x40]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) 13:30:10 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f0f0000000000000288804a5e3ff052ddb023432ae48c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f0000000040)=@raw=[@generic={0x8, 0x2, 0xc3, 0x8000}], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xfffffdf6, &(0x7f0000000480)=""/187}, 0xffffffffffffffd6) 13:30:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x180) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x80040200, @loopback={0x0, 0x8}}, 0x1c) 13:30:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) 13:30:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000800)="211726abafb6741cddc6e463c36bead20f76c153070e1f232e97d3c140f28f6887e6c08b1c1e4797b6a948f833b08ef3bbf19dd308da1019a8e08f3f6d41afae0e42bbd16be5d4c4e3ebec8f9713bb", 0x4f) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000eb3b900adb9b4e0000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000007f000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:30:10 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1f, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x9) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x4, 0x3ca) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 13:30:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) uselib(&(0x7f0000000000)='./file0\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$FICLONE(r2, 0x40049409, r1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3d000000000000000000010000000000"]}) close(r2) close(r1) 13:30:10 executing program 2: r0 = getpid() mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000340)='./control\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x8001) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file1\x00') ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x0, 0x1f}) signalfd4(r2, &(0x7f0000000300)={0x715b}, 0x8, 0x80800) lseek(r2, 0x0, 0x1) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000002c0)=ANY=[]) close(r1) 13:30:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x20000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x70910000, @loopback={0x0, 0x8}}, 0x1c) 13:30:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 13:30:10 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256-aesni)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000000), 0x10) 13:30:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000006, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x486]}) 13:30:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 13:30:10 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x0, 0x400) semop(r1, &(0x7f0000000040)=[{0x2, 0x10000, 0x1000}, {0x7, 0x5, 0x1000}, {0x1, 0x50c, 0x800}, {0x3, 0xfff, 0x1000}, {0x4, 0x49e, 0x1000}], 0x5) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1}, 0x0) 13:30:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1fc2, @loopback={0x0, 0x8}}, 0x1c) 13:30:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) 13:30:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000000000}, 0x0) 13:30:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b805000000b90d0000000f01c10f01d12e0f01cfb826cb45ab0f23c80f21f8350800c0000f23f8b8010000000f01c1b9800000c00f3235002000000f30debd350000003e0f01c9b9140200000f32", 0x5c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000080)={0x77359400}, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 923.546911] netlink: 28 bytes leftover after parsing attributes in process `syz-executor7'. 13:30:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x2cc0, @loopback={0x0, 0x8}}, 0x1c) 13:30:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x7, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x400000) r2 = socket(0x2, 0x0, 0x400) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0xffffffff, 0x6, 0x61c, 0x1, 0x4, 0x10000, 0x0, {0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0xff}}, 0xfff, 0x6, 0x5, 0xbd1f, 0x3}}, &(0x7f00000000c0)=0xb0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x8000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x6}, 0x8) mmap(&(0x7f00001c1000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x1000001, 0xc013, r1, 0x0) [ 924.202191] gfs2: not a GFS2 filesystem [ 924.248181] gfs2: not a GFS2 filesystem 13:30:11 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x14, &(0x7f0000000000)={0x1}, 0x20) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x1, 0x7, 0x0, 0xf76, 0x0, 0x5, 0xd85045ea479120fa, 0x7, 0xffffffff00000000, 0x3ff, 0x5, 0x800, 0x200, 0x8, 0x2, 0x4, 0x101, 0x3, 0xfffffffffffff000, 0xffffffff7fffffff, 0xfffffffffffffff9, 0x59, 0x0, 0x8, 0x100000000, 0x8, 0x4, 0x2, 0xa89, 0x7ff, 0x6984, 0x4, 0x3, 0x80000001, 0x8, 0x10001, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0xfff, 0x7, 0x7, 0x800, 0x8001, 0xfffffffffffffffe}, r1, 0x4, r0, 0x2) 13:30:11 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x0, &(0x7f0000000000)=""/244, &(0x7f0000000240)=0xf4) 13:30:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="000000000000000079755c80e6c33b5365000000c714157e6f3c74416bf4abe919a206a7e08fa50a7375655699755060310bd5e4f96646534abc088428fe132aa417defa0438d1ecbd475aa3246de703c900225915f062ad4984564e2ae1dd7e8f0c05fe091c68") r1 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 13:30:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xff0f0000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) 13:30:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x8000000000102) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0002070001002d0004004e0e8000b9f50200"], &(0x7f0000000080)=0x16) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r4, 0x1}, 0x8) r5 = dup2(r3, r2) write$sndseq(r3, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000200)=[{0x401, 0x8, 0xfffffffffffffffe, 0x1000800003f5, @time={r6, r7+10000000}, {0x0, 0x6f2b}, {}, @connect={{0x4, 0x6}, {0x44, 0x5}}}], 0x2d) ioctl(r2, 0x8912, &(0x7f0000000280)="5f8f760070000000000000") getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f00000002c0)=""/57, &(0x7f0000000300)=0x39) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) r8 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) 13:30:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x510e000000000000}, 0x0) 13:30:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x8, @loopback={0x0, 0x8}}, 0x1c) 13:30:11 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x3, 0x2, 0x5, 0xfffffffffffffffc, 0xf51, 0x4}}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = memfd_create(&(0x7f0000000000)='lo\x00', 0x0) dup2(r1, r2) shutdown(r2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 13:30:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 13:30:11 executing program 7: r0 = socket$rds(0x15, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={"7465616d3000000000000000fa00", &(0x7f0000000300)=ANY=[@ANYBLOB="01"]}) close(r2) close(r1) 13:30:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket(0x200000000000011, 0x803, 0x0) signalfd4(r1, &(0x7f0000000080)={0x2}, 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0xc, r2, 0x1, 0x0, 0x6}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8), 0x71, 0x0) 13:30:11 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth0_to_bridge\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="4f523bb2095d0b723b84d060f44c000000000000000020002290fbf893361c03"]}) 13:30:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc7b7, @loopback={0x0, 0x8}}, 0x1c) 13:30:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0) 13:30:12 executing program 0: socketpair$inet(0x2, 0x80000, 0x200, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x151, 0x9}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x4, 0x6, 0x8208, 0x2000000000000000, 0x2, 0x346, 0x7, 0x5, r1}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x2, &(0x7f0000000140)=0x400000f3, 0x8) 13:30:12 executing program 3: r0 = semget$private(0x0, 0x7, 0x200) semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f0000000000)=""/113) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000040000000020000000000e242101c000000000000000000000000009500000000000008"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 13:30:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 13:30:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x28270000, @loopback={0x0, 0x8}}, 0x1c) 13:30:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x1000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:12 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000800)='/dev/dsp#\x00', 0x9, 0x503040) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r1, 0x401}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000840)=@sack_info={0x0, 0x6, 0x5f}, &(0x7f0000000880)=0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000008c0)={r2, 0x9}, 0x8) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000200)={0x0, 0x0}) r4 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x2b5, 0x42) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0xfffffffffffff358, 0x20, 0x3, 0x1f, 0x0, 0x6, 0x4, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x8, 0x100000000, 0x3137, 0xfffffffffffffffd, 0xe94, 0xffff, 0x100000001, 0x3, 0x8, 0x8, 0x0, 0x5, 0x3, 0x4, 0xff, 0x10001, 0x695, 0x34a, 0x8, 0x3, 0xfffffffffffffffa, 0x1, 0x787, 0x6, 0x6, 0x81, 0x0, 0xfffffffffffffffc, 0x4, @perf_bp={&(0x7f00000000c0), 0xb}, 0x4000, 0x9, 0x3ff, 0x3, 0x1, 0x3, 0x9}, r3, 0x7, r4, 0x2) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x400000085, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000), 0x0) 13:30:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) recvfrom(r0, &(0x7f0000000000), 0x0, 0x2001, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x20a0100}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl(r0, 0x8912, &(0x7f0000000280)) msgrcv(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xc8, 0x0, 0x1000) 13:30:12 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000700), 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22}, {0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x40, {0x2, 0x4e21, @multicast1=0xe0000001}, 'bond_slave_1\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x95e9, 0x8bc0, 0x5, 0x20, 0x4}) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000680)=""/93, 0x5d}, 0x0) 13:30:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 13:30:12 executing program 3: r0 = socket$inet6(0xa, 0x80a, 0x8000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x7, 0x10000}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) listen(r0, 0x0) 13:30:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf81b0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) accept4(r0, &(0x7f0000000180)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x80000) clock_gettime(0x0, &(0x7f0000001c80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000500)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000680)=""/100, 0x64}], 0x1, 0x0, 0x0, 0x2a7b6860}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000700)=""/150, 0x96}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001800)=""/94, 0x5e}, {&(0x7f0000001880)=""/218, 0xda}, {&(0x7f0000001980)=""/39, 0x27}, {&(0x7f00000019c0)}], 0x4, 0x0, 0x0, 0x4}, 0x4}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001a40)=""/41, 0x29}], 0x1, &(0x7f0000001ac0)=""/174, 0xae, 0x3}, 0x3}], 0x4, 0x1, &(0x7f0000001cc0)={r1, r2+30000000}) sendto$inet(r0, &(0x7f0000000240)="ff", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x2, 0x0) 13:30:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7fffffff, &(0x7f0000000080)=0x0) io_destroy(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x2) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000bc0)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x3, 0x3, 0x8, {0x0, 0xfffffffffffffffe}}, {0x0, 0x0, 0x7, 0x0, '&system'}}]}, 0xb0) 13:30:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1300, @loopback={0x0, 0x8}}, 0x1c) 13:30:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 13:30:13 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) r1 = socket$inet(0x2, 0x10000008080f, 0x8000000) setsockopt$inet_int(r1, 0x0, 0xd3, &(0x7f0000000000), 0x0) io_setup(0x7, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x5, 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)) 13:30:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x200000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x353) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) 13:30:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x47e9, @loopback={0x0, 0x8}}, 0x1c) 13:30:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512-generic)\x00'}, 0x58) io_setup(0x100000001, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000100)="6366931c47f20b4c78283129011e80700f5695579d68e17cbf10dde4e1292d621e906f935600c6bf698274fd0d93d0abcbfe03788b82bfa6ffde7236a07a04b09ef2c361378e828e3ca5ed1811af8013d5eb6fdfc86b78727dd84769dadabe46a9172a4c11b2d2a77476f1f492d6962f00dd3cc2dccb849d0fc8ac5f8accfc5dc12337008b", 0x85, 0x1, 0x0, 0x1, r0}]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b22cb8e67efbbdf367ab0b350fab43761854e97d348b64e2db6edd52450c30b96a08000000f998824c5a570b49b8a4667d9fd6fb2aebd4072f9e58eb4e763c7c406e20452027a9db02146c194b7b59c26aaed7ccf2d215b34812b8d669383114f2fe45c9ccbe345487be311eb0108a911bbe2dbc7208f41897d673be3862151a02", 0x81) 13:30:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 13:30:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x60c9000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:13 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/203) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xb17) fallocate(r0, 0x0, 0x7, 0x3f) 13:30:13 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80040, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xc) 13:30:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[]) syz_emit_ethernet(0x178, &(0x7f0000000500)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}, @random="8884a6885fe1", [], {@ipv4={0x800, {{0x11, 0x4, 0x7fff, 0x7, 0x16a, 0x67, 0x7, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0x1, {[@rr={0x7, 0x1f, 0x0, [@rand_addr=0x3d, @multicast2=0xe0000002, @multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2=0xe0000002, @loopback=0x7f000001]}, @ssrr={0x89, 0xf, 0x5, [@broadcast=0xffffffff, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}]}]}}, @udp={0x4e21, 0x4e23, 0x126, 0x0, [@guehdr={0x1, 0x781d2bac, 0x101, 0x8, 0x100}, @guehdr={0x2, 0x400, 0xde0d, 0x1000, 0x100, [0x80]}, @guehdr={0x1, 0x401, 0x6, 0x4, 0x100}, @guehdr={0x2, 0x4, 0x4, 0x3, 0x100, [0x80]}, @guehdr={0x1, 0x3fa, 0x8001, 0x0, 0x100}, @guehdr={0x2, 0x1, 0x5, 0x1, 0x100, [0x80]}, @guehdr={0x1, 0x2, 0x3, 0x2, 0x100}, @guehdr={0x2, 0x4, 0x0, 0x2, 0x100, [0x80]}, @guehdr={0x1, 0x7, 0x3, 0x1, 0x100}], "4a1146f9ab84d4ae84799724d9a0448c88e584c5fa13f3d69350f5b6d87d6240e353802605c9fff8ac98c0b35818926301b8629632074599c0104af42c9071d29c89ec1c6e8d93c535438e2314cc493b92118cecd4344b46fb512c9ff2363633c6082c1dcac47c6d9e56a05b0fcb3ac686c8eb6744e0094bfd0abb369d2c855cbc17cbadb50ef15b146ccba7ba4055b25d46ce16fe626633d102742f107e1ec8f8a381e6e8ae08211461fa6df088b66b6e8c2ea4968a87a2ea52ec743669483727cf5a0f8486e7cd08f82ed105328a53c6ae7a79d1c7f114e91a19e1fe459870dca38b69269d832e11ec"}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x4d2, 0x3f4, 0x351, 0x694]}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000180)={0x18}, 0x18) r0 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff}}, 0x20) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000003340)={0x9, 0x6f}, 0x9) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000000c0), 0x4) 13:30:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300000000000000}, 0x0) 13:30:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0x9}, 0x269) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f0000000040), 0x2}, 0x20) 13:30:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0xff0f]}}) close(r3) dup3(r1, r2, 0x0) 13:30:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x2c) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000080)=0x1c, 0x80800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/60}, 0x18) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/19) 13:30:13 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r0 = getpid() perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x5, 0x3, 0x45, 0xbc2, 0x0, 0x4, 0x0, 0x1, 0x40, 0x1, 0x8000, 0x99, 0x8001, 0x1, 0x6, 0x401, 0x80, 0x8000, 0x1, 0x8a4, 0x7, 0x7ff, 0x6, 0x21e80000000, 0x6, 0x3, 0x9, 0x3, 0x3, 0x1f, 0x2, 0x3ff, 0x8, 0x101, 0x101, 0x5, 0x0, 0x9, 0x0, @perf_config_ext={0x6}, 0x20010, 0x100000001, 0x2a, 0x7, 0x7fffffff, 0x1f, 0x3}, r0, 0x1, 0xffffffffffffffff, 0x0) 13:30:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x6000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 13:30:14 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x400002, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000600)=""/251, &(0x7f0000000700)=0xfb) timer_create(0x6, &(0x7f0000000740)={0x0, 0xa, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000780)=0x0) timer_getoverrun(r1) syz_read_part_table(0x4, 0x7, &(0x7f0000000500)=[{&(0x7f0000000000)="a29114b64f6389ed313754b895fc7e8054e2fcff001b5b9461b9d06eef5e1ad65706ad030934605af71e9dd5a86d3a3fe35a6ed2b0b8701be1b97eab5c2379674f74d9293041108483ead1e2c5075110d4e676577b7870096332a16423935bb19c664f4648931e2bad5250ad36ceb95e557e4734184c9da835b65a83a4fbd288bdec861911d12e6d82e7d4113bc04fbde8b8301df760735b3e563dea9f18fa5930faa4994d4dcca6d1a6891e294108acd3a06c19484de9c5995210a82950a20230e8dfc81bf470e618bc5feeddae727c9f149426910f3d311fc4977a85a81117f71499f2", 0xe4, 0x7}, {&(0x7f0000000100)="4e07f01427eb88741ced1536190afa0b5df12eccac19966037b0b0e22db14179e33b1e03795b409bb8dba09a313077182d829b63f61e1563256c38df945da3b16b48f467ff1e86e78f86e68e6b3cd66c9ba58caceade8675c347e72492be74618b82479ea19e9502fa3c8fc45d58778e36490af730522f555785ad11d00d7244ae607401783ddac9c96ed7b726752b7412b92fabcbc6f1252913321cc5292af55d596116317202c29d240bd53366fb047510b629d9616d68cb0608663f3bc6b6c8bac2e781d434ee414eb07799de59a34dfe951a359a836acf6cf7850fc6901df02070d6", 0xe4, 0x7c}, {&(0x7f0000000240)="f4fb940ae81fe5ee394e40bf861fd9d188a2f94bdf7918f83403fbb3675906bedc5a49fed357647517436a5b7bb1b94907697baf3d0420e2b2bd78c318450c80dfa838b18eb5a84f5d6bfaeffa4fec44c8c6", 0x52, 0x10000}, {&(0x7f00000002c0)="b2565c817f7765eeef580d904cdf37399785d74a6b9df69c80993562694a358e81e231d137da9470459fce1bcd3e834330aab94aa018b18f90cc47cc46897785352b5457a109a631c742b29dbf8ed7cf4387cdd2a237121d94c849", 0x5b, 0x2}, {&(0x7f0000000340)="60f8d9cca337a6e2a9a0ba7cda7e80e7dbebcd661c5ab650cde73b180839ad47e3", 0x21, 0x400}, {&(0x7f0000000380)="1aec4e1d981e3b83358ae1cfa24731a95084cc4e788b19cb9ee8b9952d457deaa1941b435e6d195646587219c077e2681c24df35ab210670dc7d7f4c2cc6f836367f92125264fea04cb4a7d365ae00d31dfd986c22ebe3d775c4fea20ea0bc8c576754c2e5e2a657", 0x68, 0x3}, {&(0x7f0000000400)="65979f6b631bcbfc808f168c5f2a75e78a8591033afe0a696f4c48fc879a7153d23d60fda474cbbfaeb473ed8184a8f0a8de8b642f1664cbefb992e1b4658bd5e929dbec1f479ac3dfe88559e4d14929a7bd4ee22f3da78ce85a978d3635664ae3328ba705bfac5db7d20eb3600e74e88a2f6ed66711497125e5a7dffe5e62ac076e2be8581d791382e2187b92c474d1458616f232485a68029e696d594f86e2e71dc88fedc75b72e804f10d410844cebc4463802f98156ab042ded1047ebe583ada4402ab4cb6612fb67b512da57fbc7c5879d34db896198ad176e5e3bf88f37cc1f1f86613e786533feffd2c41b1be514ed1b218ce07", 0xf7, 0x6}]) syz_read_part_table(0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 13:30:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x40001) 13:30:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x12000, 0x0) ioctl$TIOCCBRK(r1, 0x5428) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'bond_slave_1\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) close(r2) 13:30:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0xfffffff7) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000040)=0x3) 13:30:14 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x987, @loopback={0x0, 0x8}}, 0x1c) 13:30:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 13:30:14 executing program 2: clock_settime(0x400007, &(0x7f0000000040)) [ 927.332141] Unknown ioctl 8835 13:30:14 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x200000000000000) ioctl(r0, 0xfffffffffffffff8, &(0x7f0000000040)="3758d0ed80efdfbc6dddce") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 13:30:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0xda, 0x8}) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000040)) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') setns(r1, 0x0) 13:30:14 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x8a2f, @loopback={0x0, 0x8}}, 0x1c) 13:30:14 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x16001, 0x110) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000100)={0x0, 0x10000}, &(0x7f00000001c0)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x8, 0x2) 13:30:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x510e0000}, 0x0) 13:30:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x200, 0x40000) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x7fffffff, 0x6}, {0x100}, {0x9, 0x41cfdd88}, {0x80, 0x75}, {0x10001}, {0xcf6, 0x1}, {0x40, 0x1ff}, {0xacf1, 0x823f}]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x50, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000140)=0xffffffffffffff7c) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:30:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x2]}}) close(r3) dup3(r1, r2, 0x0) [ 927.443369] Unknown ioctl 8835 13:30:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 13:30:15 executing program 0: keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 13:30:15 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000140), 0x1}, 0x20) sched_yield() 13:30:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x200000000, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x4a48b125e13656f}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'eql\x00', 0x100000001}) 13:30:15 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount$bpf(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='bpf\x00', 0x10000, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x5}, 0x2c}, {@mode={'mode', 0x3d, 0x7fff}, 0x2c}, {@mode={'mode', 0x3d, 0x81}, 0x2c}, {@mode={'mode', 0x3d, 0x200000080}, 0x2c}, {@mode={'mode', 0x3d, 0x3}, 0x2c}, {@mode={'mode', 0x3d}, 0x2c}, {@mode={'mode', 0x3d, 0x9}, 0x2c}]}) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000000040)='aufs\x00', 0x5010, &(0x7f00000e7000)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr, @empty, 0x0}, &(0x7f0000000340)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'tunl0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000000a080)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f000000a180)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000000a280)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f000000a380)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f000000a440)={@mcast2, 0x0}, &(0x7f000000a480)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f000000a580)={@remote, @empty, 0x0}, &(0x7f000000a5c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f000000a600)={@remote, 0x0}, &(0x7f000000a640)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f000000a680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f000000a6c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000af00)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f000000b000)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f000000b080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f000000b0c0)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f00000101c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x89, 0x8b09a4ccfc63a2e6) getsockname$packet(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000010280)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000010300)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000010400)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000010580)={0x0, 0x0, 0x0}, &(0x7f00000105c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000010600)={@mcast1, 0x0}, &(0x7f0000010640)=0x14) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000010d80)={&(0x7f0000010900)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000010c00)=[{&(0x7f0000010980)=""/92, 0x5c}, {&(0x7f0000010a00)}, {&(0x7f0000010a40)=""/108, 0x6c}, {&(0x7f0000010ac0)=""/170, 0xaa}, {&(0x7f0000010b80)=""/114, 0x72}], 0x5, &(0x7f0000010c80)=""/251, 0xfb, 0x4}, 0x2002) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000117c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000118c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000012200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f00000121c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="b4080000", @ANYRES16=r2, @ANYBLOB="000025bd7000fedbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="7c00020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100008008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r5, @ANYBLOB="a001020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000004038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400620b00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400aa00000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="400001002400015f746f5f706f72745f6d61000800030003006fb72d7821b6364956e6b3b999e9ba3e5c738fae206ae39cc44aed7f904f5dc14489b224b870a1810c782bc2c4b4ea46d74bad96c267b0ed9e6207aac99e4c8d740000", @ANYRES32=r9, @ANYBLOB="080007000000000008000100", @ANYRES32=r10, @ANYBLOB="8400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000100008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="6c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000800000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff0f00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000008000100", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400070000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000300000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="000202003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="08000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040005000180690effff0200030206000000000003031f00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004004453000008000600", @ANYRES32=r22, @ANYBLOB="7c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000004c0004000800010101040000ffffff09070000000f0affff000000000100f8ff400000000000010505000000ffff06f0ce050000060001fb0500000008000706a158000081000001b81c000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040006000000"], 0x8b4}, 0x1}, 0x4000001) 13:30:15 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xad68, @loopback={0x0, 0x8}}, 0x1c) 13:30:15 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001040)='/dev/mixer\x00', 0x200800, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xefd3, 0x7fffffff}}, 0x30) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x17, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000001080), &(0x7f00000041c0)=0x4) 13:30:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:15 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4000000005, 0x8002) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0x9, 0x2}, 0x14) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x7, 0x12) 13:30:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/4096) semget(0x2, 0x3, 0x400) write$P9_RXATTRCREATE(r1, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) semget(0x3, 0x0, 0x42) r2 = semget(0x2, 0x2, 0x8) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) semop(r2, &(0x7f0000000140), 0x2aaaaaaaaaaaacd0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x0, r3, 0x3e9) 13:30:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000030c0)={'team0\x00', 0x0}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1cfb) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003c00)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000003bc0)={&(0x7f00000000c0)={0x58, r1, 0x7854e3c3fcb45e07, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x41, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0x58}, 0x1}, 0x0) 13:30:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x598, @loopback={0x0, 0x8}}, 0x1c) 13:30:16 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r0 = socket$inet(0x2, 0xf, 0x4) listen(r0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d}, 0x2c}) accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) shutdown(0xffffffffffffffff, 0x0) 13:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:16 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x400000000004e23}, 0x3) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f00000028c0)=@generic, 0xfffffef4, &(0x7f0000002a00)=[{&(0x7f0000002940)=""/164, 0xa4}], 0x1, &(0x7f0000000100)=""/49, 0x31}, 0x6}, {{&(0x7f0000002a80)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000042c0), 0x0, &(0x7f0000004340)=""/149, 0x95}}], 0x2, 0x40, &(0x7f0000004200)={0x0, 0x989680}) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x80280) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) rt_sigqueueinfo(r2, 0x8, &(0x7f0000000080)={0xb, 0x6, 0x24e, 0x100000000}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200)={0x9}, 0x155) 13:30:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x200000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8, 0x9}}, 0x30) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0xf48d, @empty, 0xffffffffffff7fff}, {0xa, 0x4e20, 0x3, @local={0xfe, 0x80, [], 0xaa}}, 0x3, [0xffffffffffff8001, 0x7fffffff, 0x5, 0x4, 0x3, 0x8, 0x0, 0x7ff]}, 0x5c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x8500) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 13:30:16 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) fcntl$setsig(r0, 0xa, 0x800000401e) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat(r0, &(0x7f0000000100)='./bus\x00', 0x0, 0x122) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 13:30:16 executing program 2: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002600)={&(0x7f0000000040)=@sco, 0x80, &(0x7f0000002480)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/114, 0x72}, {&(0x7f00000012c0)=""/144, 0x90}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/184, 0xb8}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000002440)=""/23, 0x17}], 0x9, &(0x7f0000002540)=""/173, 0xad, 0xdf1}, 0x40000000) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0x44, 0x3}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000180)) 13:30:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf620, @loopback={0x0, 0x8}}, 0x1c) 13:30:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x9) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000300)=""/4096}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x391, 0x0, &(0x7f0000000140), 0x293) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x488]}) [ 928.595626] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. 13:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:16 executing program 7: clone(0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000040)) clone(0x0, &(0x7f0000000400), &(0x7f0000000380), &(0x7f0000000040), &(0x7f0000000240)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) 13:30:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) write$P9_RLERRORu(r2, &(0x7f0000000080)={0x21, 0x7, 0x0, {{0x14, 'cpuset)&,securityem0'}}}, 0x21) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000000)=0x4d4) userfaultfd(0x800) dup2(r1, r3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000280)=[{0x3, 0xffffffffffffffe1, 0x2, 0x1, @time={r4, r5+10000000}, {0x0, 0x1}, {0x8, 0x5}, @control={0x523, 0x40, 0x7f}}, {0x1000000000000000, 0x1fc3, 0x3ff, 0x3, @time={0x77359400}, {0x1000, 0x3}, {0x1, 0x8}, @quote={{0x101, 0x1f}, 0x10000, &(0x7f0000000100)={0x81, 0x8, 0x9, 0x1f, @time={0x77359400}, {0x4, 0xfffffffffffffff9}, {0x6b7, 0x1}, @note={0x100, 0x2, 0x40, 0x3, 0x5}}}}, {0x3, 0x100000001, 0x9, 0x8, @tick=0x9, {0x5, 0x2}, {0x2, 0x2}, @addr={0x5, 0x8c86}}, {0x5, 0x2, 0x4, 0x2, @time={r6, r7+10000000}, {0x4}, {0x7f, 0x709}, @ext={0x88, &(0x7f00000001c0)="d02c7023ebd1d0ad897b9e26fcacd25ecd89d2e6595e34aeeda68504320d9bcff322c8ee308b6ce055979ad72042acfaf20734e148111265a6bccee03848d981d382938b94196322e1076f2b248a070fb2c3af04c98bc2a6b8f420fb51e02a5bfd504cc25374b46b679f62f0ae066a1cb5f84206e760711274264bbfddcabf1148a3f2f77a46b1a5"}}, {0x2, 0x3, 0xfffffffffffffff9, 0x4, @tick=0x100, {0x10000, 0x1}, {0x5, 0x2}, @note={0x714fecdf, 0xfffffffffffffffe, 0x3, 0x1, 0x1}}], 0xf0) 13:30:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7630000, @loopback={0x0, 0x8}}, 0x1c) 13:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc805, @loopback={0x0, 0x8}}, 0x1c) 13:30:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x8000000000000000) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000001c0)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)="73797a5f74756e0000008000", 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000200), 0x8000fffffffe) 13:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:16 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$EVIOCGKEYCODE(r0, 0x80084502, &(0x7f0000000640)=""/202) 13:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4d8, @loopback={0x0, 0x8}}, 0x1c) 13:30:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x100000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:17 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) fcntl$setsig(r0, 0xa, 0x800000401e) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat(r0, &(0x7f0000000100)='./bus\x00', 0x0, 0x122) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 13:30:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) r1 = dup3(r0, r0, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x498, 0x0, 0x140, 0x270, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002, 0x2, 0xffffffff}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4ca, 0x8, 0x6}}}, {{@arp={@multicast1=0xe0000001, @multicast2=0xe0000002, 0xffffffff, 0xffffffff, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x800, 0x3f, 0x8, 0x400, 0xf3, 0x11, 'sit0\x00', 'veth0\x00', {}, {0xff}, 0x0, 0x41}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @empty, 0x0, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e8) 13:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:17 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000240)=""/64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x200000, 0x0) r3 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x1ff, 0x80080) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000380)={0x5, 0x2, 0x43, &(0x7f0000000300)="ce879611c3035119e18e7ab349ce449506215bf938bd6f9210540f797c8c48f07902f7919643a814900c706c7bc49589ef92385436661ecdccef09b4a8df83edead112"}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000000c0)={0x1, 0x10, 0x7fff}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x4000) r5 = fcntl$getown(r4, 0x9) timer_create(0x1, &(0x7f0000000100)={0x0, 0xf, 0x0, @tid=r5}, &(0x7f0000000140)) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x206, 0x1000, 0xfffffffffffff28a, 0xffffffffffffffff, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getrlimit(0xf, &(0x7f0000000200)) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r2, 0x400000000) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCLINUX5(r6, 0x5437, &(0x7f0000000040)={0x5}) 13:30:17 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x47360000, @loopback={0x0, 0x8}}, 0x1c) 13:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) [ 929.698726] syz-executor0 (21484) used greatest stack depth: 12872 bytes left 13:30:17 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) fcntl$setsig(r0, 0xa, 0x800000401e) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat(r0, &(0x7f0000000100)='./bus\x00', 0x0, 0x122) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 13:30:17 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x100000, @loopback={0x0, 0x8}}, 0x1c) 13:30:17 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3a) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x5c) 13:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:17 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000005c0)=0x10000, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000500)="c2b2a93ff2500c19f47150d57cff7728dc5f628d14a7029facbcf253c8b245bb12e72554fcfbd7505e18edd3f81929c36dda6935c9b9d71a6962faf556aa231aed604d042a88882cf578fb4e20bf0a130051a0ae7a319d681ae817b7e818cdabf7e7830bee819f9ec027dda99aafd445ef40b04a545866068cdd6441a8ba743f5860cb06281107e72f07945597f62605721137e63e17b568f58a", 0x9a, 0x40840, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000004c0)={0x7e, @empty, 0x4e23, 0x3, 'lblcr\x00', 0x22, 0x9, 0x67}, 0x2c) sendto$inet(r0, &(0x7f0000000000)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 13:30:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x200000) fallocate(r1, 0x0, 0x8000, 0x10000) fallocate(r1, 0x0, 0x0, 0x8000006) 13:30:17 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4f1a0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x40000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") uname(&(0x7f0000000040)=""/30) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x100000000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x1c}, 0x10000}}}, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) timerfd_gettime(r4, &(0x7f0000000100)) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000240)={r0}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x400c330d, &(0x7f0000000080)) [ 930.641058] syz-executor0 (21563) used greatest stack depth: 12560 bytes left [ 930.678567] syz-executor2 (21568) used greatest stack depth: 11224 bytes left 13:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:18 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x400000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:18 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0xfffffffffffffd87, 0x4, 0x8003, 0xfffffffffffffff4, 0x6, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x8002000000000008, 0x101, 0x20, 0x4, 0xffffffffffffffff, 0xff}, 0xfffffffffffffc86) 13:30:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0xcdf7, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ab25965bad2a443ce3017b3d890ede9077c275b1333a259ca80a9915670cf0249b3156dce12df11cf4ec68bc33ac4215d53a757fe8838920b3b3abc7fb668ca763a454d8a5c54454b30a35ea17eb8928919ff5e535ac6ad69b505917f21eb829bb9dd7cdf3b956798eb18a27a0f2b7a353d699ce96f7b0fe60beb8031a3da4ee8cd5b7dc9db7ce8479555a229188d388c72f05504268e2712da326dd991d6e37772a2cc1fd3c7e4f768b17f1340116b52697e2961d7ebd9125ae5b6563b314399d3339aed7f0abd29f329c16c5", 0xcd, 0x5}, {&(0x7f0000000180)="6375defbe7b53e3e9e3c76f734ad4cb843be58613bfe02595d7ea2b1987407a00d2e1f6a36ef5dcb077dfc", 0x2b, 0x8}], 0x20, &(0x7f0000000200)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x6}, 0x2c}, {@datasum='datasum', 0x2c}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3}, 0x2c}, {@nossd='nossd', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@flushoncommit='flushoncommit', 0x2c}]}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r0) 13:30:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000080)=""/142, 0x8e) ioctl$SG_GET_NUM_WAITING(r1, 0x227c, &(0x7f0000000200)) 13:30:18 executing program 6: r0 = socket$inet6(0xa, 0xffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070d8d9ff1c7d4c9cee57062cba660b37eab116e3838c2680530af7dfb71275486df4e5914f969768e8bc229558986a424d1e33eb65cbf892") r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x9, 0x40000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x9, 0xfffffffffffffff8, 0x4, 0x8000, 0x80000000}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000002c0)={r2, 0x800}, 0x8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xa100, 0x0) write$FUSE_OPEN(r1, &(0x7f00000003c0)={0x20, 0x0, 0x4}, 0x20) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000300)={0x1, 0x100000000, 0x7, 0x1}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x2, r3}) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000480)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000340)={0x0, 0x87dbfb1ff8e7b263, 0x200, 0x17f, r2}, &(0x7f0000000380)=0x10) socket$bt_rfcomm(0x1f, 0x3, 0x3) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:18 executing program 0: lseek(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 13:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:18 executing program 3: r0 = userfaultfd(0x400000807fd) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) close(r0) 13:30:18 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200c00, 0x0) ioctl(r1, 0x3, &(0x7f0000000080)="104446f62208ce52b2864be08f90c733ba1a0b94387ded3813f6f2030000000e9c45f09a0da49f54321f743c6eb1bfe1d0c8fb3f8a3a1c30e428141032bbc0cd19a4588563ee132ac04de3f250b41be1057da55b7ce7d5d5f5b488d30b23cf59b5534512ee6f206f8ee0a259dd5c6cffe1dca16a65d85cdd122b61c45b6a66c9061dea24") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002) 13:30:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101002) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0xfffffffffffffff9, 0x200, 0x309, 0x20000000000, r2}, 0x10) unshare(0x2000400) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000280)={0x1d}, 0x10) write$P9_RSTAT(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="760000007d010000006f0006000010000050000000000500000000000000000080000100000009000000e8540000000000000b002f6465762f7663736123000b002f6465762f7663736123000b006d696d655f747970655e271b00096d696d655f74797065656d316c6f292c6367726f7570656d312d"], 0x76) setsockopt(r3, 0x65, 0x1, &(0x7f0000000040), 0x0) 13:30:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000780)="fa5cbd0e1251c83d6d345fb323cd83c5ca144782c83de97ae0a7ce3026d743b65c43b0f5e10e66a331177f5fb44a63e3d00a9b891986a9e2fbc9e1a8ac544133679aa77c9fbccc485a2e474be347f1169490b6d0a01a467ba62aeabe5274546c1058049246614bc46c0f0403f2bed54921fd430f05c17b5726dab960ca50357724f2aa63b739aaf77689fc") faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x150, 0x400) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x177505ee, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80200000000002, &(0x7f0000000540)=0x82, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f000050c000/0x2000)=nil, &(0x7f0000000080)) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x1, 0x2, 0x3, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={0x101, {0x2, 0x4e1e, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x400}}, 0x100, 0xffffffffffffffc, 0xfffffffffffffffd, 0xffffffffffff0000, 0xb4f, &(0x7f0000000140)="766574683100393e0100", 0x7fffffff, 0x9}) sendto$inet(r3, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getegid() prctl$getname(0x10, &(0x7f0000000480)=""/55) setgroups(0x0, &(0x7f00000000c0)) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000400)=""/89, &(0x7f0000000180)=0x59) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000580)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000600)=""/237, 0xed, 0x2, &(0x7f0000000700)={0x2, 0x4e24}, 0x10) recvfrom$inet(r3, &(0x7f0000000c40)=""/191, 0xbf, 0x40000002, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$binfmt_elf64(r0, &(0x7f0000000d00)=ANY=[@ANYRES32=r4, @ANYRES16=r0, @ANYRESOCT, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r4], @ANYBLOB="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", @ANYRESDEC=r0], 0x1039) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r5 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) name_to_handle_at(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="08016db48428a57bd9cf38f08a1bd0a4062c9b"], &(0x7f00000004c0), 0x0) shmctl$SHM_LOCK(r5, 0xb) 13:30:18 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3f52, @loopback={0x0, 0x8}}, 0x1c) 13:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0xff0f0000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:18 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='/dev/dsp#\x00'}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x3, 0x0, 0xce, 0x3, 0x3f}}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r3) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) io_submit(r4, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000140), 0xf000000}]) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0x92fd, 0x20, 0x2730}) fcntl$getflags(r1, 0x1) 13:30:18 executing program 0: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x830) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x58d2b83c, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x6de1196, 0x8005, 0x0, 0x1, 0x6, 0x9, 0x514, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000), 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x80000000}, 0xc) 13:30:18 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xffa, @loopback={0x0, 0x8}}, 0x1c) 13:30:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x7, 0x3, 0x200, 0x7fffffff, 0x1}) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4) sendto$inet(r0, &(0x7f00000000c0)="9f", 0x1, 0xc870a3c305c5634f, &(0x7f0000257ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000240)=',', 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/176, 0xffffffffffffffca, 0x40012021, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x709000) 13:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = semget$private(0x0, 0x3, 0x1) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f0000000040)=""/34) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x6}, [@typed={0xc, 0xa, @u64}]}, 0x20}, 0x1}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 13:30:19 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000001400)='/dev/full\x00', 0x200, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_buf(r0, 0x29, 0xf6, &(0x7f00000002c0)="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", 0x1000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xfffb, 0x19}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x90002, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000028c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000029c0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000200)='f2fs\x00', &(0x7f0000000240)='./file0\x00', 0xffff, 0xa, &(0x7f00000027c0)=[{&(0x7f00000013c0)="72264dd39627b18c3486df67d8096c57d463313a3bf161b4dcd7460dd6f3d3a0cc0f5f91e28607fdc8b89bf0b84b1706ec97e4904d", 0x35, 0x5f}, {&(0x7f0000001400), 0x0, 0x6c3}, {&(0x7f0000001440)="7d7a899759d320bd9269eee88b550891aeb7339b6cb9c61c100b00ebfaa09c5250b7e8640d0f66cf809585b521fc95effa489b2faf3caaa9b86e1c77d9f53167ff1a6ca5a09b7627ba78af69c3e160790da38d6e9e345632fb1384721ecb76903e92c00ded0253faf17c4effc1e17401b7de07529677a2ee136f768f8f9d5060853293709e33fe04906bcd619ea179cba054e6844ff66091df688019e6d7376eb3b9f552e78218e4a736030bead0ec35ed05", 0xb2, 0xfff}, {&(0x7f0000001500)="38b4234af20ffe6cfede9186df24352291d42656f2ab8d9d5c2c1646c258a952b96e529c8dacfc1ca0decc2a06b18475ba219a6daad6fc2abd0e0404f24aef68fd977e94c7b04b53c9e9c13e1c40264cd4743f04775eb426cd9d2893f4ebb1bf990bd633c2f17c25bc096c46993fd5cde9216d1ebaea5c1c8956c3eec471a1831361c2dfcb9f80b844d5b430b4f6e12e6b651739e18133e7e68acb7254bdb5bc972f507d829196d72c9b4c0dbe45da6eb0803a12e5befd0d5068b068bc1846020908ac43", 0xc4}, {&(0x7f0000001600), 0x0, 0xb691}, {&(0x7f0000001640)="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", 0x1000, 0x7f}, {&(0x7f0000002640)="246d8f1cf9810e50fba62ce2a4547f845983bd39e82ebf664dbc846938247a34989f1c243b430cc1338c6d8f5d1a3ce904c812b3218c88840b3c7205d2a076bd7b9ef555f67d688dc3e711fa540d8228ea51346c6204be1d52906cfc6654ace12cf0f556a67fbcbfe48b4eb0d58577f55ecdcb71586fbc82c00839567a3ee01591901f88265ed01e", 0x88, 0x1}, {&(0x7f0000002700)="43b43f7ef271415fa910b47ee838953e65afa8f1198fb201d2e87be95bd7d034", 0x20, 0x7}, {&(0x7f0000002740)="213be36192f00bf154d26e9be68740d0176ab9011ee5953d3282e0548f2d362137095412", 0x24, 0x7fffffff}, {&(0x7f0000002780)="f9bb479be35692d269869e81ee0c70c36b3f0c24be56c40fa8", 0x19, 0x1}], 0x10, &(0x7f0000002a00)={[{@resuid={'resuid', 0x3d, r3}, 0x2c}, {@alloc_mode_def='alloc_mode=default', 0x2c}]}) write$FUSE_DIRENT(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="d0000000feffffff04000000000000000000000000000000080000000000000009000000010000002f6465762f696f6e0000000000000000060000000000000002000065762f696f6e00000400000000000500000000000000040000000000000000000000010400000000000000000000609400000000000000000000090000000500000000000000ff0300000000000000000000070000000600000000000000800000000000000009000000bf5e00002f6465762f696f6e0000000000000000000000000000000000000000000000"], 0xd0) sendto$inet6(r0, &(0x7f00000012c0)="7623c0464c690291a350f7abe7b03763f93759a98107aea9b9645182418949de01a95213913920caf32d301deda76ce8eb7704d5d0dadf78b9bcdd218224194e09ccd26e5ee0b50ad1037edc0cbecf0990befc3a8481774c3775fd48a05feb4fcce8cc1d25d2b8478d021e80e7baa0311cca890edd6e8aeea7739cfcc8f319476ccebda7a27abac44c118dbaad81b354320bc7c66b8d3c4e6852d32a86c73ebb107818548e32c204f28932b62211a0081e43c2cdef0c8e8cbb5c4e4fc2da4985ef7a9701839df1bade8ae271436b7ea88109135807f169a1d1e57423724df1edb40536f7063caa7cc94483a65bbeb994ec142fc7", 0xf4, 0x40010, &(0x7f0000000080)={0xa, 0xa1a, 0x922, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) 13:30:19 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc21f, @loopback={0x0, 0x8}}, 0x1c) 13:30:19 executing program 3: r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/202) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0x6, 0x400, 0x1}) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) dup2(r2, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 13:30:19 executing program 6: recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/73, 0x49}, {&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/125, 0x7d}], 0x7, &(0x7f00000000c0)=""/63, 0x3f, 0x5}, 0x800}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/13, 0xd}, {&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000880)=""/231, 0xe7}, {&(0x7f0000000980)=""/149, 0x95}, {&(0x7f0000000a40)=""/159, 0x9f}], 0x5, &(0x7f0000000b80)=""/203, 0xcb, 0x6}, 0x20}, {{&(0x7f0000000c80)=@pptp={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000d00)=""/26, 0x1a}, {&(0x7f0000000d40)=""/218, 0xda}, {&(0x7f0000000e40)=""/159, 0x9f}, {&(0x7f0000000f00)=""/4096, 0x1000}], 0x4, &(0x7f0000001f40)=""/22, 0x16, 0x9}, 0x92}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001f80)=""/30, 0x1e}], 0x1, &(0x7f0000002000)=""/249, 0xf9, 0x7}, 0x1f}, {{&(0x7f0000002100)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002180)=""/89, 0x59}, {&(0x7f0000002200)=""/205, 0xcd}], 0x2, &(0x7f0000002340)=""/224, 0xe0, 0x7}, 0x101}, {{&(0x7f0000002440)=@ipx, 0x80, &(0x7f0000002900)=[{&(0x7f00000024c0)=""/197, 0xc5}, {&(0x7f00000025c0)=""/225, 0xe1}, {&(0x7f00000026c0)=""/78, 0x4e}, {&(0x7f0000002740)=""/96, 0x60}, {&(0x7f00000027c0)=""/41, 0x29}, {&(0x7f0000002800)=""/105, 0x69}, {&(0x7f0000002880)=""/59, 0x3b}, {&(0x7f00000028c0)=""/12, 0xc}], 0x8, 0x0, 0x0, 0x8001}, 0x1}], 0x6, 0x40012143, &(0x7f0000002b00)={0x77359400}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000002b40), &(0x7f0000002b80)=0x4) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x20, @empty, 0x100000000}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002c00)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, r3, 0x10b, 0x70bd29, 0x25dfdbff, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x13d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4000004) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x111000) 13:30:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) [ 931.881298] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 931.892453] netlink: 'syz-executor2': attribute type 10 has an invalid length. 13:30:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x40000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)=ANY=[], &(0x7f000095dffc)) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f000095cffe), &(0x7f000095c000)=0x8) 13:30:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f5761040074696d652c00"]) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3ff, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100), 0x0, 0x6}], 0x10000, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}, 0x2c}, {@bh='bh', 0x2c}, {@bsddf='bsddf', 0x2c}, {@nouser_xattr='nouser_xattr', 0x2c}]}) [ 932.070144] EXT4-fs (loop2): Unrecognized mount option "noWa" or missing value [ 932.099071] EXT4-fs (loop2): unable to read superblock [ 932.111715] EXT4-fs (loop2): Unrecognized mount option "noWa" or missing value 13:30:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x2000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0xfffffffffffffffd, 0x0, 0x0, 0xd4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000000040)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r0 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) 13:30:19 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe06f000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:19 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="00209490334bf3322a3cd06625ddab7fb7b375ffd7f026b0bd691aff4a4292a0c0baea5ecba3f018172c9b20728890a443d4b37070441f10929439ca30cca1247facacffc20797c56e746b304e179eb0c35abc975918c75a70eca5b62fb2dcb56ea82f475eca74618febecda148a1f50843b88bb4f360014022f83a07b67e71d66d7271cf3ed9f68d3740bb35b608d6c1a92fb1bdece9921255b6559ec75e7bc6536cb9b0938daab187200f60c6f3ffd6722a106bb4d073fea32b10c2d1b9181ce8939d22d9831957b1a39bfa748985c2154188087b1ceb228"], 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000005f80)=[{{&(0x7f0000000480)=@hci, 0x80, &(0x7f0000001700)=[{&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/56, 0x38}, {&(0x7f0000001640)=""/185, 0xb9}], 0x4, &(0x7f0000001740)=""/104, 0x68, 0x4}, 0x1}, {{&(0x7f00000017c0)=@nfc_llcp, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001840)=""/20, 0x14}, {&(0x7f0000001880)=""/106, 0x6a}, {&(0x7f0000001900)=""/226, 0xe2}, {&(0x7f0000001a00)=""/68, 0x44}, {&(0x7f0000001a80)=""/75, 0x4b}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/45, 0x2d}, {&(0x7f0000001c00)=""/95, 0x5f}], 0x8, &(0x7f0000001d00)=""/92, 0x5c, 0x80000001}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000001d80)=""/84, 0x54}, {&(0x7f0000001e00)=""/78, 0x4e}, {&(0x7f0000001e80)=""/169, 0xa9}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/75, 0x4b}, {&(0x7f0000002fc0)=""/103, 0x67}], 0x6, 0x0, 0x0, 0xffffffff}, 0x9}, {{&(0x7f00000030c0)=@nfc, 0x80, &(0x7f0000003480)=[{&(0x7f0000003140)=""/146, 0x92}, {&(0x7f0000003200)=""/60, 0x3c}, {&(0x7f0000003240)=""/249, 0xf9}, {&(0x7f0000003340)=""/19, 0x13}, {&(0x7f0000003380)=""/240, 0xf0}], 0x5, &(0x7f0000003500)=""/91, 0x5b, 0x4}, 0x100}, {{&(0x7f0000003580)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003600)=""/92, 0x5c}, {&(0x7f0000003680)=""/1, 0x1}, {&(0x7f00000036c0)=""/146, 0x92}, {&(0x7f0000003780)}, {&(0x7f00000037c0)=""/31, 0x1f}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/204, 0xcc}, {&(0x7f0000004900)=""/215, 0xd7}, {&(0x7f0000004a00)=""/119, 0x77}, {&(0x7f0000004a80)=""/207, 0xcf}], 0xa, &(0x7f0000004c40)=""/93, 0x5d, 0x8}, 0x899}, {{&(0x7f0000004cc0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004d40)=""/241, 0xf1}, {&(0x7f0000004e40)=""/218, 0xda}, {&(0x7f0000004f40)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x6}}], 0x6, 0x40, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000006100)=0x3c48, 0x4) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000000c0)=0x100) 13:30:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000080)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x80) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001200)={0x200, {{0x2, 0x4e22, @loopback=0x7f000001}}, 0x0, 0x1, [{{0x2, 0x4e22, @broadcast=0xffffffff}}]}, 0x110) socketpair(0x1, 0x0, 0x9a7, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000200)=""/4096) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300094700bb61e1c3e4ffff0600000001000000450d00002000000019000a000d0000000000280f00000007fd17e1ffff06060400", 0x39}], 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x11ffd, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x0) 13:30:20 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x73, "7c1616859e0a268c721eb58737187b5ba7a4f8d2ab69dbabbb000f39e02910ebed85505ea5d22c3dae0d1aae3f36073fb60332ced20b18035adccbe7d2068d1b1a23122a14d6c35a36ac17e266a616b20ee5790a87a58b897b5661acaa269c984ad7ba6663b568e63b3203c8656f195e809571"}, &(0x7f0000000040)=0x7b) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x10, "ffaca2dfaada0539bb232edfe99a8764"}, &(0x7f00000002c0)=0x18) r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r5, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x47e90000, @loopback={0x0, 0x8}}, 0x1c) 13:30:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x57}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x72, &(0x7f0000000180)=""/153, 0x41f00, 0x2}, 0x48) 13:30:20 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000003740)='/dev/audio#\x00', 0x6, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000003780)) getdents64(r0, &(0x7f0000000140)=""/78, 0x4e) write$P9_RRENAME(r1, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) getdents64(r0, &(0x7f0000000380)=""/91, 0xfffffffffffffffe) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) [ 932.495728] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 932.518012] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 932.673490] tmpfs: No value for mount option '/dev/dsp' 13:30:20 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0x2b, @broadcast=0xffffffff, 0x4e22, 0x4, 'lc\x00', 0x10, 0x9, 0x2b}, {@multicast2=0xe0000002, 0x4e23, 0x2000, 0x2e, 0x80, 0x6}}, 0x44) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x437b6c8b, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() socket$inet6(0xa, 0x80001, 0x78) lchown(&(0x7f0000000080)='./file0/file0\x00', r2, r3) umount2(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000380)={'nat\x00'}, &(0x7f0000000400)=0x78) 13:30:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) [ 932.971848] FAT-fs (loop2): error, invalid access to FAT (entry 0x000006c0) [ 932.979179] FAT-fs (loop2): Filesystem has been set read-only [ 933.006649] FAT-fs (loop2): error, invalid access to FAT (entry 0x000006c0) 13:30:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x140c, 0x16, 0x1, 0x70bd29, 0x25dfdbff, {0x16}, [@nested={0x11bc, 0x8f, [@generic="a4b44206694e155e8ad1c5dc8e688f1a0d7ad9a0e562bab4b1aee9f2668a039d4cb059561ef7b3a741ede8a3f06e5eb1afee76d652bfe2bddb6b2a05c4fdde6c70aa6412d6a657381cc259810bb45ac7568dac3ee9f35850aefe1fd586d591dacaf199228aa92e66668a516e82b8b6d99a8ac6755d79fb9232a267524b2e382b87c869fc29e425bc95f667482d97a464836d7ecc7b5ef71535214b6d", @generic="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", @typed={0x4, 0x4a}, @typed={0x8, 0x5c, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @generic="97feb0a661cf8f6e78f41fc16226ca708017001c63a35eb7efea6112c8af67656df45ae98cea6fa272bed8909eb1baa310f6a9a1f51ae76f57180492100875df3a771a62a8fcf413bdbc920b603c99b21f39511bf0706d2550acc71a5dbd97c897eb40", @typed={0x8, 0x7a, @pid=r1}, @typed={0x4, 0x55}, @typed={0x8, 0x0, @pid=r2}, @generic="25cd842039d2b2fdd96482ecce2b8bb0dd213aa8654854e66ccad9c9afe6c9ecc0393ba7588db7115f42dde4ff95b2c1d6805187c8b1633e3d2793b988266112892da1c4050e0346c4de250331049ed927e43afc8f678951568935f2cded43ca66d1156e2ee55d1a5e226c67aa7600180171202148f00e38d8ec6a038c12beb7aa8de77bd709de146a2d5a31e27975ebb1e43f1a1736de"]}, @typed={0x8, 0x20, @fd=r0}, @typed={0x14, 0xb, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @nested={0x140, 0x71, [@generic, @generic="a243555a68d4e019463f6a3bcba243eb35bf885ec4a424010ddfeaddb241c62197dcb42f0440a3be1e2605d8b847fe542746aafa17c60eafcafc9bc3fd9103907cc2fad34ffde6d3a2732c0fd67a0fd7534b801347fe7da6f5a5cffab2467a27f332744e157d8f87a429d81f5e3931a7d2899bc3bd97cf1b1517720816778e44705cbac3a6bb1db21bf02a97cb93da047ac187c31f10c04b", @generic="868952731520fd877dd1ac498b5ef7bde1637d0a4ebfcba558ff83fd207ca1afeb04d287883ed33e71ea1b5e0798fa8b26fb02f32a627b5a4fe558ae769bab3b9ffbcf5c17a2215c85747ec60826a0bd106b76db6d3cd461687ffa74677b0748270b7443786486a2c7e58ce1077927588f3ea5858a9653e9b62af742590e6501cc629512c40235dbeb02235b14ec", @typed={0x8, 0x2e, @fd=r0}, @typed={0xc, 0x27, @str='cgroup\x00'}]}, @typed={0x8, 0x2f, @fd=r0}, @generic="3d079725a2d04311a390347e8c4c6f2d2f10a4677184b423ce53bdc02cb74a0f111234579ddf87958bbd9e19116fda2c2bd4a84a2ce732214d549b01eda91c8297198ad157592c6261ec6e66571e16fb466c2a031ee9ed95e1845efa8b60edd560e34c89375bf2e7f1f1a64ba34e2e57d4", @nested={0x60, 0x53, [@generic="47b06c88d48500476a6ce6d0495ec9642296adb289dc6cd812fa737caaaf8264d9f45f48a7bf36ad59b9c2988e290e67f5abcd3a29182ccf5010e296616563852ee1ab22db86bbc956ad02", @typed={0x8, 0x6c, @pid=r3}, @typed={0x8, 0x20, @uid=r4}]}, @typed={0x4, 0x25}]}, 0x140c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000400)={0x10, 0xf, 0x0, 0x80008014}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x82, 0x24, 0x1, 0x1, 0x0, {0x3005}, [@generic="77b05d57e3fb70492f8f5a62ee98032c15a8b531ae3e9a736e7e6ba6eec7645bde8245b4b2c376d2596d2f53717ea361f2f5e1ec4aef5efe7facacff5a145e20553fff04d5187e3dd22eee4e92ed3e4b1d67938a875459acd1db14c892579a9fb5eb7a8b1bc9c6a9dd80d62a5d99695228e754d3bbeb126f38da8b21c842972cbc641d88d6fae0295c3e27116e"]}, 0xfffffe79}, 0x1}, 0x2000) ioctl(r0, 0x3, &(0x7f0000000440)="f8f6fa0f2e7a6a6bb83fe593a7926504011f4563ef8916e933b9169ff7b95db755409387955cb6dfb9bb1b9d3e64b087014bc3ea1df253a907b5545347a0666a121d85ba0a6cbde4c8d2df42545d98c984055071bca2a1a0f0278d14b28198b3097ecfc298c2aa69670144457c7a2458") 13:30:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xd0a70000, @loopback={0x0, 0x8}}, 0x1c) 13:30:20 executing program 7: socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000d00), &(0x7f0000775000)) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x50}) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) fchdir(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e21, 0xffffffffffff0000, 0x4e20, 0x6, 0x0, 0xa0, 0xa0, 0x2, 0x0, r2}, {0xff, 0x5, 0x10000, 0x7, 0x80000000, 0x12, 0x401}, {0x7, 0x10001, 0xfffffffffffffff7, 0x7}, 0x10000, 0x6e6bb7, 0x2, 0x1, 0x2, 0x2}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d6, 0x3f}, 0xa, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x1, 0x7}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x1, [], r1, 0xd}, 0x48) [ 933.032727] FAT-fs (loop2): Unrecognized mount option "./file0/file0" or missing value 13:30:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0xff0f000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:20 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:20 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0x2b, @broadcast=0xffffffff, 0x4e22, 0x4, 'lc\x00', 0x10, 0x9, 0x2b}, {@multicast2=0xe0000002, 0x4e23, 0x2000, 0x2e, 0x80, 0x6}}, 0x44) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x437b6c8b, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() socket$inet6(0xa, 0x80001, 0x78) lchown(&(0x7f0000000080)='./file0/file0\x00', r2, r3) umount2(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000380)={'nat\x00'}, &(0x7f0000000400)=0x78) 13:30:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x90d40000, @loopback={0x0, 0x8}}, 0x1c) 13:30:20 executing program 7: socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000d00), &(0x7f0000775000)) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x50}) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) fchdir(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e21, 0xffffffffffff0000, 0x4e20, 0x6, 0x0, 0xa0, 0xa0, 0x2, 0x0, r2}, {0xff, 0x5, 0x10000, 0x7, 0x80000000, 0x12, 0x401}, {0x7, 0x10001, 0xfffffffffffffff7, 0x7}, 0x10000, 0x6e6bb7, 0x2, 0x1, 0x2, 0x2}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d6, 0x3f}, 0xa, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x1, 0x7}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x1, [], r1, 0xd}, 0x48) [ 933.510751] FAT-fs (loop2): error, invalid access to FAT (entry 0x000006c0) [ 933.518084] FAT-fs (loop2): Filesystem has been set read-only [ 933.564548] FAT-fs (loop2): error, invalid access to FAT (entry 0x000006c0) 13:30:21 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x73, "7c1616859e0a268c721eb58737187b5ba7a4f8d2ab69dbabbb000f39e02910ebed85505ea5d22c3dae0d1aae3f36073fb60332ced20b18035adccbe7d2068d1b1a23122a14d6c35a36ac17e266a616b20ee5790a87a58b897b5661acaa269c984ad7ba6663b568e63b3203c8656f195e809571"}, &(0x7f0000000040)=0x7b) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x10, "ffaca2dfaada0539bb232edfe99a8764"}, &(0x7f00000002c0)=0x18) r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r5, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x202000, 0x6ebe6fa52fe7df71) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000480)=0x60) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:21 executing program 7: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r1 = getpid() ptrace$peek(0x1, r1, &(0x7f0000000040)) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0xa00) sendto$unix(r2, &(0x7f0000000180)="7954ebcfafa403a78423055e873a627f47e1d11edf4f53964c831338951012df7d854aa0824386734d9e47a7dffb0b476cc67a0d0406d5392ac5f8c534135288188dc1fbb56ed0", 0x47, 0x8094, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) accept$packet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x14) 13:30:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5832, @loopback={0x0, 0x8}}, 0x1c) 13:30:21 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffeed, &(0x7f00009ad000)=0x2) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000180)=[r1]) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') open(&(0x7f0000000380)='./control/file0\x00', 0x200, 0x0) close(r2) 13:30:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x8709, @loopback={0x0, 0x8}}, 0x1c) 13:30:21 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) getpeername$llc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) ptrace$setopts(0x4201, r1, 0x0, 0x709000) 13:30:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x202000, 0x6ebe6fa52fe7df71) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000480)=0x60) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x17de0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:21 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="940cc93c2f36404ff924490aceafc362dcea66376c6d0eacc46096afc145b57dde017b38040cdbb4adb43cafe5e7f5e89d305dc007286a9c83fcf708c95649f199f0f9a242b5426ab6a5de9234dc50a72deb3a1ceb87cfc8d39c60061043ae4290d370a5cf8a8a4cbb4f21a2f5dac14f4c509b731e0fe93eb22bd7439e281f72e146ae9eae64aa0e7327d52518b75ed82c8c47d3180b4ea37323297b8f0976e73155957e51", 0xa5) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) 13:30:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x202000, 0x6ebe6fa52fe7df71) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000480)=0x60) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000004, 0xffffffffffffffbe) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) clock_settime(0x7, &(0x7f0000000180)={0x0, 0x1c9c380}) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/192}, 0xae, 0x3, 0x1000) 13:30:22 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x73, "7c1616859e0a268c721eb58737187b5ba7a4f8d2ab69dbabbb000f39e02910ebed85505ea5d22c3dae0d1aae3f36073fb60332ced20b18035adccbe7d2068d1b1a23122a14d6c35a36ac17e266a616b20ee5790a87a58b897b5661acaa269c984ad7ba6663b568e63b3203c8656f195e809571"}, &(0x7f0000000040)=0x7b) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x10, "ffaca2dfaada0539bb232edfe99a8764"}, &(0x7f00000002c0)=0x18) r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r5, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x202000, 0x6ebe6fa52fe7df71) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000480)=0x60) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:22 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x10000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000015c0)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) r2 = timerfd_create(0x6, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x1130, 0xe, 0x6, 0x20, 0x70bd2c, 0x25dfdbfb, {0x3, 0x0, 0xa}, [@typed={0x18, 0x85, @str='&,proc/#selinuxem1\x00'}, @typed={0x8, 0x3d, @fd=r1}, @typed={0x8, 0x2d, @fd=r2}, @nested={0x1030, 0x4a, [@generic="4dfbe0462d3047193d2454", @generic="7205d80ef9ecd86fbb8688634af7935d1a90c69874e2719a07488bf41459d542219fbc436c8b16935f5e1922c3a56df0bab93fe9f3462f346df0b322495f59ddada4fd99e3cc0c58f0cb9153c55e79bab6cb2dcfa3e71073b779069733f92eb50691e87b614c46a876ef636e002b40bf9ca286395dae7306dd7329b0ed99f0b5248b70f00fd0499b6a60b7bacf310e61b1f4c0d92816942cb7c3102d7b9a13661cb7c538864e8c9bbccc549d4e31cdf57ff17579ce820a6d48ae3937060f608f8de359ae58928fc8ea32e6b7509485971457f051f8f2b6a934fba11ec5d81d0b173944808314180f9aa1096704bde07b17c29d3180a7f729e4705890d1e75ecba5eddf11882bebc23d11556d5a95fe38f0bc0fa7bebd4fb45a21bdf5d058a458beb14087de2a60509c82808f01f00e82f75e4ea22a6273b3c4bd1e204b2e41f0edb1c2083f3c37c8256793f5d88bca0f838b37327634733a432be77ddb94264d5717d23d135129a047271fd521be45ea042834dd55229b93f81262827de96af2eb74e625627d21554c8b12d81498a863ddfab188a86ea97527b233cfc61dd58184db704fe29efdc5824d416189fe40ecb74662270b8cadacc49bbecfec2986f628ce807449d1b7f973f23c4ced59b4a51eacd54aa8a166a2fb91c981b49f66fcd2a3df84a29e372c1b19cf5c3620ad670ad6b28e064997ba9e3f2a0720a8b4b963d0956acd1d9cef8dcbc3d3d7ae95e4494ff582beb65074af325ad21f2fb433360467494946aa11ff3af7096b4f94bc824e893aca8cb07f0493122dc6a079ca969b60b71c2a6e32326016b8e416add2fc3aada24e6d6d7fe1638be7a417573c155c99311e4ea42ec1cc8e32756ff240dd1eb0472084ec30e9d21c342ff700678ac06ba1686cb6fbf112342627ebda24ac2a5ed96b91b18f4500ad5b386e755508da939454b5c69941b906f92d40d88b4db2aa1336f312b53f88e4755bb8b4467da0c1c4735234249b2709bffa2ce92398af07dd23bcd8946c9ca22ae6de0ed8318e9de41bf23cd102b24c99b3c20017f0927c079a36caeeef2b474bf74a86c91ed00e39dd93e55486f2dd7838ee9d34abd84963ecd88be49dc703c9e2383d23c7a2fd4e144d7e3ba795e9ab67a5c7c98b2755603cffefde0da158bce2895aacf6c7cf0c4ee39c4b210dfa16eba71c908d34cde15f145353a38bf1e79f43e152c0db4c36cd3a2faa9137d0e67ca35047f8240358ef6d03fe507fc15f8b1ac7b0f21ea58f7181d588b369621e243d7af8c6d9639503dc207bb810327f5469dcc8d66e329e16a359d7f6d8f586e7027ef9e1400c0ac9c7ef0ac52937e28d548d30a31ff0bd655f9459dd5e5e0633a0a2b86fb27e16e70fe62d36fdaa87a9641fd4987fd4695a4512251f7f75b7c28e42ebd2e2164553c4676483358212b7884385f360e15fa698fc4c3c318dd04a37363e0f81f71ac58a40a9ef45c1c9a1bfe4c6022b4d9335a4d1fed7da13f12296dd5bd09ceda6ef7aef7acc71179d4acda1996c6aabf7fe732c0af8ddfd8fdc8ff06482a856d656e59e3a8b4b141bbea0607f61229e9bfefb04e01e665ec89535272ba1b55d0bed1eafdfdcec0af01531d6874b606e4d9e997f033947892dae20d64aff7b58701b2201da1bc59729be9d081093269080bf720f53dbcec91796023bd8038310810b83223b3a82bf9a9e3e3e93557b722b596df6b1d6535bac5180956b4e5366114251907d2cf9938dfd33082d79db54e7839d0bd73f6b24d1728389cbfff6593ffb0cd45725cddaad2538e34ac566776afa195ea81e8a2eb052901390379d741752b84d3bd420a6e888fe7eb4dfd0456b6dfaafdbd0f904bcf68ae37d750a09704f0e383e9b7904f9cf316f0fea6d8109982b4bf22d190bca5f4be5922be972462dc8621b363f29f4d963590f3591e2336a3b39252d68c34d095cd50c57ab868b738ae0a1a8212f4100d358efce9f0371586c595675c6977196dcfa61aea0c0aa4d8d788da491046bb608cccd12cf88a754b76d22e716dc83d0da2e95456108ef9413c5b2deccb6685a7855fcb34fbadebb3b2eb4730b683c3eee8637b859d362995c6c463097b2e7c718308789f4e2d89218da43e78e18b7cb772cce06dc7058c4a418c3e872eb793a4e4c5f3a32946fe355e4cb2f1b54c1afa331c58bd2704032ea2423d2556cbc04e0c0b6b0285bd977e6122a9a3227d9892bb7ee665de72d7b5327e6d97a80ad21155f7cfc4a7363b5613358be1030c687111c42f100b3d4cd0090cf28af2bc253a3d1d8f30c4919de29159e4dc30f732c0fa268912caca8beaae4296aef32640ded22d737a43ebc2f4588b77bbb1352d8de2f298cbb45f3ec48e626c78d63e23f387567cc5a98bf1e7998706aa221e0fba76d4f7668a5de8cf2f2f96efc319b2430598fb7e4fc07eb98f4e3183c954b9e82a3f7b1115ba8fc6a1a0aa07dfc7d6d1475d19726a771fc1860a58ebac561079d633002e264fdfa94f2f6087fb7d655d388bff5965c30cad3f7f492b189817b76264fe34bb3a0f305911e4defb5f200ed368740fefdcaae299cfa772d02bd3c994b0e0a17399d2a07643e242dc0250d915830c9bb456bca862b6751fe4cf231aae15e72568a6f708ab9582698bd55ff6b5ce2a8696baeee2ca8ae5956607e536734097567249cd12b65e9bff3ac9872aac38139d79819a26d86b5226eac28eff06a98e140158eca6884243180b4e28347ee19970dc4de1e373b143fd358c32d24caa1503fa0c5878095ceb09497fa4454b6a2e0589b1019c6172061314a3af7f93cb13b3e6f7091cb3a9c05487e961ef7717196b582b41456c18fd037ef92596876247258d1f5fe74a6043792267b69d36b75ff8a89b8b568b7da0ce50288b18468cd21fd86f1448f85d5c1481ae4f9d072da9f9e2a6fdb21b9042ab52cf4e18625eee1136096261a6fcc922a14c9d66d21d502ecefcbb5054b4bcd3ce58b9d395f5e0d3a13090fe34914d93c7787417d0a1b9107c66dc45455e9737a596cf93130e8b519aa9e9912507b03c513645e131de431d1419c83e456ff1ce6cc35c329982adf2104136cc953602fa31cce3e4e6c67e255a4cbf0fdc0423462473cf3a08ae0194ae292deae0763c46a95ab66fffcbeae9a587eef9c1ee292c007c30ae6bd47cf8c0059bbfef08110949657271ad1745679fa9eb51a83b657189b56754d20fd2ddca86efcfb7c891c34192ecbcfcf437e0b17ef6e97e511a758732122d723e1dda56915aaa86125d73d8027b80a1420b11e04728a38739e125693b8669dc724ebfa4627d9f62c5a8226329a085758bd1589845caf87bffe87578b1c67399d23b767eaea60a8fb54ca85133b5e25f954f5696adddc06d8dbc562bef2fe68cded6644a8b9725573a3d9296c5a5a2fb970e6b2e458c7350dc8a8058350feaa2228fc6a6e6ca3e7227a2cdc0cdac61c5a62e5248cce999831a45e7c964d791faddfbe6cc41555a956e7daf2b746a85083334984f9d1bf875d60ba24e9e8129b087225d2362aaa5486ddd63e59796ece67f71e67a5a3c641b313f0bcbd864892b3b3b56c07c4073a3eb4360cfb1e9e6367b70af2bbc7a6380fbb5c74f74753957120821fd19f70046596a53e53b775d979033979b683dcc1c8c35721777821f5bc4f5e218e963dc4d479e690edb2b0d70e5ed96dae5a7d9a86fc9172b98c027f7bcb15e67e83d1558cf790add3f5f0d2af9dae40209f5217820739cd0dc4c0c7f31b527c5baf6d62db9a24e047b8c371426d8b90b383da2c5a9e58051d4de0801e9b8347490b7237029ff2bdce59bd1f7f2514eb362471ef32f0b71268a913267a679cf92d9cb2e3ac0ae1d504d7cb833a3ee784d9896aab92ca61345eb177d838384df32292e310026026cd8947fc30803943676fb90e0053a3c4a2731ca307f94618237a126c1aa2e3b60c8afcd5b4f995085a37f7c2c77c73167d49efbf28438002ed849976ad9bd426f1205e464f531fbadb9ec03b8ee6f756ac025e9d332148903ad27181cd43d858ee789f92f36a13c859c044b0c17a2c9281e76200d1d43b3b82dcab56f923a331aba0845cd1c3fad62dd6ed1ab666334f04cef6cc13b38d431856cb48b43d5a44baf5c6cfd4e8a53956eee5e7e100eef1b899ad558a952e67d2b88d7a0687dcc58b9f26a4383d332408a3f892323589f77ed936935b43368dfed596cd6c44fc75ca4dc7cf0d7b70d107d60aa28bbf726da0c702409871a1838f3d4cdfde4e6cf4ce8eb9e130491feb314beac7f1d8ab66aa1d88f11f587ca4b2d312a1307b8080d07d3938fd69df6ba5f114aa9ebf005f4d5a031b8294b802cd6f8da019af5765cec3f13f425c8c05fcbe4420d30e55f80fda32f94fc279f2f1054815c26cbc35af26712c052a40b035dd99b334e033951674c03145a61f7fd01ec77eee75b1398da085c56788df2df64983e365b57f1828f3f31acdf24619a7cc46f17f4c0b72a3bb44cf4616ec06f99b328d1078957bbb3216bc8b2447c7c7ed2caabc5ae77ede6b498464e96f9c162c35270003194e7f18a1a62003521aa28b744e1e29c637cb73ca0843f8f276ad9e28ae50737dca838f0d8fc228cdec2cb6446c7e25e352b4598b738305fd3236131879397ca771121b6f39ffcbcd66343cbd21ca91ca683504dba870446c67dad64402d3213392e8799160b36506d89841a4f757a8a1d66425258756c17b3cdb57da3833e3108bc37f3bc9787aa97f288ea254233335228257d762798805e061ab14496965315fa9ccc979264c42632b484ab35518974020124a752bdbaf7ab7c7e08ffa618b2e827d5fae08e88bcdb28fbf317f3adb7138873a436eedac21b86708d5d877a3b875015977f18ea627d86a1dffd0e9d083f45ac509269feda0870c9ded25e9ec6966406c1a59a024f178c2832f4ba334c4ef037573691ad97ff18fa62bb55279ca05c140ddbbd03c0acc78e6ddebaab737bf495ee277686124da129e256d6c169beb61af1509b16dcfeac48d1f001641321138c0a77633f0d5092dceef56538849426b9836eca7d16b3d71a3b146d096fde0b0489edb23360dafa2e42fb7c916419e6665bef8f8440b7a2836b887a0d7de1a7d616c139766dacb1256932cce9adf400a48f6baf52db7b4744c45c5e9e602dde305c7e305b7e8553ff3e8725678e49a242dcd0ae3dd7ce94468fa3e51c65af273bca20a95ee878bf7b0923fd432eb4c6a808905e7df9e27007dca4295ad53dfe62e5fa1313fdc04721d52e0047ee6f8b48c0bb0461ebdbf4e8a8c62d6227a0aeb05d3a338cd1a3bfca6e9e4cbbc5db8e31e4265af34814c38812678c1c41c864a9087f3a8d635a6ff05f7558025736ad505ea06bf2f291106bd5a7f55ebf40735e613ff794d84fc20ec8d221964c04bb3dfe1abc94e93617e7ced191c8a54bd0c73db2fde1d7f09661ff324c49a198cee3f0bc7a81063c3f30f62549a1bca9a29dae8c4f52a7b1e93a16f342f11e9fa89b76038e0fd9a1689332024f737cfe31cb2b93a275d078ef9761f66f87cce7c6e43b92ce9dd5029f9374a91132cdc09c0ab838e861fb9d4c37d9cdd4edd8ada2e3d351db31416162e4bd3c675f7b44223cdfa120bc841493b4ae63074f4561fa95f54abe4946a254e25726a77449ef9422ab7e65fc0d585a0de85eeee04a5f7699a0ebc2e0580aafb2d2523c03df4e4f2278c3012d1ece9540d599d1b79391edfc281169acfaf9fc3ffd6e0260419ce2fdf2c89f45f", @typed={0x8, 0x27, @str='\x00'}, @typed={0x8, 0x5f, @fd=r3}, @typed={0x8, 0x33, @uid=r4}, @typed={0x8, 0x85, @str=',/\x00'}]}, @generic="153fabb2a28576612322bb312d9428b607c8e5798a74ad40793b7c529e610c929b7832aabdeffcf65d7ec40d1edc63f68cf30d29ee13a755cb426f7fa47cd3919ae10a7c043cb52df8083b9a51cc838ee0296dc178a2615538bf8b1987f03fc27db5958010d01676d2392570425963cceaa9183798c9e25bdfc2260f359ac4dcaa1aed9a1cd7b449f719b40ca5a3aab691775b8e6df955ab895f647c2c7410b0f8ed661f50ee4a6e58204c3e64b35577d421bc15dfda5f0dfdce5a3a8f73a8b21e05c03a"]}, 0x1130}, 0x1}, 0x4008040) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000400)={0xe8, 0x9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x20, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@nested={0x4, 0x2}, @nested={0x8, 0x7, [@generic='%']}]}, 0x20}, 0x1}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x3, 0x40) 13:30:22 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x210001, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080)=0x8, 0x4) r3 = dup3(r1, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000000c0)=0x4) 13:30:22 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x500, @loopback={0x0, 0x8}}, 0x1c) 13:30:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:22 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x100000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:22 executing program 2: recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000540)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/103, 0x67}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000400)=""/24, 0x18}], 0x10000000000001a9, &(0x7f00000004c0)=""/83, 0x53, 0x80000000}, 0x2000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x8, @loopback={0x0, 0x1}, 0x9}}, [0x9f1, 0x1c6, 0x6, 0x9, 0x3, 0x7, 0x2, 0x2, 0x3, 0xffffffff00000001, 0x1ff, 0x4, 0x78, 0xeba, 0x6]}, &(0x7f0000000680)=0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000006c0)={r1, @in6={{0xa, 0x4e24, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x9}}}, &(0x7f0000000780)=0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}]}, 0x28}, 0x1}, 0x0) 13:30:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xfa52) r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xe17, 0xb71, 0x7, 0xdb, 0x0, 0x3, 0x100, 0x2493, 0x400000000000000, 0xffffffff, 0x1}, 0xb) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0xc8, "acf5bf65a06eaa9ebbba7db06e978a776bb53f232556e92958b8c1ccbfc32f54e2f10aeead2c5f8f383d51f934384c50c4e3a18e017fa0ea4848bf9c23472f80561ffe0640f91221ef337e37bee3462845bd0cde32d74803217e02e9a1ef128bf341e298895f70339fca1defea85fecb3e6c3dcc4d9d289b78a7324053e9d4c8c090dc1f950e955ecbd55b888ce5160105910b94b08b531162c8adfd3f84636b2c9a3ffc6dfe4a98624023df1f307611248e8f17fb70de03ee6769848d45a2c3ab7de3796e1c7545"}, &(0x7f0000000200)=0xec) [ 934.816895] netlink: 'syz-executor7': attribute type 7 has an invalid length. [ 934.841755] netlink: 'syz-executor7': attribute type 7 has an invalid length. 13:30:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x1000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x202000, 0x6ebe6fa52fe7df71) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000480)=0x60) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:23 executing program 7: r0 = socket(0x40000000015, 0x805, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x1000, 0x8002, 0x5, 0x1, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r1, 0x12, "26714c545fbbea9cc62d98ad485ec0a8b5ad"}, &(0x7f0000000100)=0x1a) getsockopt(r0, 0x114, 0x2711, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xd) 13:30:23 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x1a) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x40) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) dup3(r4, r3, 0x0) 13:30:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x2827000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:23 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x73, "7c1616859e0a268c721eb58737187b5ba7a4f8d2ab69dbabbb000f39e02910ebed85505ea5d22c3dae0d1aae3f36073fb60332ced20b18035adccbe7d2068d1b1a23122a14d6c35a36ac17e266a616b20ee5790a87a58b897b5661acaa269c984ad7ba6663b568e63b3203c8656f195e809571"}, &(0x7f0000000040)=0x7b) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x10, "ffaca2dfaada0539bb232edfe99a8764"}, &(0x7f00000002c0)=0x18) r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r5, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20040) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="020020006adc69886a97af95664f17ead6e9507f0b5b0fc6b5b832d2920a9f2d5e07014bf4af6ed8359e6e3772050758c379892311fcaf5bc84b145c46175747c081ea2751b2ef919e0cb6520100000000000000b4473ebdcc7b70dd64c3147e32a61d50def5af4c68649462f6c8d2461d00ec119b82b1193d042aa250673f593cca8cafa499ae39c89acd6a5c638c33e9663f1ab65ed32b2408cf31b8251a3164b40cd8afb7f49c33b0e95909efbebae19206dacb10c9a080ec99bbb22916971d4d75f1273ef1354b1473b5fc5d", @ANYRES32=0x0, @ANYRESDEC=r1], &(0x7f0000000080)=0x3) write$P9_RSTAT(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="6f0008007d0200000068000500080000004402000000010000000000000000000050ff7f00000400008000000000000000000100400700766d6e6574312110002f6465762f742f6d696365001d006d696d655f747970c6ee8352077e6573656c696e75783a2c7365637572697479292d3a"], 0x6f) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x2800) 13:30:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:23 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) syz_mount_image$ntfs(&(0x7f0000000200)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x7a00, 0x0, &(0x7f0000000380), 0x8100, &(0x7f00000003c0)={[{@errors_recover='errors=recover', 0x2c}, {@umask={'umask', 0x3d}, 0x2c}, {@umask={'umask', 0x3d}, 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@case_sensitive_yes='case_sensitive=yes', 0x2c}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d}, 0x2c}, {@show_sys_files_yes='show_sys_files=yes', 0x2c}, {@umask={'umask', 0x3d}, 0x2c}, {@dmask={'dmask', 0x3d}, 0x2c}]}) 13:30:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x8dffffff, @loopback={0x0, 0x8}}, 0x1c) 13:30:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x202000, 0x6ebe6fa52fe7df71) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000480)=0x60) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:23 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x202, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x2, 0x100000001}, 'port0\x00', 0x2, 0x10, 0xb4, 0x34, 0x5, 0x8, 0x3, 0x0, 0x1, 0x3}) r1 = socket(0x10, 0xf, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00006da000)=0x1, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0xffffffffffffff4e) 13:30:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) ioctl$LOOP_CLR_FD(r0, 0x4c03) timerfd_create(0x7, 0x54bf0bda65e05d6e) [ 935.916482] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 13:30:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x883d0000, @loopback={0x0, 0x8}}, 0x1c) [ 935.958089] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 13:30:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x202000, 0x6ebe6fa52fe7df71) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000480)=0x60) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000001, 0x200000) syz_open_pts(r1, 0x101000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:24 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2ce03177df718b63c9000000", @ANYRES16=r3, @ANYBLOB="100025bd7000ffdbdf2506000000080006000600000008000400040000000800060001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) 13:30:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0xe, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x15, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x3) 13:30:24 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x73, "7c1616859e0a268c721eb58737187b5ba7a4f8d2ab69dbabbb000f39e02910ebed85505ea5d22c3dae0d1aae3f36073fb60332ced20b18035adccbe7d2068d1b1a23122a14d6c35a36ac17e266a616b20ee5790a87a58b897b5661acaa269c984ad7ba6663b568e63b3203c8656f195e809571"}, &(0x7f0000000040)=0x7b) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x10, "ffaca2dfaada0539bb232edfe99a8764"}, &(0x7f00000002c0)=0x18) write$evdev(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x87bc0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) accept4$packet(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x14, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001440)={@loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, 0x8001, 0x8, 0x4c, 0x400, 0x5, 0x20e0022, r2}) getsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffe8d) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0xf8e}) 13:30:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8000000000100) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x14) recvfrom(r1, &(0x7f0000000080)=""/226, 0xe2, 0x41, &(0x7f0000000200)=@hci={0x1f, r3, 0x2}, 0x80) 13:30:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x202000, 0x6ebe6fa52fe7df71) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:24 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x220400, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000540)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={r3, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xff, 0x1bf2, 0x9, 0x9, 0x8}, 0x98) r4 = socket$netlink(0x10, 0x3, 0x17) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r4) r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x400) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000640)={0xa0000000}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r3, 0x10000, 0x5a}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0xe}, 0x5}, @in={0x2, 0x4e21, @loopback=0x7f000001}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000100)={r6, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0xffff, 0x0, 0x101, 0x1, 0x51}, 0x98) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) recvfrom$packet(r5, &(0x7f00000001c0)=""/247, 0xf7, 0x2000, &(0x7f0000000400)={0x11, 0xff, r7, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) 13:30:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000380)={0x7b, 0x0, [0x400000b7], [0x0, 0xd004]}) 13:30:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbfab0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:25 executing program 7: r0 = socket(0x4000000001a, 0x800000000007, 0x8) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000340), 0x4) 13:30:25 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x22152, r0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = gettid() move_pages(r3, 0x3, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000100)=[0x8], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) io_setup(0x3, &(0x7f0000000180)=0x0) io_cancel(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xf, 0x2, r0, &(0x7f00000001c0)="e31f968b51c845561b9b9dc6", 0xc, 0x3, 0x0, 0x1, r2}, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401104000000016) 13:30:25 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x87090000, @loopback={0x0, 0x8}}, 0x1c) 13:30:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000d000030050000000500000000000000000000400000000001000000000000d66c3f49cd4c6c71ff00040000000000000a00000006d1dcee2604b10b3a352ec02b"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0xe1, 0x0, [{}]}) 13:30:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setregid(r1, r2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_VL_CLR(r3, 0x7014) 13:30:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:25 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x2000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:25 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x73, "7c1616859e0a268c721eb58737187b5ba7a4f8d2ab69dbabbb000f39e02910ebed85505ea5d22c3dae0d1aae3f36073fb60332ced20b18035adccbe7d2068d1b1a23122a14d6c35a36ac17e266a616b20ee5790a87a58b897b5661acaa269c984ad7ba6663b568e63b3203c8656f195e809571"}, &(0x7f0000000040)=0x7b) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xffffff7f) 13:30:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b8d201c1f66a0"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:25 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf0ea, @loopback={0x0, 0x8}}, 0x1c) 13:30:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x510e) 13:30:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xffffffff00000000, &(0x7f0000000200)="22404eacbe7bd202e4000400000000004abfaea03c22d252e05cfbd28000000000000098b097a6ede2f3e10f29f496cd256f654976d20e80acbf174c35c35c7ef504297c09ec15ecb17232767f65442023a9d0532172d93f48c2a8dd745ac0ca8f0ad66f334dda896a84702f") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)={[{@jdev={'jdev', 0x3d, './file0'}, 0x2c}, {@jdev={'jdev', 0x3d, './file0'}, 0x2c}]}) 13:30:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfffffffe, @loopback={0x0, 0x8}}, 0x1c) [ 938.638886] REISERFS warning (device loop7): super-6510 reiserfs_parse_options: journal device was already specified to be ./file0 [ 938.668710] REISERFS warning (device loop7): super-6510 reiserfs_parse_options: journal device was already specified to be ./file0 13:30:26 executing program 2: r0 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080003, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = getpgrp(0xffffffffffffffff) setpriority(0x0, r4, 0x4) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x1, 0x80000000000) 13:30:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) accept4$inet(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xfffffff0) 13:30:26 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101080, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x6, 0x7fffffff, 0x9, 0x0, 0x1f}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e90000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) clone(0x600, &(0x7f0000687000), &(0x7f0000b4c000), &(0x7f0000552ffc), &(0x7f00007a4f71)) close(r0) 13:30:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe71f, @loopback={0x0, 0x8}}, 0x1c) 13:30:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xffffff9e) 13:30:26 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x73, "7c1616859e0a268c721eb58737187b5ba7a4f8d2ab69dbabbb000f39e02910ebed85505ea5d22c3dae0d1aae3f36073fb60332ced20b18035adccbe7d2068d1b1a23122a14d6c35a36ac17e266a616b20ee5790a87a58b897b5661acaa269c984ad7ba6663b568e63b3203c8656f195e809571"}, &(0x7f0000000040)=0x7b) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x200, 0xf22d, 0x1, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000480)={r1, 0xc3, 0x8d}, &(0x7f00000004c0)=0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) getpid() syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x20000) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000400)="6e65742f92900200000000007200") utimensat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}, 0x100) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edaaa0e04337dec9b1650ac00000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)='{@0{.(\\GPL},vmnet0', 0x12, 0x1) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000440)=0x100042, 0x4) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x7f, 0x145000) 13:30:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") shmctl$SHM_LOCK(0x0, 0xb) 13:30:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x300000000000000) 13:30:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x60c9, @loopback={0x0, 0x8}}, 0x1c) 13:30:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x2]}}) close(r3) dup3(r1, r2, 0x0) 13:30:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x400a40, 0x0) setsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000080)=0x6, 0xffffffffffffffaa) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40, 0x0) socketpair(0x11, 0x2, 0x5f4, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000100)}) 13:30:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}, [], {0x95}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000200)={0x0, 0x0}}, 0x10) recvmmsg(0xffffffffffffff9c, &(0x7f00000063c0)=[{{&(0x7f0000000000)=@vsock, 0x80, &(0x7f0000002640)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/103, 0x67}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f00000015c0)=""/85, 0x55}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000300)=""/64, 0x40}], 0x9, 0x0, 0x0, 0x6}, 0x9}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002700)=""/189, 0xbd}, {&(0x7f00000027c0)=""/13, 0xd}, {&(0x7f0000002800)=""/178, 0xb2}, {&(0x7f00000028c0)=""/52, 0x34}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/82, 0x52}], 0x6, &(0x7f0000003a00)=""/121, 0x79, 0x2}, 0x80}, {{&(0x7f0000003a80)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003b00)=""/134, 0x86}], 0x1, &(0x7f0000003c00)=""/103, 0x67, 0x9}, 0xc}, {{&(0x7f0000003c80)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000062c0)=[{&(0x7f0000003d00)=""/138, 0x8a}, {&(0x7f0000003dc0)=""/201, 0xc9}, {&(0x7f0000003ec0)=""/181, 0xb5}, {&(0x7f0000003f80)=""/194, 0xc2}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/14, 0xe}, {&(0x7f00000060c0)=""/188, 0xbc}, {&(0x7f0000006180)=""/91, 0x5b}, {&(0x7f0000006200)=""/137, 0x89}], 0xa, &(0x7f0000006380)=""/12, 0xc, 0x20}, 0x2}], 0x4, 0x2000, &(0x7f00000064c0)) setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f00000065c0)="69d8a045f64c612b6339c9c95efbd7b279db814399133d5f70af9eac22c16637305159993c6efb98aba51a3fa383fb9c3ea87283e623e9dc7fab8768ebe5b67e1e54d296cf21f10a3b3aeeac99785aa5fe56e441", 0x54) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000006500)={{0x7, 0x0, 0x3, 0x6, 0x2, 0x80000000}, 0x4, 0x387, 0x3, 0x6, 0x7, "4b091f6f44cae2f0200f5f3cbbfff7acd1b89c0d3ffee056b6c17a18ea93145c64876bf181a2b26bdc6f7085752f0b6a49b07a1bd0a67128cf533dcaca414cfe3f803aefb2128fe88e57f78800af95e391c88df0f40c3e512c7bf7b532717b8e774a1b6d9e2e1d450b4bb4a9a3f05612968650eea22a4b92ddb9930657f8f4ba"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)=r1, 0x4) 13:30:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x2000000) 13:30:27 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x78, @loopback={0x0, 0x8}}, 0x1c) 13:30:27 executing program 7: r0 = socket$inet6(0xa, 0x80003, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000280)=""/146, 0x92}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00000002000000000000000000000010000000000088f327ecf6694a7f5a1863000000000000000000000000e0e2307ee3f5de5b3bb4216a4365d017dcf19f2ae5da742cecc21a6a38844975dee7158337288b0cf8aa4f6435faf857708a9fb0a39501135b66916136bec001946123d470b27fec760ec93c29d82bcf53d95ff108c52e3cbce5bfdccd599fdb737b937be5af92c493d52c59d96df25dff0f9d1801dcb5ff51d3b63a0b"]}) r2 = gettid() r3 = semget(0x1, 0x1, 0x18) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000005c0)={{0x6, r4, r5, r6, r7, 0x20, 0x80000000}, 0x5, 0x46e, 0x100}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r8 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0xb60, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000680), &(0x7f00000006c0)=0x4) openat$cgroup(r8, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) tkill(r2, 0x1004000000016) 13:30:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xfffff000) 13:30:27 executing program 2: mkdir(&(0x7f0000062ff6)='./control\x00', 0x0) r0 = inotify_init1(0x800) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x7, &(0x7f0000000100)={0x0, 0x33, 0x7, @tid=r1}, &(0x7f0000000140)) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xc00) symlink(&(0x7f0000000080)='./control/file0\x00', &(0x7f00000000c0)='./control/file0\x00') read(r0, &(0x7f0000000040)=""/32, 0xa7) 13:30:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:27 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:27 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x77f40000, @loopback={0x0, 0x8}}, 0x1c) 13:30:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf0) 13:30:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80003) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x2000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x34000) 13:30:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:28 executing program 2: rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2, 0x4) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5473, &(0x7f00005ebff8)=0x4000000003f) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x2, r1}) recvmsg(r3, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r3) tkill(r1, 0x15) wait4(0x0, 0x0, 0x60000002, &(0x7f0000000000)) 13:30:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x883d000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf0ffffff00000000) 13:30:28 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x97840000, @loopback={0x0, 0x8}}, 0x1c) 13:30:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x510e000000000000) 13:30:28 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xd490, @loopback={0x0, 0x8}}, 0x1c) 13:30:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf00000000000000) 13:30:28 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4800) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000002c0)=0x9, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000240)={0xffffffff, 0x5, 0x7, 0x4, 0x3}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x12000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000200)=0x4) 13:30:28 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/118) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x20000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x3) 13:30:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) getpid() r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:31 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000471ff8)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f0000000080)=0x1, 0x1000000000fe) 13:30:31 executing program 7: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) dup2(r0, r1) 13:30:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x57b1000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x2) 13:30:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:31 executing program 6: r0 = socket$inet6(0xa, 0x810, 0x8000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:31 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0xff0f]}}) close(r3) dup3(r1, r2, 0x0) 13:30:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x100000000000000) 13:30:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) socket$inet6(0xa, 0x2, 0x3f) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:31 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x600, @loopback={0x0, 0x8}}, 0x1c) 13:30:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) socket$inet6(0xa, 0x2, 0x3f) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:31 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') close(r1) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) 13:30:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x30000) 13:30:31 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x8059, @loopback={0x0, 0x8}}, 0x1c) 13:30:31 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000003c140351000000028000007a0a00fffffffffd63012020cb38f144eebbbb9f3bf1674161ebe2be0ddb20acc0ed8b26345ae00e8afc507e3e97585304de70423f6524fc816b66b4a32a11ae0c1e4dfe8cfc8782021a2f3bf9eeb9ad7b4c9b27d918398762f90d595b023c8c4a22115f4e1867dd530daaf5628c1cdf5437a65476700c0ee22c78a5e2c34fc9fcd9daf280624743a816e079b73c9ad7786840705d59f5251927090000001af25e3b3121889811cae430eb3c12b85367686a968268a269dbdc89a52caac6a162ab050d3825fc16c06a39ede864daf0ba737396"], &(0x7f0000000000)="47504c00bc2e070000004823122000000000000000000000000000", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000085050000000000000000000000000000009500000000000000"], &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 13:30:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x9effffff) 13:30:31 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000410000/0x2000)=nil, 0x2000, 0x2, 0x4c831, r0, 0xfffffffffffffffc) 13:30:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) socket$inet6(0xa, 0x2, 0x3f) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x3634}, 0x4) 13:30:32 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xdf3b, @loopback={0x0, 0x8}}, 0x1c) 13:30:32 executing program 7: r0 = socket(0x40000000002, 0x3, 0x40) r1 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/22) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x80, 0x4) sendto$unix(r0, &(0x7f0000000cc0), 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 13:30:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf00) 13:30:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xfffffffffffffffd, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x2}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280), 0x8) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x800, 0x101) 13:30:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) socket$inet6(0xa, 0x2, 0x3f) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x4000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf) 13:30:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl(r3, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 13:30:32 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x900, @loopback={0x0, 0x8}}, 0x1c) 13:30:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x200000000000000) [ 944.793714] *** Guest State *** [ 944.797256] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 944.806288] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 944.815250] CR3 = 0x0000000000000000 [ 944.819039] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 944.825049] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 944.831080] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 944.837865] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 944.845870] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 944.853890] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 944.861900] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 944.869914] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 944.877931] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 944.886050] GDTR: limit=0x00000000, base=0x0000000000000000 [ 944.894064] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 944.902084] IDTR: limit=0x00000000, base=0x0000000000000000 [ 944.910110] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 944.918135] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 944.924621] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 944.932101] Interruptibility = 00000000 ActivityState = 00000000 [ 944.938359] *** Host State *** [ 944.941570] RIP = 0xffffffff811f4694 RSP = 0xffff880199ecf350 [ 944.947584] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 944.954043] FSBase=00007fb028f05700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 944.961873] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 944.967818] CR0=0000000080050033 CR3=00000001a88d0000 CR4=00000000001426f0 [ 944.974857] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87a01380 [ 944.981552] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 944.987635] *** Control State *** [ 944.991103] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 944.997795] EntryControls=0000d1ff ExitControls=0023efff [ 945.003273] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 945.010223] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 945.016920] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 945.023540] reason=80000021 qualification=0000000000000000 [ 945.029895] IDTVectoring: info=00000000 errcode=00000000 [ 945.035365] TSC Offset = 0xfffffe02c5168255 [ 945.039722] EPT pointer = 0x00000001b83c301e 13:30:32 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x6, 0x2, 0x100, 0x3f}, 0x6) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="000000000f00000000000022c85e9eb2e89d8d0020000000"], 0x20000348}, 0x1}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) fstat(r3, &(0x7f0000000100)) dup3(r0, r1, 0x0) 13:30:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000010003, 0x3) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x6fb47df4fabc687, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x40, 0x1003) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x44) ioctl$RTC_AIE_OFF(r2, 0x7002) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000340)={{0x1, 0x4, 0x0, 0x6, 'syz1\x00', 0x7eef}, 0x1, 0x8dbd0eae38f928b7, 0x80000001, r3, 0x5, 0x7fffffff, 'syz1\x00', &(0x7f00000002c0)=['nodevuser}md5sumsecurity%user.^\x00', '/dev/vga_arbiter\x00', '/dev/vga_arbiter\x00', '/dev/vga_arbiter\x00', '/dev/vga_arbiter\x00'], 0x64, [], [0x2, 0x8, 0x9, 0x7]}) 13:30:33 executing program 7: syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) dup2(r0, 0xffffffffffffffff) 13:30:33 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r3, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xa00, @loopback={0x0, 0x8}}, 0x1c) 13:30:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x1000000) 13:30:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x80000000003, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f000024d000)=0x440, 0x4) sendto$inet(r1, &(0x7f00002df000), 0x0, 0xfffffffffffffffd, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'bond_slave_0\x00', {0x2, 0x4e22, @rand_addr=0xfffffffffffffff7}}) dup2(r0, r1) 13:30:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:33 executing program 7: gettid() r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x40000) r1 = epoll_create1(0x400007fff5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x2007}) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x200) write$P9_RCREATE(r3, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x88, 0x4, 0x5}, 0xd}}, 0x18) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0xfffffffffffffffc, &(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 13:30:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc0505510, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x80000008, 'syz0\x00'}) 13:30:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf0ffffffffffff) 13:30:33 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r3, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbfab, @loopback={0x0, 0x8}}, 0x1c) 13:30:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="02cdea223448920a0c985cc83d6d345f8f762070") getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x13, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x7b, 0x6, 0x8, 0x1, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x4, 0x9, 0x8, 0x328c26d4, 0xa}, &(0x7f0000000240)=0x98) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 13:30:33 executing program 7: r0 = socket$inet6(0xa, 0x1010000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fff, 0x305001) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) 13:30:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc8, 0x0, 0x1000) 13:30:34 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x9effffff00000000) 13:30:34 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x58e5, @loopback={0x0, 0x8}}, 0x1c) 13:30:34 executing program 2: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000000c0)) clock_settime(0x4, &(0x7f0000000080)={r0, r1+10000000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}) 13:30:34 executing program 7: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) ioctl$SG_SCSI_RESET(r0, 0x2285, 0x80fd01) syz_open_pts(r1, 0x802) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 13:30:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x40030000000000) 13:30:34 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:34 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) r1 = semget$private(0x0, 0x3, 0x0) semop(r1, &(0x7f0000000140)=[{0x3, 0x2, 0x1800}, {0x7, 0x8}], 0x2) r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x4000000, 0x80000000010001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) 13:30:34 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x1c, 0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) socketpair(0x8, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x8000, &(0x7f00000000c0)=0x2) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000280)=ANY=[@ANYBLOB="000069d25b0200000000000000647cf005b01a51f49c9b0a93326c7dec5fa8e914898fc783af3a02af9d38b2d8610d435de8aef2b5773c4f", @ANYRES32], 0x2}, 0x1}, 0x0) 13:30:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x60, @loopback={0x0, 0x8}}, 0x1c) 13:30:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x400300) 13:30:34 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xd0a7000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:35 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pwrite64(r1, &(0x7f0000000100)="eca1f3284cbbe26f1fc9008589688a006f888b89dbbeafcee6f16ef3dc8b19c31bf2dffe258806dce44aa4fc28a7d9bc02e42781549d5b3bc4d0dfbaa7eb72808c5ee16346c8461842b8918b0899dd0967ec3c410cbb387e83651565d93bafb897b6bbb2db851fb70600a9f4740d971b879cf9f1f76582c52ab0947794df42246c37f7e7a52e0ad1312dde4ac10fb9bb54bf4d34ea921f37", 0x98, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)) 13:30:35 executing program 6: mlockall(0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) ioctl(r0, 0x8912, &(0x7f00000003c0)="025cc83d64345f8f76224f6d75482e7ac0edf318b614e84839bf7ecdfc44b5f2537ae171d110a75e2bccb069f73eaffa98c8672cfe73d98ba939c43b5fb8dc70885f0f4900b2ecad6c6169d5139f0397847522e57541cd408ce41af8e4ebfe4c037cd253afb21afddc78462a7b651e135cab8949ee708d492eab9ff3459529367e8584599d11eb33bfe30973ca535de4923183ca4954de7fa5ab1dd252bfd666e3be15af7ccd9346c11b1a7ad57b7eae3c3ccc712b8742ed858f0227945b24103fb5ed02f124bb7a4d09fea8cea350d336fb8378fc") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:35 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x1, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x80080) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x47, "0697e16ff1226b0952a39c3c7eb122152e1a25529349b1a1e6c23c804ae35e7b9e87b2b05ca63aa982313ed7336d58f589ce26c1f7ee321fa8c028ad08cb863be4564ee1f05da7"}, &(0x7f0000000100)=0x4f) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r3, 0xef, "573a47d4e75452bd0287301a66b8546d9687f9d09fd8a7773ea84342352f2b4c9ca28ce9c769a1309fe54592b784309d1c29934c692007131c36958f2808dfbd679a3009b25594c4d87eee80f6484608e056078907034abc23da90af59096bf3371095cda4b5319da01da0a6bee7315f1c48aa034453ab2f102bdd7d16fd163ac4c76df787fd9e4dbb9181466a99dd992e410fb63f5879343a5a92ac2ddc0d451793d3b54e583e0ba0b2705f6a2c94316d60b866ff62a969fe8a9a1e2f21bf8002ca3c8a72899d089eec4baa9cb4703e6e14ee5ee060e3e03b67138fe525b168d6d6510d9ab607e4a816cb3899f3bf"}, &(0x7f0000000240)=0xf7) sendfile(r1, r2, &(0x7f00000000c0), 0x2008000fffffffe) 13:30:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x3000000) 13:30:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf0ffffff) 13:30:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:35 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') recvfrom(r0, &(0x7f00000001c0)=""/168, 0xa8, 0x0, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x401, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000080)=0x5, 0x4) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000180)=0x8) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/147) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) io_getevents(0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={0x77359400}) 13:30:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:35 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x8000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/255) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x510e0000) 13:30:35 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x1000000000007, 0x200000) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x10001, 0xffffffffffffffa5, 0x5, 0x80000000, 0x3ff, 0x8, 0x1, 0x40000000000, 0x3, 0x40, 0x200, 0x4, 0x1d2}, {0x30000000, 0x7, 0x80, 0xc0000000000, 0x200, 0x80000001, 0x8, 0x9, 0x5, 0x639, 0x1, 0x4, 0x400}, {0x6, 0xdf2, 0x58a, 0x8, 0x5f7, 0xa329, 0x4, 0x9, 0x2, 0x80000000000, 0x6, 0x40}]}) fanotify_init(0x0, 0x3) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="10e5e9f9b0a333df0473431cc6432b31f25f662f8486257a3f4a406465354ea29ebdbedfda4f1cb985fca6c7dfb2e605fb8c1905b0000f9f2a74ba602420982278853640363b21b5aa05457e69d653f00542905428e5bc550f78f50e057db98619125ecd2a2e705f807e81f2ef1b684f2f3a84fc2fec9e2a05f596cff24cc875f7142f9cf0adb39b173db673ae", 0x8d, 0xf4fe}], 0x1, &(0x7f0000000240)='vmnet0)\x00') 13:30:35 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x2, 0x0) write$evdev(r0, &(0x7f0000000100)=[{}, {}], 0xff89) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/155, 0x9b}], 0x1) 13:30:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x6e37, @loopback={0x0, 0x8}}, 0x1c) [ 948.303975] NFS: bad mount option value specified: vmnet0) 13:30:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf000) 13:30:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:36 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:36 executing program 6: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000200)="319214ac0fc8096fc19f331a15a81a", 0xf) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='bridge_slave_1\x00', 0x9}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc8, 0x0, 0x1000) 13:30:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x6779, @loopback={0x0, 0x8}}, 0x1c) 13:30:36 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5207, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a5ca23c84b64606d029a18e684e218b985a1ff4b233d77a710ed658d356b24a65f54482ff6b0a7bf967d68c0075936a4b07f305aa101e3a361fc9051697e439f8ce058e6b55d5cbcdd91dadbb0f99f8ed799f970ebc44f6da8562891ca0b78617921fab81a19a4e305a3b02280916158fcd3842765a4e650f47580c7e9f1f09cba60f6786ee72064cd54c9e4081453b469819250b357e865215edcf15c0eddf2ee63a4fab3c89f818614fa7f327e4e38918f2367a82350c104b74dcb5b9df9296391f043a183ad8c05b6681019f3c37c54f31c587205bad18154e174ea1269662b433a7cd336dab078f4ca6c5deb1c4000000000000"]) 13:30:36 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x40800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='cgroup\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) connect$packet(r3, &(0x7f0000000640)={0x11, 0x10, r4, 0x1, 0x100000001, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x1, 0x94f5f6ce8754c28e, 0x400}, 0x80000000, 0xd32, 0x4}) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) io_setup(0x5, &(0x7f0000000900)=0x0) io_submit(r5, 0x4, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc000000000, r0, &(0x7f0000000100)="91fcf300b08c9ede696f1f2860d167fdbff0356c29756e74af39647f83053cde2e2bd0bae037676633ad5de7c9", 0x2d, 0x6, 0x0, 0x1, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0xdc, r3, &(0x7f0000000200)="07a16df9489945b8312753862a99281883c22d7d60ae20bae89e", 0x1a, 0x5, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x8, r3, &(0x7f0000000280)="aa5a872f8a836d09e0467f692efe16eaeae66a8e04dec8ae7a94289d8f0d63d4c84ba83c92b5820eb08347bc64aa7fd4574ba01da26c10abe19075b7ef483679ceb4bf201719cd6cbd", 0x49, 0x0, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xff, r3, &(0x7f0000000340)="6a7ecf40c44812c47f763c6aed3f71357a21b3fd5152df6ea86a51f5cfac837d951d5ac2650d76114ea05d3449c417216dd5de4bddfa9535bd442ffb3bee0d7efe8a09e4040ba808d8896b03cc58b25c84313d30171b7f1f8bf8efb9eb201d4312284ef9647775bb8e769653ded551887d82ec01ee92d523ea8daa7f27a8552576d96adbcd68dc1e173a1c41d07d10ed8077214072069ccdeda5fd69436a8841bac74ebe29ca0b4392403fedac5750863ed1d486ac14e39d496490b053b44626ab3b6dbe85b320fa20867ff3542b1be08e60cd1dbd1cecbaeb34f8a6b63a0dd5cf063307464b5a9a282c73a123bb9885bbc0", 0xf2, 0x8, 0x0, 0x0, r3}]) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000540)=""/166) 13:30:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x300) 13:30:36 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x8001) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000040)="025cc83d6d345f8fe2bcfc848726792a856a26260922cc762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x548000}, 0xc) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/120) dup3(r0, r1, 0x0) fcntl$setflags(r1, 0x2, 0x1) 13:30:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x9f680000, @loopback={0x0, 0x8}}, 0x1c) 13:30:36 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x14) 13:30:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xffffff7f00000000) 13:30:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf037, @loopback={0x0, 0x8}}, 0x1c) 13:30:36 executing program 2: socketpair(0x13, 0x100000, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0x97, 0x4, 0x70, 0x0, 0x1}, 0x27) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x9) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002d80)={r1, &(0x7f0000000000)="a5", &(0x7f0000002cc0)=""/182}, 0x18) 13:30:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x180, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0xa849) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040), 0x1, 0x0) 13:30:36 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:37 executing program 2: r0 = socket$nl_generic(0xa, 0x2, 0x11) bind$netlink(r0, &(0x7f0000002ff4)={0xa, 0xfc, 0x0, 0xffffffffffffffff}, 0x4f) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) 13:30:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x3000000000000) 13:30:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000040)=0x31e, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xffffffffffff9f1d}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r4, &(0x7f0000000240)=0x4) sendto$packet(r2, &(0x7f0000000300)="15", 0x1, 0x0, 0x0, 0x0) 13:30:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0xffff, 0x2) msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028f9ffd02713d840475f01f4fbd19cdf000000000000000000000000000000000000000000000000000000000000000000000006000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) r2 = dup2(r0, r0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000100)) 13:30:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7c, @loopback={0x0, 0x8}}, 0x1c) 13:30:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:37 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") get_thread_area(&(0x7f00000001c0)={0x0, 0x1000, 0x0, 0x10001, 0x1, 0x1, 0x401, 0x20, 0x6, 0x619}) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f00000000c0)={[{@noattr2='noattr2', 0x2c}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x48400, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@gettaction={0x148, 0x32, 0xb04, 0x70bd2b, 0x25dfdbfd, {0x0, 0x8, 0xffff}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x1de9}}, {0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0x6592751d}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8, 0x3, 0xae}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0xa4, 0x1, [{0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xc, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xd, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffff8}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x16, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x18, 0x20, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 13:30:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf0ffff) 13:30:37 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:37 executing program 0: mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3f000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:37 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000240)=0x7ff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x2, 0x7d}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"6ef240fbaeb9e8b61a00"}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x2, 0x0, &(0x7f000000b000/0x3000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 950.111250] XFS (loop2): Invalid superblock magic number 13:30:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xe51) 13:30:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x6307, @loopback={0x0, 0x8}}, 0x1c) [ 950.208409] kvm: pic: level sensitive irq not supported [ 950.220424] kvm: pic: level sensitive irq not supported [ 950.226662] XFS (loop2): Invalid superblock magic number [ 950.238132] kvm: pic: level sensitive irq not supported [ 950.240827] kvm: pic: level sensitive irq not supported [ 950.268945] kvm: pic: level sensitive irq not supported [ 950.283791] kvm: pic: level sensitive irq not supported [ 950.290126] kvm: pic: level sensitive irq not supported [ 950.298477] kvm: pic: level sensitive irq not supported [ 950.304732] kvm: pic: level sensitive irq not supported 13:30:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f]}}) close(r3) dup3(r1, r2, 0x0) 13:30:38 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:38 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6400000080ff17000065792c7569643d0400000075672c6572726f349eae7ff44b00b66e742d72602c64656275672c73686ff7657865632c646973636172642c666c757368"]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x0) close(r0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@any=0xffffffff}) 13:30:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xfffffffffffff000) [ 950.312571] kvm: pic: level sensitive irq not supported [ 951.006754] FAT-fs (loop2): Unrecognized mount option "d" or missing value 13:30:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100, 0x10002) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:38 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cfb(twofish-asm),ghash-clmulni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) tee(r0, r0, 0x8, 0xa) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002a80)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)="3075aac8b832617e7bb273ef5841cb21", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x240200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001300)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) bind$packet(r3, &(0x7f0000000180)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:30:38 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x28da000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0xf000000) 13:30:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:38 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000009c20ee930f7874"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0001000200001500000008000300210000001000000000"], 0x1c}, 0x1}, 0x0) 13:30:38 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5f95000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:38 executing program 7: io_setup(0x2, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000000040)) io_setup(0x6, &(0x7f0000000140)) io_setup(0x5, &(0x7f0000000100)) io_setup(0x3, &(0x7f0000000200)) 13:30:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) close(r3) dup3(r1, r2, 0x0) 13:30:39 executing program 4: mq_open(&(0x7f0000000000)='procppp1lQ\x00', 0x80, 0xd4, &(0x7f0000000040)={0x2cd, 0x10000, 0x4, 0xab65, 0x24, 0x0, 0x0, 0x2}) 13:30:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:39 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:39 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:39 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x32, &(0x7f0000000140)={'nat\x00', 0x2, [{}, {}]}, 0x48) close(r2) close(r0) 13:30:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4) 13:30:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:39 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x14d5, 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x4}}, 0x1, 0x3}, &(0x7f0000000480)=0x90) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000004c0)={r1, 0x4}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x400, 0x3, 0xdda, 0xff, 0x6, 0x2, 0xc000000000000000, {0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x9, 0x3ff, 0x5, 0x88}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={r4, 0x5f4}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={r4, 0x8000}, &(0x7f0000000380)=0x8) write(r2, &(0x7f0000000240)="7dce47dbf3c73c15bfd145914e7771f9151aef72bafd65d203e176a658597da80a8a9dc3dd3c5e22985aa291dc3c7701fd08b2f0b608a426bfe549fb62de5c8256f0aa4aabd5256141013bec8359251455aa4abee5fc4d23ec4d84b06ed85401d661ea4ffefa9e20ec81e62ed805a9171ef4995e6cc9949d65198041c3112586f136ed91d1ca4ace080ccc6bc39844b0c6b32cd3dbd42fe58312744750c2b5d8bbaf41876c932d9cf47531bdc5045002296fc6f809903dabd52c0b2b86e7662b0acdde49", 0xc4) 13:30:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0xc00, 0x70bd27, 0x25dfdbfd, {0x4}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x40000) 13:30:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc3c8, @loopback={0x0, 0x8}}, 0x1c) 13:30:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x6779000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0xf0661679d5dbb1be, 0x0) 13:30:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x28, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r1, 0xdf}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000300)=@random={'trusted.', '/dev/kvm\x00'}) connect$rds(r3, &(0x7f0000000340)={0x2, 0x5, @broadcast=0xffffffff}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) 13:30:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0000020000000000000000000000"], 0x10}, 0x1}, 0x0) 13:30:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x3, 0x7, 0x6, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = semget(0x3, 0x3, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000001380)={{0x0, @broadcast=0xffffffff, 0x4e24, 0x1, 'sed\x00', 0x2a, 0x98b5, 0x2a}, {@broadcast=0xffffffff, 0x4e22, 0x2000, 0x1, 0x1ff, 0x44}}, 0x44) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000001240)={0x5, 0x80000000, 0x5, 0xfc0, 0x4, [{0x80000000, 0x7, 0x7fffffff, 0x0, 0x0, 0x4}, {0x1, 0x4, 0xea, 0x0, 0x0, 0x1000}, {0x7, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x4b22, 0x100000000000000, 0x13, 0x0, 0x0, 0x600}]}) semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000240)=""/4096) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000200)={0x3, 0x0, [{0x0, 0x0, 0x18df}, {0xffff, 0x0, 0xcb}, {0x9, 0x0, 0x101}]}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000001340)) accept4$inet(r1, &(0x7f0000001400)={0x0, 0x0, @loopback}, &(0x7f0000001440)=0x10, 0x80000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4100, 0x3c) getsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:30:40 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:40 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001340)=[{{&(0x7f0000000bc0)=@rc={0x1f}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000040)}}, {{&(0x7f0000001040)=@ax25={0x3, {"47fb777d4f3f6b"}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)="4c629d550c967109ba6a33c6e12f39dc36267a28aec15e15c2c213271c38d45aae", 0x21}, {&(0x7f0000000440)="8ac688d4f970e22767ccca453f9eae1066eff60958f865fe6de2a527657be5af60ab58527fc5420d024d79aff0a7bf09b8a9769ee93c4eb8e580ef6b07957d00a38fb8fd80fa191049c1c83aca4c77effc34ad00102ca147293b95621be82aaaebba66b22c963c5306347df5e771ef317f3f9156ad46ecc2b69bacbedf0fd8b2d470902fc85ece5179a56860b51ea3cab9ce7e18654c79468fb7a4fb8f2c86aa55888ea12214c619db1c97db356cc38c40226b55febfa9d257653fff32ac341e56d5ce5fb82c80d322ea3840b4165351bcae5bfb985a5904a67f411e99a59ac63bbc5192d4e8c7454390bb3a0c82f288da0803c773", 0xf5}], 0x2}}], 0x2, 0x0) 13:30:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xef03000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:41 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x161, 0x1d, 0x300, 0x0, 0x0, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 13:30:41 executing program 7: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="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"]}, 0x2a8) 13:30:41 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7fd8, @loopback={0x0, 0x8}}, 0x1c) 13:30:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:41 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 954.023212] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 13:30:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000004fd382da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002892f13d7f21aca1a8745d75ce877a00000000000000000000000000000000000000000000001100000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:30:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/186) 13:30:42 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback={0x0, 0x8}}, 0x1c) 13:30:42 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x20000000) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x2, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:42 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x48b8, @loopback={0x0, 0x8}}, 0x1c) 13:30:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x0, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:42 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x20000000) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:42 executing program 4: r0 = memfd_create(&(0x7f0000000000)='selinuxeth0\x00', 0x1) write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0x4f}, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:42 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = msgget(0x0, 0x400) msgrcv(r1, &(0x7f00000002c0)={0x0, ""/230}, 0xee, 0x3, 0x2800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x800000000000, @empty, 0x5}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000ff0006abde512a2f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:30:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:43 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x0, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:43 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x20000000) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x40080, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sysfs$3(0x3) sendto$unix(r1, &(0x7f0000000300)="47fa84f9482dfefb5febdfb3f934662ad56b1499331e99ad78e347b67fbcee04f6083c61d1550e68c1a4b8555377136c7d83746c13b1ec44be624902d23e260558202850130dd58a6d54bcd3e0e449928c0bdf320f6d550b7fb3cc0918924f0a027ea945b7c73b47331c1170c08cb45ba89309d95923c0d7f76add38cd4aa132c19e8ade4f7d91dd6aeba0f74b4d065d112d6128932ff891eb553de60d4bf4aafee25625c902660ff53730ee02a7221121a0bedee76159", 0xb7, 0x24000810, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) 13:30:43 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3bdf, @loopback={0x0, 0x8}}, 0x1c) 13:30:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000027c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50244000}, 0xc, &(0x7f0000002780)={&(0x7f0000000300)={0x2444, 0x39, 0x210, 0x70bd25, 0x25dfdbfd, {0x18}, [@generic="a1a94f9ffbf8fc6edfd96117f6b27b4e7b4c076657af9465bb253227c72e063193d4a7e9af2f8956c6b38db3be00af6f5a10cf013ca43068756934b9336badf8b4f7b3d395ab30fa37cb2dbe9f8776e0304e6dcee8b9755adbfff104eaaba13962f826c6e1adcae831a443476f5087f18ab6dd1f9aaeca304ea0bf992620ae32e10db89430d803346d8675f4da5c1744322ee3c80f9e79032187cd876078e04c6045e99b1aedec0f35dadcb3054f6391c74c5b1210a72ff704f52ed974908a101d430887b529d45086aec1a043d38ce1272361e44d93ef2122b799f54871d8f57793d28d191f4ddfed404885", @nested={0x2200, 0x8f, [@typed={0x8, 0x3a, @ipv4=@rand_addr=0x6}, @typed={0xc, 0x96, @u64=0x7}, @generic="7eb72aa68fc25eae549bd8f4422a0e1c70e06783249eb55b2cf6f5cbcfc113a87cff260e414f5e52cab962d6ca5cb58ffb75678470ebb071ac922a37f8378b8ce593cdf2d7c975e782fbda797c6cc947a4540ed534572ec016b6d39616c0745990119fb161314c6659c3525c0bec875c528386a218d205a4a4229ef4bfa4d9ee3b4d373fc49cf9327c3f95463bb8527cf336d6026b161aed83bf7e70b23fa699a1b8194d6d2bbd07ce0dd67e13975a43c44168c481e2341d2493ea7666c95eac93b28853f8", @generic="7217c076a1", @generic="7e8f186e05a0525a9f3a1e0bc3ca1f05758bc5fb8b3d305e6b4df67696a0ea1231d2aa53d5225639fddc24cd3c1d9fcdb48895074866fd7125940375eb539f6cbcb00de89b48349f2d42adf416cf4ca726623b8a94045d1053f453c5f70e5b57a4472ebad708a737dc97f716b16c43d2380363f2a501f2b05d4e3b7ad7f32f87fac46d2f0acd7bf135fd48e1dfd31b5ead607a40fcfb8634f2aa8a7b80c6f0fdaf56c52d641f31fbd6b3d4225e4790b8c5c8ecba5c4b3d", @typed={0x14, 0x24, @str='cgroupppp1\\}\x00'}, @generic="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", @generic="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", @generic="727f8b8584966d2bd21d9f65a7d9d5d1a4ccf5b71a7f99953c52a633262d14e9dc1a880408edfa6c59f55261b7e8b052502038bfeb77f9205308e28955c6dd071884da6ff64f419507b03455e325daaa"]}, @typed={0x8, 0x23, @uid=r1}, @typed={0xc, 0x14, @u64=0x7}, @typed={0x8, 0x5a, @uid=r2}, @nested={0x18, 0x85, [@typed={0x8, 0x28, @fd=r0}, @typed={0xc, 0x7a, @str='}em1em1\x00'}]}, @nested={0x44, 0x8e, [@typed={0x8, 0x38, @uid=r3}, @typed={0x4, 0x80}, @generic="3c67d1891766525c202db16a447757919f9da7386b5054cac1108be3dc9bd4afceb72a71c5ea3286dec37eb34015c4284013e909"]}, @generic="6b7316c080216b79de104904ac3ebe159e481ef9b5a000e3d76d4b6b48417a01b750463cd093ae47eb6632f3e9c55cef37fac61175a486ae39c32fb4918c770ba1c8f2b4191700879c1cc4113f4cd2dd1168de084ac304b015e5a0ce3a223a1c7adde5cd7d1e43886887314039791737a97de7ea2318f99a67ed6bcf226aac7cb36b1d7e0cf8d378667fdc5a4d4977f9f5dacbe3d38bb28f57000d1ec1025330b72741e990fddb4498427ffbae", @typed={0x14, 0xe, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0x8, 0x42, @u32=0x1}]}, 0x2444}, 0x1, 0x0, 0x0, 0x4000}, 0x40) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000002800)=0x2) 13:30:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x0, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:43 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:43 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x53e8, @loopback={0x0, 0x8}}, 0x1c) 13:30:43 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x20000000) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r0}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001d00010000000000000000001500000008000300210000006db36e3a6376e726a7aeb635d3bf65439d4651384701614f4e0657f76ed2850c3df5c17d84a2f062c789f99e20a90e90f2bbbaf54d586e318a84cbeff7ed0248140e6d3010b0306f52a4414c507d795505"], 0x1c}, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf25030000000400050008002000000800e8ff01000000040005000800040001000000000000000000000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) 13:30:43 executing program 6: r0 = socket$inet6(0xa, 0xe, 0xffffffff00000001) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xc8, 0x0, 0x1000) 13:30:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x278, [0x0, 0x20000180, 0x20000288, 0x200003c8], 0x0, &(0x7f0000000140), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x0, 0x4, 0x9b6c, 'rose0\x00', 'veth1_to_team\x00', 'bpq0\x00', 'syz_tun\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0xa8, 0xd8}, [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x1, 0x881e2cd9156dcd08, 0x1, [{{{0x7, 0x1, 0x1b, 'veth1_to_bridge\x00', 'syzkaller1\x00', 'veth0_to_bond\x00', 'nr0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0x0, 0x0, 0x0, 0xff], 0xe0, 0xe0, 0x110, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x5}}}, @cgroup0={'cgroup\x00', 0x8, {{0x100000001, 0x1}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x2f0) 13:30:43 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x20000000) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:43 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:43 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1000000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x2040) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 13:30:44 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4086000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(r0, r0, 0x80000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d0075c5d075010000000000000000001500000008000300b3e614147cb02e"], 0x1c}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xbc7}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r2, 0xfffffffffffffffc, 0x10, 0x100}, &(0x7f0000000240)=0x18) 13:30:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:30:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:45 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:45 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x300b, @loopback={0x0, 0x8}}, 0x1c) 13:30:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x2) r3 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x292000) r4 = memfd_create(&(0x7f0000000400)='%\x00', 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x200000, 0x0) io_submit(r1, 0x4, &(0x7f0000000580)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000000140), 0x0, 0x3f, 0x0, 0x1, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xffffffffffffff7f, r0, &(0x7f0000000200)="98686170cfd8f2b3d45951d11c0cb9fc9561226f49ba318dafcc0e84d4c2202250ba639460bd48d93ac652d82b54471a88e6dacaca46722a0279ac2a7a9123996ad26c3d7d21d6be6b07fba5c4d29efdcc60d00d7668942f92e4d08215e69655c8a9c18903f13f419c7527753bf635092b1c0010621666096d6c2ad355e576d025097334d552ab2e5ceac55a56680293aa06eb8e453095092e26ec273cbeed849cb9d2409fadd947a81762c3403528bc8e3da08c589724308ffa783e1cd7c043ed4e297f6d9f355361bac16de36cdfba01", 0xd1, 0x95, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, &(0x7f0000000380)="b8f95a168f08fc1ddeaade4582cd11d3af59724db50f80163b18e29dcdf13e06c2d00a11637cf3cea872352bf4299d16107dccf5f260b514750ee2692473303ea411e860e95973ac", 0x48, 0x6, 0x0, 0x1, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xf, 0x1, r0, &(0x7f0000000480)="f43595eb0d951b1eca54c57cf0bc6368455f2e93add26b7ef865b26cf98126fd68828722340f6a58ef5003b5746106c712ef97fdc3b8afb75f92e55750f34c9759bed80953d76c50eb3f10153c17cf399bae77cfff", 0x55, 0x1e326a54, 0x0, 0x1, r5}]) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xfffffffffffffe52}, 0x1}, 0x4000) r6 = accept4(r0, &(0x7f0000001600)=@nfc, &(0x7f0000001680)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001780)={0x0, 0x94, &(0x7f00000016c0)=[@in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, [], 0xc}, 0x6}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0xffffffff, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffff7fff}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x13}, 0x6aec5c10}]}, &(0x7f00000017c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001800)={r7, 0xffc}, 0x8) 13:30:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:45 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfc00000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:45 executing program 7: socket$inet6(0xa, 0x6, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x20, 0x40000) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2) fcntl$addseals(r0, 0x409, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x2800000000000000, &(0x7f0000000140)=0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) 13:30:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc810000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:46 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x440, 0x0) lseek(r0, 0x63, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:46 executing program 7: socket$inet6(0xa, 0x6, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x30}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x706, 0x5, [0x18, 0x1f, 0x6, 0x3, 0x141d]}, 0x12) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x4, 0x1e, 0x14, 0xb, 0x0, 0x8000, 0x6, 0x8a, 0x1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x14200, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x80) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc}) 13:30:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4e50, @loopback={0x0, 0x8}}, 0x1c) 13:30:46 executing program 7: socket$inet6(0xa, 0x6, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = geteuid() sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0x15}, [@typed={0x0, 0xf, @uid=r1}]}, 0xffffffffffffff49}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13:30:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5f18, @loopback={0x0, 0x8}}, 0x1c) 13:30:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x101, 0x408002) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0001000000000000000000150000000804000000000000"], 0x1c}, 0x1}, 0x0) 13:30:47 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be8517c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:30:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7c00000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:47 executing program 4: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xf, 0x1000, 0x2, 0xb8f, 0x3a, 0x1, 0x6}, 0x2c) r2 = dup2(r0, r1) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000000)=0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000041dee00000000000000000000150000000800030021000000"], 0x1}, 0x1}, 0x0) 13:30:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}}], 0x18) 13:30:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 959.641949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:30:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:47 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x58e50000, @loopback={0x0, 0x8}}, 0x1c) 13:30:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xffffffff, 0x484000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @dev}, &(0x7f0000000180)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000480)={@empty, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x188, r2, 0x0, 0x70bd2a, 0x25dfdbff, {0x1}, [{{0x8, 0x1, r3}, {0x16c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xb3}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x10b}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x575a29ff}}}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) 13:30:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d34") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}}], 0x18) 13:30:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d34") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000009eb453eb0530397f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ed99f90a107c01cbc6c000000000000000000000400000000000000000000000000000000000000000000000000000000f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:30:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe8530000, @loopback={0x0, 0x8}}, 0x1c) 13:30:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:48 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}}], 0x18) 13:30:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d34") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004900)='/dev/uinput\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000004940)={'nat\x00'}, &(0x7f00000049c0)=0x54) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) close(r3) dup3(r1, r2, 0x0) 13:30:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) accept4$inet(r1, &(0x7f0000000200)={0x0, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80000) getsockname$inet(r1, &(0x7f0000000180)={0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x10) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000140)={0x3, 0x6}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x800000000000, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/245, &(0x7f0000000380)=0xf5) 13:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f76") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:48 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x3, 0x1000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x33d) 13:30:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f76") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x5, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfeffffff00000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:49 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:30:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10400, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x3, 0x2, 0x4}}, 0x14) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000009000100000000000000000015000000080003002100000085aaa6148e4aaa57b9c38bd5268821f268de85476b43ce2962e14a521a7df709000038e9077dabb70945dfc2c496721bd7271b3e32b23d9af9356abd13c8afb405511a756a8e1eb898e0f70f1b07f471e9cb69bdd1603cdcccdcadfcc0ba99f68fe236916255f28463e5"], 0x1c}, 0x1}, 0x0) 13:30:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f76") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x0, 0x2}, {{0x77359400}}], 0x30) 13:30:49 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xb848000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:49 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x24040) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x3f, 0x7, 0x4, 0x6, 0x8, 0x6, 0x3, 0x0, 0x8, 0x3, 0x4}, 0xb) 13:30:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f7620") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0000000000000000000000098e62bd2a36611a9bea6ce59d1b482e6752e1ce3131052f919888f73c455ac75d8ff636fbcd0549b9e052b06ec6") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x100000000000, 0x1000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r1, 0x4) 13:30:50 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00000000020015fdffff0702030021000000000000006100000000b343e7bd7f8c38067fe5c0f2a789063032bb543ffb95d939508930185d23d777ab2c0130a44bda99"], 0x1c}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x64, r2, 0xd04, 0x70bd27, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff80000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb16}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) 13:30:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x0, 0x2}, {{0x77359400}}], 0x30) 13:30:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:50 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x2f8a0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f7620") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0001000000ff7f00000000150000000880b2956f2afbc1"], 0x1c}, 0x1}, 0x0) [ 963.186110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:30:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f7620") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x0, 0x2}, {{0x77359400}}], 0x30) 13:30:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xd0a7, @loopback={0x0, 0x8}}, 0x1c) 13:30:50 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00002100000000010180000007951f1c491c007649e82430f020fbf29db5adb2042dffffffff4d093809581acea56c8ddec46bb6ee43f12ddbae0098b2695ca7ba19083561ebe843969dfefe18e8c369293d3ffe597620a76e30a44c"], 0x1c}, 0x1}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x7fff) [ 963.231152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:30:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55}, {{0x77359400}}], 0x30) 13:30:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:51 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$void(r0, 0x5451) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000180)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000c5f939c22030916fca786cd3e9b8fd872be22bb4b91589cf20db0235ef8910244d04f389226bb114929cdbc6c40d6b8568aa12ddb24077db4a74a26fe2b6e8534fb07544bbbe37000000000000000000", @ANYRES16=r2, @ANYBLOB="00002bbd7000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400b2760000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x5, "94281f200f"}, &(0x7f0000000240)=0xd) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000500)={r5, @in={{0x2, 0x4e24}}, 0x5, 0x5}, 0x90) 13:30:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0x0, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:51 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:51 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x73cf, @loopback={0x0, 0x8}}, 0x1c) 13:30:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55}, {{0x77359400}}], 0x30) 13:30:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55}, {{0x77359400}}], 0x30) [ 964.248764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:30:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:51 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:51 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7eff, @loopback={0x0, 0x8}}, 0x1c) 13:30:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) write$vnet(r0, &(0x7f00000002c0)={0x1, {&(0x7f0000000180)=""/170, 0xffffffffffffff65, &(0x7f0000000240)=""/83, 0x3, 0x6}}, 0x68) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x77) [ 964.323548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:30:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}], 0x18) [ 964.616838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 964.629869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:30:52 executing program 6: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000200)=0x100000000, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x3, 0x5f99) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010f47add9ae5"], 0xc8, 0x0, 0x1000) 13:30:52 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:52 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x57b1, @loopback={0x0, 0x8}}, 0x1c) 13:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0x2b2, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x16, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 13:30:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}], 0x18) 13:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x2) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000140)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000dc0000)={0xffffffff80000013}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000939ff4)={0x2000201f}) epoll_pwait(r2, &(0x7f0000dc7fc4)=[{}], 0x1500, 0x0, &(0x7f0000dc7000), 0x8) 13:30:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}], 0x18) 13:30:53 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x17de, @loopback={0x0, 0x8}}, 0x1c) 13:30:53 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:53 executing program 4: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@typed={0x4, 0x18}]}, 0x18}, 0x1}, 0x0) 13:30:53 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b']}) 13:30:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xafe3, @loopback={0x0, 0x8}}, 0x1c) 13:30:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80}}, 0xf0) 13:30:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10200, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/209) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'os2.', 'wlan1:selinux/\x00'}, &(0x7f0000000040)='\x00', 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000e60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000"], 0xc8, 0x0, 0x1000) 13:30:54 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)="696c6c696e6f697300755b78d018def5e0c266c028d7c6502e0dea439c98e589db3d27b5a0ae4b0c19a9c149e423ef7ef3c2fcf254d2dbd0c3bbe8a7d58276b9051f0a065470d400a35d0f5994f1fbbf25000000000000000000", 0x21e) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x800000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0x5c60db85c3269ea5, 0x20020007, &(0x7f0000000000)={0x2, 0x1, @loopback=0x7f000001}, 0x10) 13:30:54 executing program 2: unshare(0x60000000) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/148) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/1, 0x1, 0x2, &(0x7f00000002c0)=@abs={0x1}, 0x6e) accept$inet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x10) 13:30:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3647, @loopback={0x0, 0x8}}, 0x1c) 13:30:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c7f0000001d00c2f29cac000000000400150000000000"], 0x1c}, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x2) 13:30:54 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:54 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}) close(r3) dup3(r1, r2, 0x0) [ 966.778215] IPVS: ftp: loaded support on port[0] = 21 13:30:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) 13:30:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, 0x0) 13:30:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7800000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:54 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:55 executing program 2: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8812, &(0x7f0000000480)="14945dbcb870d0376b8eff6adb1b4fb6f2e8c943784b482a484b366deb05f496fc70d1") r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x1000000000001, r2}) r3 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r1, &(0x7f00000ddff8), 0x102000000) close(r1) clock_gettime(0x0, &(0x7f0000000540)) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) getgid() getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1155}, &(0x7f0000000140)=0x8) 13:30:55 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0001000000003cad3321373a5893002100000000000000"], 0x1c}, 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xd4043, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host=0x2}, 0x10) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 13:30:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x98b80000, @loopback={0x0, 0x8}}, 0x1c) 13:30:55 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() capset(&(0x7f00000001c0)={0x20071026, r1}, &(0x7f0000000240)={0x1, 0x4, 0xa7, 0xff, 0xff, 0x9}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x28000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r3, 0xe}}, 0x10) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00002616fd1e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000001000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xc8, 0x0, 0x1000) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1000, 0x3, 0x10000, 0x3, 0x0, 0x2, 0x6, 0x10001, 0x29a, 0x38, 0xf3, 0x9, 0xffffffff, 0x20, 0x2, 0x3f, 0x400, 0xffff}, [{0x7, 0x5, 0xdad2, 0x0, 0x8e6, 0x46, 0x3e, 0x3f}], "351331616a0e223d739783284dcf23818d95b255d56972e3a129ac215f47f196f20c4efffc05efd49da0f97a33c30efea100ea06a5734a3d89c28361339e26003bd6e9a5f246f93304a9", [[], [], [], [], [], [], [], [], [], []]}, 0xaa2) 13:30:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80}}, 0xf0) 13:30:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r1, 0x200, 0x70bd28, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x85}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x12}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x411cda0c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040c4}, 0x20000000) 13:30:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 967.566049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 967.578159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:30:55 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x50000, @loopback={0x0, 0x8}}, 0x1c) 13:30:55 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0x5, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xa09c0000, @loopback={0x0, 0x8}}, 0x1c) 13:30:55 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:55 executing program 2 (fault-call:9 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:55 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x20000000008003, 0x100000000044004) recvmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/192, 0xc0}], 0x1, &(0x7f0000000380)=""/20, 0x14, 0x101}, 0x8df88078067586f5) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, &(0x7f0000000400)=0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x13, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xff00, @loopback={0x0, 0x8}}, 0x1c) 13:30:55 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 968.173963] FAULT_INJECTION: forcing a failure. [ 968.173963] name failslab, interval 1, probability 0, space 0, times 0 [ 968.185380] CPU: 1 PID: 23799 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 968.193867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.203202] Call Trace: [ 968.205776] dump_stack+0x1c9/0x2b4 [ 968.209386] ? dump_stack_print_info.cold.2+0x52/0x52 [ 968.214579] ? lock_acquire+0x1e4/0x540 [ 968.218545] ? get_pid_task+0xd8/0x1a0 [ 968.222525] should_fail.cold.4+0xa/0x11 [ 968.226592] ? lock_release+0xa30/0xa30 [ 968.230578] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 968.235725] ? find_vpid+0xf0/0xf0 [ 968.235747] ? __f_unlock_pos+0x19/0x20 [ 968.243319] ? lock_downgrade+0x8f0/0x8f0 [ 968.243333] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 968.243345] ? proc_fail_nth_write+0x9e/0x210 [ 968.243354] ? proc_cwd_link+0x1d0/0x1d0 [ 968.243365] ? lock_acquire+0x1e4/0x540 [ 968.243378] ? lock_acquire+0x1e4/0x540 [ 968.243387] ? fs_reclaim_acquire+0x20/0x20 [ 968.243395] ? lock_downgrade+0x8f0/0x8f0 [ 968.243406] ? check_same_owner+0x340/0x340 [ 968.243414] ? fsnotify_first_mark+0x350/0x350 [ 968.243421] ? __fsnotify_parent+0xcc/0x420 [ 968.243436] ? rcu_note_context_switch+0x730/0x730 [ 968.296963] ? fsnotify+0x14e0/0x14e0 [ 968.300838] __should_failslab+0x124/0x180 [ 968.305055] should_failslab+0x9/0x14 [ 968.308845] __kmalloc_track_caller+0x2c4/0x760 [ 968.313500] ? strncpy_from_user+0x510/0x510 [ 968.317895] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 968.323415] ? strndup_user+0x77/0xd0 [ 968.327204] memdup_user+0x2c/0xa0 [ 968.330726] strndup_user+0x77/0xd0 [ 968.334351] ksys_mount+0x3c/0x140 [ 968.337886] __x64_sys_mount+0xbe/0x150 [ 968.341848] do_syscall_64+0x1b9/0x820 [ 968.345718] ? syscall_return_slowpath+0x5e0/0x5e0 [ 968.350631] ? syscall_return_slowpath+0x31d/0x5e0 [ 968.355552] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 968.360646] ? prepare_exit_to_usermode+0x291/0x3b0 [ 968.365660] ? perf_trace_sys_enter+0xb10/0xb10 [ 968.370315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 968.375144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 968.380316] RIP: 0033:0x455ab9 [ 968.383503] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 968.402632] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 968.410346] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 968.417889] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 968.425225] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 968.432480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 968.439728] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000000 13:30:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000001840)={&(0x7f0000000000)=@ax25={0x3, {"03e26771533acd"}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000080)="ebce56487573e30f48c2e0e9c066438d49a966e69a34cf619b9649916e9e146ac618ee3a870f5a815ad9d469b924a8643665194cd19ea7d0278c2136dc8306d147f542dd46e9dbbc52615b9e327960165b6e98e1c2c2c28842b226f0d8afdf42d0446d662ed2acf4b11c2c051e62c30fc3735dc8df2f8f4e", 0x78}, {&(0x7f00000002c0)="1c8dd8e61908071dd15f3f48059f73eadddc66612bc4e0c4d4e84b2e897757308b7b973cd71a76cd9833c551ac1b0389754f09ebbdb9a1f1ec9d998b8b109d1c05502d5be745dd6410e7ce2f2771d682818c83e10d431153f7e891df647f99d821f2a899f4f897d6eb3d030b71fe382a03e7d754ff6b9c3048913a7468a944967fea667671bb8c0d5a89cbb21f399acb41fa74e9364c46899f36e6407f84166d2ce327728bd9daa44d01d8a1e46df15774117ccf30ae932ae2442a02028d91f38031ab7d2e06fb0b1d318634756c2eb3d419bd3d5bc06f86db53042bfb3c82a037", 0xe1}, {&(0x7f00000003c0)="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", 0xfb}, {&(0x7f0000000200)="2a4aa0c8b6478ec5cf50c7e73b44fe6389f8ba3eb0f069b5c05120b153c8eaebd419b53821e03eb0bc347ec34ab95954caaec14920940540cdaf3d810539d151db46722cb342976bf39a5d68c2a802454630889ee7cabc9a361d19d321405f1ed59eedb0ae758e", 0x67}, {&(0x7f00000004c0)="241700184abaddfbb4251115b41feb087115a81b4e7a2bccf5d770dbd55053c666dc4ea141384fefbfcc5c3908cb4bfe48413354164f6fa10689ad61a7f34395934e1f190b7d41f360c05c55f063323990ed71839cd0c693ca77b5e13b4dc0c9ce2f77134ae5b46e55afab9b533942cea6a0385388dbfba725483eae8031", 0x7e}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="f9599c146e389d753338880d2780b7cfc9e14183b73c5a395f1e381574bda1c27da7829a3013a180ea166f8bd6ebd3084187aecbde11320e059fd35fbe4f8fa69f9c5b7e472c10584b422d86948b1640f061b89cc47890ece0fd9bdb828bfb4e912caed70f56e4c034fc7ea911f396276b3d398c2b334ee513a6d18d59e6ad97a6e6a0240e8ee799614b115d79e99665078c02a08ba5a57b49e674686090516d25d75ef91fd60ae21805fde2e650d1d426c9fb5188205eea5cb2785b2d4a67f344538cef863814d5c17ce1eac346752c79f524317ab7e8d71d7568f2369f73ed83921ed3f3ca8e27546e92f6aa", 0xed}, {&(0x7f0000001640)="9d6fe29a93f23857caabb3ee98945d118ef1c0edff444219bb90f69324", 0x1d}, {&(0x7f0000001680)="640bab7d017eda", 0x7}, {&(0x7f00000016c0)="5b30c9b53ea3823d379d77b0c8d5fea17e59ee44d3045f211f8b4e4f89f62ad6e65251c0511ebe387d3d3b2b5cea1fd52af41a3d4e6d48a0f9b28d3ca782cd41b02e9dfba877aa6e95665a437f7dc66a451740404c362adc01e322a5efe90a0e9e48f3d093d8cdf11ef8573b01d5fb9f2cb31742be9305903a9ac4547ee0a9a29b878343f59b87c42cd1231855d0da9c4d95834bfb79f7a51ed3eb550e3e1036efff1087e19a1fe4b68ef9c59a08cc12fb1fb586", 0xb4}], 0xa, 0x0, 0x0, 0x20000004}, 0x10) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) r1 = dup2(r0, r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000018c0)={0xfffffffffffffffd, 0x3}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/audio\x00', 0x509940, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x8) 13:30:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80}}, 0xf0) 13:30:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x107b, @loopback={0x0, 0x8}}, 0x1c) 13:30:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x48800, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x45}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000140)={r2, 0xff, 0x30, 0x10000, 0x4}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r3, 0x4}, &(0x7f0000000240)=0x8) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x23, 0x0, 0x1, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:30:56 executing program 2 (fault-call:9 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:56 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 968.831417] FAULT_INJECTION: forcing a failure. [ 968.831417] name failslab, interval 1, probability 0, space 0, times 0 [ 968.842753] CPU: 1 PID: 23822 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 968.851252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.860619] Call Trace: [ 968.863216] dump_stack+0x1c9/0x2b4 [ 968.866860] ? dump_stack_print_info.cold.2+0x52/0x52 [ 968.872060] ? __kernel_text_address+0xd/0x40 [ 968.876557] ? unwind_get_return_address+0x61/0xa0 13:30:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x4e22, @loopback=0x7f000001}}) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0xa0000) memfd_create(&(0x7f00000001c0)='user\'cpuset\\\x00', 0x3) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000180)=0x100000000, 0x4) 13:30:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe00, @loopback={0x0, 0x8}}, 0x1c) 13:30:56 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 968.881497] should_fail.cold.4+0xa/0x11 [ 968.885580] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 968.890678] ? save_stack+0xa9/0xd0 [ 968.894307] ? save_stack+0x43/0xd0 [ 968.897937] ? kasan_kmalloc+0xc4/0xe0 [ 968.901843] ? __kmalloc_track_caller+0x14a/0x760 [ 968.906685] ? memdup_user+0x2c/0xa0 [ 968.910382] ? strndup_user+0x77/0xd0 [ 968.914183] ? ksys_mount+0x3c/0x140 [ 968.917897] ? do_syscall_64+0x1b9/0x820 [ 968.921969] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 968.927338] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 968.932881] ? proc_fail_nth_write+0x9e/0x210 [ 968.937379] ? proc_cwd_link+0x1d0/0x1d0 [ 968.941431] ? lock_acquire+0x1e4/0x540 [ 968.945419] ? lock_acquire+0x1e4/0x540 [ 968.949411] ? fs_reclaim_acquire+0x20/0x20 [ 968.953733] ? lock_downgrade+0x8f0/0x8f0 [ 968.957878] ? check_same_owner+0x340/0x340 [ 968.962198] ? lock_release+0xa30/0xa30 [ 968.966166] ? rcu_note_context_switch+0x730/0x730 [ 968.971091] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 968.976134] __should_failslab+0x124/0x180 [ 968.980377] should_failslab+0x9/0x14 [ 968.984164] __kmalloc_track_caller+0x2c4/0x760 [ 968.988822] ? strncpy_from_user+0x510/0x510 [ 968.993234] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 968.998779] ? strndup_user+0x77/0xd0 [ 969.002616] memdup_user+0x2c/0xa0 [ 969.006159] strndup_user+0x77/0xd0 [ 969.009795] ksys_mount+0x73/0x140 [ 969.013343] __x64_sys_mount+0xbe/0x150 [ 969.017321] do_syscall_64+0x1b9/0x820 [ 969.021219] ? syscall_return_slowpath+0x5e0/0x5e0 [ 969.026158] ? syscall_return_slowpath+0x31d/0x5e0 [ 969.031099] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 969.036140] ? prepare_exit_to_usermode+0x291/0x3b0 [ 969.041162] ? perf_trace_sys_enter+0xb10/0xb10 [ 969.045839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 969.050688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.055880] RIP: 0033:0x455ab9 [ 969.059062] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:30:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) [ 969.078316] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 969.086033] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 969.093303] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 969.100601] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 969.107868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 969.115154] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000001 13:30:56 executing program 2 (fault-call:9 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xde17, @loopback={0x0, 0x8}}, 0x1c) 13:30:56 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 969.409534] FAULT_INJECTION: forcing a failure. [ 969.409534] name failslab, interval 1, probability 0, space 0, times 0 [ 969.420842] CPU: 1 PID: 23865 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 969.429334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.438680] Call Trace: [ 969.441302] dump_stack+0x1c9/0x2b4 [ 969.444942] ? dump_stack_print_info.cold.2+0x52/0x52 [ 969.450140] ? __kernel_text_address+0xd/0x40 [ 969.454669] ? unwind_get_return_address+0x61/0xa0 [ 969.459607] should_fail.cold.4+0xa/0x11 [ 969.463682] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 969.468789] ? save_stack+0xa9/0xd0 [ 969.472409] ? kasan_kmalloc+0xc4/0xe0 [ 969.476302] ? __kmalloc_track_caller+0x14a/0x760 [ 969.481157] ? memdup_user+0x2c/0xa0 [ 969.484979] ? strndup_user+0x77/0xd0 [ 969.488783] ? ksys_mount+0x73/0x140 [ 969.492494] ? __x64_sys_mount+0xbe/0x150 [ 969.496646] ? do_syscall_64+0x1b9/0x820 [ 969.500727] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 969.506270] ? proc_fail_nth_write+0x9e/0x210 [ 969.510761] ? proc_cwd_link+0x1d0/0x1d0 [ 969.514834] ? lock_acquire+0x1e4/0x540 [ 969.518803] ? lock_acquire+0x1e4/0x540 [ 969.522767] ? fs_reclaim_acquire+0x20/0x20 [ 969.527084] ? lock_downgrade+0x8f0/0x8f0 [ 969.531226] ? check_same_owner+0x340/0x340 [ 969.535550] ? lock_release+0xa30/0xa30 [ 969.539528] ? check_same_owner+0x340/0x340 [ 969.543849] ? rcu_note_context_switch+0x730/0x730 [ 969.548777] ? __check_object_size+0xa3/0x5d7 [ 969.553265] __should_failslab+0x124/0x180 [ 969.557496] should_failslab+0x9/0x14 [ 969.561310] kmem_cache_alloc_trace+0x2cb/0x780 [ 969.565981] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 969.571516] ? _copy_from_user+0xdf/0x150 [ 969.575670] copy_mount_options+0x5f/0x380 [ 969.579910] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 969.585445] ksys_mount+0xd0/0x140 [ 969.588992] __x64_sys_mount+0xbe/0x150 [ 969.592965] do_syscall_64+0x1b9/0x820 [ 969.596852] ? syscall_return_slowpath+0x5e0/0x5e0 [ 969.601772] ? syscall_return_slowpath+0x31d/0x5e0 [ 969.606697] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 969.611699] ? prepare_exit_to_usermode+0x291/0x3b0 [ 969.616703] ? perf_trace_sys_enter+0xb10/0xb10 [ 969.621359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 969.626194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.631379] RIP: 0033:0x455ab9 [ 969.634547] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 969.653685] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 969.661382] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 969.668639] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 969.675906] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 969.683164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 969.690422] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000002 13:30:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80}}, 0xf0) 13:30:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x24202, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0001000000000000000000150000000801030021000000"], 0x1c}, 0x1}, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x895) 13:30:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe00000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:57 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20c002, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x101, 0x6) 13:30:57 executing program 2 (fault-call:9 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}) close(r3) dup3(r1, r2, 0x0) 13:30:57 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 970.071158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 970.105905] FAULT_INJECTION: forcing a failure. [ 970.105905] name failslab, interval 1, probability 0, space 0, times 0 13:30:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000001700)={@empty, 0x0}, &(0x7f0000001740)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000001880)=0xe8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22200) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x1, {0xa, 0x4e23, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000001900)={@mcast2, 0x0}, &(0x7f0000001940)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001980)={0x11c, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x100, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7d8c4110}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) write$eventfd(r4, &(0x7f00000002c0)=0x800, 0x8) [ 970.105962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 970.117264] CPU: 0 PID: 23890 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 970.134163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.143526] Call Trace: [ 970.146142] dump_stack+0x1c9/0x2b4 [ 970.149784] ? dump_stack_print_info.cold.2+0x52/0x52 [ 970.154982] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 970.159747] should_fail.cold.4+0xa/0x11 [ 970.163796] ? is_bpf_text_address+0xae/0x170 [ 970.169338] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 970.174438] ? lock_release+0xa30/0xa30 [ 970.178415] ? kasan_check_read+0x11/0x20 [ 970.182560] ? rcu_is_watching+0x8c/0x150 [ 970.186739] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 970.191426] ? is_bpf_text_address+0xd7/0x170 [ 970.195918] ? kernel_text_address+0x79/0xf0 [ 970.200400] ? __kernel_text_address+0xd/0x40 [ 970.204901] ? lock_acquire+0x1e4/0x540 [ 970.208868] ? fs_reclaim_acquire+0x20/0x20 [ 970.213184] ? lock_downgrade+0x8f0/0x8f0 [ 970.217336] ? check_same_owner+0x340/0x340 [ 970.221672] ? rcu_note_context_switch+0x730/0x730 [ 970.226598] ? copy_mount_options+0x5f/0x380 [ 970.231033] ? ksys_mount+0xd0/0x140 [ 970.234750] __should_failslab+0x124/0x180 [ 970.238972] should_failslab+0x9/0x14 [ 970.242767] kmem_cache_alloc+0x2af/0x760 [ 970.246928] getname_flags+0xd0/0x5a0 [ 970.250728] ? fs_reclaim_acquire+0x20/0x20 [ 970.255061] user_path_at_empty+0x2d/0x50 [ 970.259221] do_mount+0x17f/0x1e20 [ 970.262865] ? check_same_owner+0x340/0x340 [ 970.267193] ? copy_mount_string+0x40/0x40 [ 970.271429] ? retint_kernel+0x10/0x10 [ 970.275311] ? copy_mount_options+0x1e3/0x380 [ 970.279815] ? audit_kill_trees+0x450/0x450 [ 970.284146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.289686] ? copy_mount_options+0x285/0x380 [ 970.294171] ksys_mount+0x12d/0x140 [ 970.297803] __x64_sys_mount+0xbe/0x150 [ 970.301792] do_syscall_64+0x1b9/0x820 [ 970.305669] ? finish_task_switch+0x1d3/0x870 [ 970.311260] ? syscall_return_slowpath+0x5e0/0x5e0 [ 970.316184] ? syscall_return_slowpath+0x31d/0x5e0 [ 970.321105] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 970.326127] ? prepare_exit_to_usermode+0x291/0x3b0 [ 970.331151] ? perf_trace_sys_enter+0xb10/0xb10 [ 970.335809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 970.340648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.345823] RIP: 0033:0x455ab9 [ 970.348995] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:30:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xd8040000, @loopback={0x0, 0x8}}, 0x1c) 13:30:57 executing program 2 (fault-call:9 fault-nth:4): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 970.368194] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 970.375918] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 970.383196] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 970.390451] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 970.397715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 970.404973] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000003 13:30:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000000000000000015000000080003002100000027abf0ff5b455d8e0db69ad6c27ad2f0648c320ad91f9dbdb51c903ae15510e2714f91cc4652c412c52857c789b6bbb01d57f6aa4981a688e83c481b82b9dad5d3bd561d0000000000"], 0x1c}, 0x1}, 0x0) 13:30:58 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x0, &(0x7f0000781f70)) 13:30:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe8030000, @loopback={0x0, 0x8}}, 0x1c) [ 970.744214] FAULT_INJECTION: forcing a failure. [ 970.744214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 970.756081] CPU: 1 PID: 23914 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 970.764557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.773904] Call Trace: [ 970.776494] dump_stack+0x1c9/0x2b4 [ 970.780117] ? dump_stack_print_info.cold.2+0x52/0x52 [ 970.785299] ? trace_hardirqs_on+0x10/0x10 [ 970.789536] should_fail.cold.4+0xa/0x11 [ 970.793603] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 970.798712] ? trace_hardirqs_on+0x10/0x10 [ 970.802943] ? trace_hardirqs_on+0x10/0x10 [ 970.807182] ? mnt_get_count+0x150/0x150 [ 970.811247] ? dput.part.26+0x276/0x7a0 [ 970.815216] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 970.820232] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 970.824986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.830516] ? should_fail+0x246/0xd86 [ 970.834402] ? is_bpf_text_address+0xae/0x170 [ 970.838989] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 970.844095] __alloc_pages_nodemask+0x36e/0xdb0 [ 970.848760] ? rcu_is_watching+0x8c/0x150 [ 970.852910] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 970.857918] ? is_bpf_text_address+0xd7/0x170 [ 970.862414] ? kernel_text_address+0x79/0xf0 [ 970.866832] ? __kernel_text_address+0xd/0x40 [ 970.871329] ? lock_acquire+0x1e4/0x540 [ 970.875294] ? fs_reclaim_acquire+0x20/0x20 [ 970.879609] ? lock_downgrade+0x8f0/0x8f0 [ 970.883746] ? lock_release+0xa30/0xa30 [ 970.887719] ? check_same_owner+0x340/0x340 [ 970.892047] cache_grow_begin+0x91/0x710 [ 970.896109] kmem_cache_alloc+0x689/0x760 [ 970.900249] getname_flags+0xd0/0x5a0 [ 970.904040] ? fs_reclaim_acquire+0x20/0x20 [ 970.908360] user_path_at_empty+0x2d/0x50 [ 970.912499] do_mount+0x17f/0x1e20 [ 970.916032] ? check_same_owner+0x340/0x340 [ 970.920355] ? lock_release+0xa30/0xa30 [ 970.924325] ? copy_mount_string+0x40/0x40 [ 970.928551] ? kasan_kmalloc+0xc4/0xe0 [ 970.932428] ? kmem_cache_alloc_trace+0x318/0x780 [ 970.937255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 970.942778] ? _copy_from_user+0xdf/0x150 [ 970.946912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.952522] ? copy_mount_options+0x285/0x380 [ 970.957005] ksys_mount+0x12d/0x140 [ 970.960634] __x64_sys_mount+0xbe/0x150 [ 970.964597] do_syscall_64+0x1b9/0x820 [ 970.968476] ? syscall_return_slowpath+0x5e0/0x5e0 [ 970.973395] ? syscall_return_slowpath+0x31d/0x5e0 [ 970.978315] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 970.983315] ? prepare_exit_to_usermode+0x291/0x3b0 [ 970.988322] ? perf_trace_sys_enter+0xb10/0xb10 [ 970.992983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 970.997818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.003339] RIP: 0033:0x455ab9 [ 971.006506] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 971.025631] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 971.033337] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 971.040593] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 971.047845] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 971.055099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 971.062351] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000004 13:30:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:30:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:59 executing program 2 (fault-call:9 fault-nth:5): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:30:59 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x36, 0x200002) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x602, 0x70bd28, 0x25dfdbfc, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008841}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f00000003c0), 0x80000) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="203600000000000000000000009d54ed854a99da3d6bcdb82220620000508b1378001500000008000300"], 0x1c}, 0x1}, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000140)=""/233, &(0x7f0000000000)=0xe9) 13:30:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") uname(&(0x7f0000000000)=""/145) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xd4, 0x14, 0xf, 0x10, 0x70bd26, 0x25dfdbfc, {0xf, 0x0, 0x4}, [@nested={0xc0, 0x6f, [@generic="a7221a120809a5cb8677010e23ac2fd7f6439cabf101eeddb509d780b2c8b48e89c0dccd60c67d4b315ecd877446374b81c2646523d06aec7eb998d4314750f3c786f0ce56b226a2f143df9411f0a95c91693a2c5a8882f1a10d6d38c554e9d235988a19188f73e96966b2a5ef61746ecb2dccd617501cb8f7e81c62e7b628bba56090a11fe0055121f4bb9fd72ae5bc07e8107e408857cf5e23ff3f165a0eff53a31cf745", @typed={0xc, 0x2, @u64=0x3f800000}, @typed={0x8, 0x8d, @uid=r2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x80) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:30:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x9000000, @loopback={0x0, 0x8}}, 0x1c) 13:30:59 executing program 7 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:30:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f]}}) close(r3) dup3(r1, r2, 0x0) 13:30:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0x1, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff000000000007000672541f17edc500"], 0x1}, 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x480840, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_bt(r2, 0x8906, &(0x7f0000000180)) recvmmsg(r2, &(0x7f0000002880)=[{{&(0x7f0000002600)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002780), 0x0, &(0x7f00000000c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$llc(r1, &(0x7f0000000140)="3bf5b1d0439ee6ab24385fa1b3a041b84ffa1b143642b04cf3427415f37a9f34c3c97ae410a728179212c0e62f26e05880865b77a0e014f49335d1382336806e5eeb883c0a60d6182a8caf2b4e3a5cc5cea5ef", 0x5f, 0x40, 0x0, 0xa2) 13:30:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) [ 971.609811] FAULT_INJECTION: forcing a failure. [ 971.609811] name failslab, interval 1, probability 0, space 0, times 0 [ 971.621260] CPU: 0 PID: 23949 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 971.629757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.634383] FAULT_INJECTION: forcing a failure. [ 971.634383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 971.639123] Call Trace: [ 971.639150] dump_stack+0x1c9/0x2b4 [ 971.639168] ? dump_stack_print_info.cold.2+0x52/0x52 [ 971.639186] ? filename_lookup+0x397/0x510 [ 971.639199] ? user_path_at_empty+0x40/0x50 [ 971.639213] ? do_mount+0x17f/0x1e20 [ 971.639237] ? ksys_mount+0x12d/0x140 [ 971.678429] ? do_syscall_64+0x1b9/0x820 [ 971.682493] should_fail.cold.4+0xa/0x11 [ 971.686808] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 971.691910] ? kasan_check_write+0x14/0x20 [ 971.696139] ? do_raw_spin_lock+0xc1/0x200 [ 971.700370] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 971.705465] ? debug_check_no_obj_freed+0x30b/0x595 [ 971.710475] ? trace_hardirqs_off+0xd/0x10 [ 971.714704] ? quarantine_put+0x10d/0x1b0 [ 971.718857] ? lock_acquire+0x1e4/0x540 [ 971.722848] ? fs_reclaim_acquire+0x20/0x20 [ 971.727158] ? lock_downgrade+0x8f0/0x8f0 [ 971.731301] ? check_same_owner+0x340/0x340 [ 971.735624] ? lock_downgrade+0x8f0/0x8f0 [ 971.739762] ? rcu_note_context_switch+0x730/0x730 [ 971.745047] __should_failslab+0x124/0x180 [ 971.749360] should_failslab+0x9/0x14 [ 971.753158] kmem_cache_alloc_trace+0x2cb/0x780 [ 971.757837] ? kasan_check_write+0x14/0x20 [ 971.762062] ? do_raw_read_unlock+0x3f/0x60 [ 971.766378] vfs_new_fs_context+0x5a/0x6d0 [ 971.770606] do_mount+0x605/0x1e20 [ 971.774136] ? check_same_owner+0x340/0x340 [ 971.778447] ? lock_release+0xa30/0xa30 [ 971.782418] ? copy_mount_string+0x40/0x40 [ 971.786642] ? kasan_kmalloc+0xc4/0xe0 [ 971.790523] ? kmem_cache_alloc_trace+0x318/0x780 [ 971.795374] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 971.800907] ? _copy_from_user+0xdf/0x150 [ 971.805050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 971.810578] ? copy_mount_options+0x285/0x380 [ 971.815067] ksys_mount+0x12d/0x140 [ 971.818696] __x64_sys_mount+0xbe/0x150 [ 971.822664] do_syscall_64+0x1b9/0x820 [ 971.826799] ? finish_task_switch+0x1d3/0x870 [ 971.831287] ? syscall_return_slowpath+0x5e0/0x5e0 [ 971.836217] ? syscall_return_slowpath+0x31d/0x5e0 [ 971.841140] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 971.846165] ? prepare_exit_to_usermode+0x291/0x3b0 [ 971.851177] ? perf_trace_sys_enter+0xb10/0xb10 [ 971.855840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 971.860677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.865857] RIP: 0033:0x455ab9 [ 971.869027] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 971.888260] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 971.895962] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 971.903314] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 13:30:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7091, @loopback={0x0, 0x8}}, 0x1c) [ 971.910592] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 971.917853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 971.925199] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000005 [ 971.932474] CPU: 1 PID: 23950 Comm: syz-executor7 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 971.940973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.950332] Call Trace: [ 971.952918] dump_stack+0x1c9/0x2b4 13:30:59 executing program 2 (fault-call:9 fault-nth:6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 971.956542] ? dump_stack_print_info.cold.2+0x52/0x52 [ 971.961739] should_fail.cold.4+0xa/0x11 [ 971.965812] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 971.970925] ? lock_acquire+0x1e4/0x540 [ 971.974915] ? debug_object_active_state+0x2f5/0x4d0 [ 971.980030] ? lock_downgrade+0x8f0/0x8f0 [ 971.984206] ? kasan_check_read+0x11/0x20 [ 971.988359] ? do_raw_spin_unlock+0xa7/0x2f0 [ 971.993041] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 971.997626] ? kasan_check_write+0x14/0x20 [ 972.001861] ? do_raw_spin_lock+0xc1/0x200 [ 972.006103] ? trace_hardirqs_on+0xd/0x10 [ 972.010502] ? debug_object_active_state+0x2f5/0x4d0 [ 972.015595] ? kasan_check_read+0x11/0x20 [ 972.019751] ? rcu_is_watching+0x8c/0x150 [ 972.024079] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 972.028755] ? do_raw_spin_unlock+0xa7/0x2f0 [ 972.033169] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 972.037759] ? trace_hardirqs_on+0xd/0x10 [ 972.041939] __alloc_pages_nodemask+0x36e/0xdb0 [ 972.046610] ? release_task.part.17+0xf5d/0x1bb0 [ 972.051413] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 972.056454] ? free_obj_work+0xbb0/0xbb0 [ 972.060531] ? signalfd_cleanup+0xcb/0x150 [ 972.064793] ? do_raw_write_trylock+0x1c0/0x1c0 [ 972.069453] ? call_rcu_sched+0x12/0x20 [ 972.073421] ? release_task.part.17+0xf78/0x1bb0 [ 972.078175] ? getrusage+0xb05/0x1b40 [ 972.082022] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 972.087571] alloc_pages_vma+0x3a0/0x540 [ 972.091630] do_huge_pmd_anonymous_page+0x61c/0x1b60 [ 972.096739] ? xa_set_tag+0x40/0x40 [ 972.100424] ? __thp_get_unmapped_area+0x180/0x180 [ 972.105369] ? lock_downgrade+0x8f0/0x8f0 [ 972.109554] ? kasan_check_read+0x11/0x20 [ 972.113719] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 972.118315] ? pud_val+0x88/0x100 [ 972.121797] ? pmd_val+0x100/0x100 [ 972.125358] __handle_mm_fault+0x2da6/0x44a0 [ 972.129792] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 972.134657] ? kasan_check_write+0x14/0x20 [ 972.138890] ? do_raw_spin_lock+0xc1/0x200 [ 972.144150] ? lock_acquire+0x1e4/0x540 [ 972.148137] ? handle_mm_fault+0x417/0xc80 [ 972.152385] ? lock_downgrade+0x8f0/0x8f0 [ 972.156549] ? lock_release+0xa30/0xa30 [ 972.160523] ? lock_release+0xa30/0xa30 [ 972.164499] ? lock_acquire+0x1e4/0x540 [ 972.168463] ? mem_cgroup_from_task+0xcb/0x1f0 [ 972.173037] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 972.177798] handle_mm_fault+0x53e/0xc80 [ 972.181863] ? __handle_mm_fault+0x44a0/0x44a0 [ 972.186435] ? find_vma+0x34/0x190 [ 972.189976] __do_page_fault+0x620/0xe50 [ 972.194033] ? mm_fault_error+0x380/0x380 [ 972.198172] ? do_wait+0x555/0xb80 [ 972.201713] do_page_fault+0xf6/0x8c0 [ 972.205503] ? vmalloc_sync_all+0x30/0x30 [ 972.209642] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 972.215255] ? proc_fail_nth_write+0x9e/0x210 [ 972.219740] ? proc_cwd_link+0x1d0/0x1d0 [ 972.223805] ? lock_acquire+0x1e4/0x540 [ 972.227766] ? __might_fault+0x12b/0x1e0 [ 972.231821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 972.236659] page_fault+0x1e/0x30 [ 972.240104] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 972.245966] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 972.266122] RSP: 0018:ffff8801b25d7c98 EFLAGS: 00010206 [ 972.271923] RAX: 0000000000000000 RBX: 0000000000000090 RCX: 0000000000000090 [ 972.279191] RDX: 0000000000000090 RSI: ffff8801b25d7d00 RDI: 0000000020781f70 [ 972.286474] RBP: ffff8801b25d7cd0 R08: ffffed00364bafb2 R09: ffffed00364bafb2 [ 972.293741] R10: ffffed00364bafb1 R11: ffff8801b25d7d8f R12: 0000000020782000 [ 972.301018] R13: 0000000020781f70 R14: ffff8801b25d7d00 R15: 00007ffffffff000 [ 972.308305] ? _copy_to_user+0xf6/0x110 [ 972.312288] __do_sys_wait4+0x105/0x150 [ 972.316252] ? kernel_wait4+0x3f0/0x3f0 [ 972.320226] ? syscall_slow_exit_work+0x500/0x500 [ 972.325068] __x64_sys_wait4+0x97/0xf0 [ 972.328947] do_syscall_64+0x1b9/0x820 [ 972.333698] ? syscall_slow_exit_work+0x500/0x500 [ 972.338626] ? syscall_return_slowpath+0x5e0/0x5e0 [ 972.343547] ? syscall_return_slowpath+0x31d/0x5e0 [ 972.348474] ? prepare_exit_to_usermode+0x291/0x3b0 [ 972.353484] ? perf_trace_sys_enter+0xb10/0xb10 [ 972.358148] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 972.362987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.368169] RIP: 0033:0x455ab9 [ 972.371359] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 972.390654] RSP: 002b:00007fb028f04c68 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 972.398353] RAX: ffffffffffffffda RBX: 00007fb028f056d4 RCX: 0000000000455ab9 [ 972.405622] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 13:30:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:30:59 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 972.413247] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 972.420503] R10: 0000000020781f70 R11: 0000000000000246 R12: 0000000000000014 [ 972.427850] R13: 00000000004c2745 R14: 00000000004d4440 R15: 0000000000000000 13:31:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfc00, @loopback={0x0, 0x8}}, 0x1c) 13:31:00 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) [ 972.608873] FAULT_INJECTION: forcing a failure. [ 972.608873] name failslab, interval 1, probability 0, space 0, times 0 [ 972.620294] CPU: 0 PID: 23975 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 972.628784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.638134] Call Trace: [ 972.640730] dump_stack+0x1c9/0x2b4 [ 972.644349] ? dump_stack_print_info.cold.2+0x52/0x52 [ 972.649537] ? kernel_text_address+0x79/0xf0 [ 972.653944] should_fail.cold.4+0xa/0x11 [ 972.658002] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 972.663093] ? save_stack+0xa9/0xd0 [ 972.668009] ? save_stack+0x43/0xd0 [ 972.671624] ? kmem_cache_alloc_trace+0x152/0x780 [ 972.676468] ? vfs_new_fs_context+0x5a/0x6d0 [ 972.680885] ? do_mount+0x605/0x1e20 [ 972.684595] ? ksys_mount+0x12d/0x140 [ 972.688383] ? __x64_sys_mount+0xbe/0x150 [ 972.692524] ? do_syscall_64+0x1b9/0x820 [ 972.696578] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.701934] ? trace_hardirqs_off+0xd/0x10 [ 972.706171] ? quarantine_put+0x10d/0x1b0 [ 972.710304] ? lock_acquire+0x1e4/0x540 [ 972.714274] ? fs_reclaim_acquire+0x20/0x20 [ 972.718589] ? lock_downgrade+0x8f0/0x8f0 [ 972.722724] ? check_same_owner+0x340/0x340 [ 972.727034] ? debug_mutex_init+0x2d/0x60 [ 972.731170] ? rcu_note_context_switch+0x730/0x730 [ 972.736091] __should_failslab+0x124/0x180 [ 972.740326] should_failslab+0x9/0x14 [ 972.744124] kmem_cache_alloc_trace+0x2cb/0x780 [ 972.748811] proc_init_fs_context+0x49/0x130 [ 972.753218] ? proc_fill_super+0x630/0x630 [ 972.757536] vfs_new_fs_context+0x2c3/0x6d0 [ 972.761860] do_mount+0x605/0x1e20 [ 972.765406] ? check_same_owner+0x340/0x340 [ 972.769725] ? lock_release+0xa30/0xa30 [ 972.773689] ? copy_mount_string+0x40/0x40 [ 972.777910] ? kasan_kmalloc+0xc4/0xe0 [ 972.781784] ? kmem_cache_alloc_trace+0x318/0x780 [ 972.786629] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 972.792155] ? _copy_from_user+0xdf/0x150 [ 972.796290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 972.801824] ? copy_mount_options+0x285/0x380 [ 972.806314] ksys_mount+0x12d/0x140 [ 972.809931] __x64_sys_mount+0xbe/0x150 [ 972.813895] do_syscall_64+0x1b9/0x820 [ 972.817770] ? syscall_return_slowpath+0x5e0/0x5e0 [ 972.822696] ? syscall_return_slowpath+0x31d/0x5e0 [ 972.827621] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 972.832630] ? prepare_exit_to_usermode+0x291/0x3b0 [ 972.837634] ? perf_trace_sys_enter+0xb10/0xb10 [ 972.842291] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 972.847126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.852311] RIP: 0033:0x455ab9 [ 972.855482] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 972.874829] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 972.882541] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 972.889801] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 972.897052] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 972.904302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 972.911552] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000006 13:31:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = msgget$private(0x0, 0x400) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000380)=""/135) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x1, 0x1, 0x6}, 0xffffffffffffffff}}, 0x18) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x200}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r3}, 0x8) 13:31:00 executing program 2 (fault-call:9 fault-nth:7): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xb064000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:00 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x3f000000, &(0x7f0000781f70)) 13:31:00 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) [ 973.225716] FAULT_INJECTION: forcing a failure. [ 973.225716] name failslab, interval 1, probability 0, space 0, times 0 [ 973.237068] CPU: 1 PID: 23990 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 973.245564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.255013] Call Trace: [ 973.257619] dump_stack+0x1c9/0x2b4 [ 973.261268] ? dump_stack_print_info.cold.2+0x52/0x52 [ 973.266482] ? kernel_text_address+0x79/0xf0 [ 973.270915] should_fail.cold.4+0xa/0x11 13:31:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000000)=0x2, 0x4) [ 973.275001] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 973.280130] ? save_stack+0xa9/0xd0 [ 973.283776] ? save_stack+0x43/0xd0 [ 973.287422] ? kmem_cache_alloc_trace+0x152/0x780 [ 973.292289] ? vfs_new_fs_context+0x5a/0x6d0 [ 973.296716] ? do_mount+0x605/0x1e20 [ 973.300445] ? ksys_mount+0x12d/0x140 [ 973.304267] ? __x64_sys_mount+0xbe/0x150 [ 973.308435] ? do_syscall_64+0x1b9/0x820 [ 973.312519] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.317910] ? trace_hardirqs_off+0xd/0x10 [ 973.322169] ? quarantine_put+0x10d/0x1b0 [ 973.326341] ? lock_acquire+0x1e4/0x540 [ 973.330340] ? fs_reclaim_acquire+0x20/0x20 [ 973.334712] ? lock_downgrade+0x8f0/0x8f0 [ 973.338889] ? check_same_owner+0x340/0x340 [ 973.343227] ? debug_mutex_init+0x2d/0x60 [ 973.347393] ? rcu_note_context_switch+0x730/0x730 [ 973.352394] __should_failslab+0x124/0x180 [ 973.356646] should_failslab+0x9/0x14 [ 973.360467] kmem_cache_alloc_trace+0x2cb/0x780 [ 973.365166] proc_init_fs_context+0x49/0x130 [ 973.369597] ? proc_fill_super+0x630/0x630 [ 973.373843] vfs_new_fs_context+0x2c3/0x6d0 [ 973.378184] do_mount+0x605/0x1e20 [ 973.381750] ? copy_mount_string+0x40/0x40 [ 973.386001] ? kasan_kmalloc+0xc4/0xe0 [ 973.389917] ? kmem_cache_alloc_trace+0x318/0x780 [ 973.394779] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 973.400354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.405899] ? copy_mount_options+0x285/0x380 [ 973.410405] ksys_mount+0x12d/0x140 [ 973.414037] __x64_sys_mount+0xbe/0x150 [ 973.418031] do_syscall_64+0x1b9/0x820 [ 973.421924] ? finish_task_switch+0x1d3/0x870 [ 973.426417] ? syscall_return_slowpath+0x5e0/0x5e0 [ 973.431363] ? syscall_return_slowpath+0x31d/0x5e0 [ 973.436303] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 973.441326] ? prepare_exit_to_usermode+0x291/0x3b0 [ 973.446355] ? perf_trace_sys_enter+0xb10/0xb10 [ 973.451034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 973.455895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.461092] RIP: 0033:0x455ab9 [ 973.464275] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 973.483416] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 973.491111] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 973.498367] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 973.505623] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 973.512888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 13:31:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:01 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40002d00, &(0x7f0000781f70)) 13:31:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d000100000000000002006d8da18058bf14001500000008000300210000004c08c5e0dcec4025397c42ffa8ad5e0e519a0026a7604a6ad5e07d5218276908e3cf50c0527bb13aa088312a40a0d450765aa3362bbb7fa9e1676047671e8747696149b3d6d2a071d12e1410b7f49f95344b9afae6193a2958fa90692057604ea69a33ce0e79ddbfc8b70fc0091edb2164cfa5"], 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x4000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x18) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000380), &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e23, 0xfb12, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x5, 0x9, 0x4, 0x5, 0x6}, &(0x7f0000000300)=0x98) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000340)) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x450000) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x18d, 0x35b7}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r4, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0xff, 0x3f, @dev={0xfe, 0x80, [], 0x18}, 0x9}, @ib={0x1b, 0x6, 0x3, {"0667f1fbe5d37d1ef1aa98d44c6c5434"}, 0x6, 0x4, 0x7}}}, 0x118) 13:31:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7741000000000000, @loopback={0x0, 0x8}}, 0x1c) [ 973.520140] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000007 13:31:01 executing program 2 (fault-call:9 fault-nth:8): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d009c6401000000000000000000150000000800030021000000d323"], 0x1c}, 0x1}, 0x0) 13:31:01 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000900, &(0x7f0000781f70)) [ 973.792906] FAULT_INJECTION: forcing a failure. [ 973.792906] name failslab, interval 1, probability 0, space 0, times 0 [ 973.804611] CPU: 0 PID: 24033 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 973.813114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.822474] Call Trace: [ 973.825079] dump_stack+0x1c9/0x2b4 [ 973.828745] ? dump_stack_print_info.cold.2+0x52/0x52 [ 973.833934] ? __kernel_text_address+0xd/0x40 [ 973.838433] should_fail.cold.4+0xa/0x11 [ 973.842497] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 973.847885] ? save_stack+0xa9/0xd0 [ 973.851512] ? save_stack+0x43/0xd0 [ 973.855134] ? kasan_kmalloc+0xc4/0xe0 [ 973.859029] ? kmem_cache_alloc_trace+0x152/0x780 [ 973.863891] ? proc_init_fs_context+0x49/0x130 [ 973.868483] ? vfs_new_fs_context+0x2c3/0x6d0 [ 973.872988] ? do_mount+0x605/0x1e20 [ 973.876695] ? ksys_mount+0x12d/0x140 [ 973.880490] ? do_syscall_64+0x1b9/0x820 [ 973.884561] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.889933] ? __x64_sys_mount+0xbe/0x150 [ 973.894078] ? do_syscall_64+0x1b9/0x820 [ 973.898140] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.903492] ? trace_hardirqs_off+0xd/0x10 [ 973.907720] ? quarantine_put+0x10d/0x1b0 [ 973.911861] ? lock_acquire+0x1e4/0x540 [ 973.915832] ? fs_reclaim_acquire+0x20/0x20 [ 973.920167] ? lock_downgrade+0x8f0/0x8f0 [ 973.924314] ? check_same_owner+0x340/0x340 [ 973.928637] ? rcu_note_context_switch+0x730/0x730 [ 973.933559] __should_failslab+0x124/0x180 [ 973.937808] should_failslab+0x9/0x14 [ 973.941618] __kmalloc_track_caller+0x2c4/0x760 [ 973.946286] ? vfs_set_fs_source+0x67/0x180 [ 973.950611] kmemdup_nul+0x31/0xa0 [ 973.954145] vfs_set_fs_source+0x67/0x180 [ 973.958287] do_mount+0x651/0x1e20 [ 973.961821] ? copy_mount_string+0x40/0x40 [ 973.966054] ? retint_kernel+0x10/0x10 [ 973.969941] ? copy_mount_options+0x1f0/0x380 [ 973.974430] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 973.979274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.984818] ? copy_mount_options+0x285/0x380 [ 973.989320] ksys_mount+0x12d/0x140 [ 973.992947] __x64_sys_mount+0xbe/0x150 [ 973.996922] do_syscall_64+0x1b9/0x820 [ 974.000836] ? finish_task_switch+0x1d3/0x870 [ 974.005329] ? syscall_return_slowpath+0x5e0/0x5e0 [ 974.010249] ? syscall_return_slowpath+0x31d/0x5e0 [ 974.015167] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 974.020202] ? prepare_exit_to_usermode+0x291/0x3b0 [ 974.025224] ? perf_trace_sys_enter+0xb10/0xb10 [ 974.029909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 974.034757] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.039939] RIP: 0033:0x455ab9 [ 974.043118] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 974.062284] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 974.070006] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 974.077294] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 974.084572] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 974.091851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 974.099129] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000008 13:31:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:01 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/192}, 0xc8, 0x3, 0x1000) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x80000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000040)={0xffff, 0x101, 0x3, 0x6, 0x2, [{0x7fffffff, 0x100, 0x6, 0x0, 0x0, 0x1002}, {0x4, 0x7, 0x80000001, 0x0, 0x0, 0x80}]}) 13:31:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xffa0000, @loopback={0x0, 0x8}}, 0x1c) 13:31:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d000100000000000000190015000000080003000000"], 0x1c}, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000001c0)={0x7, 0x200, 0x1, 'queue1\x00', 0x1000}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x2a02}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x19}, r2}, 0xc) 13:31:01 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000006, &(0x7f0000781f70)) 13:31:01 executing program 2 (fault-call:9 fault-nth:9): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 974.478765] FAULT_INJECTION: forcing a failure. [ 974.478765] name failslab, interval 1, probability 0, space 0, times 0 [ 974.490158] CPU: 0 PID: 24057 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 974.498688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.508046] Call Trace: [ 974.510645] dump_stack+0x1c9/0x2b4 [ 974.514282] ? dump_stack_print_info.cold.2+0x52/0x52 [ 974.519484] should_fail.cold.4+0xa/0x11 [ 974.523732] ? fault_create_debugfs_attr+0x1f0/0x1f0 13:31:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:02 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xd88b0000, @loopback={0x0, 0x8}}, 0x1c) 13:31:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0x9, &(0x7f0000000100)={&(0x7f0000000080)={0xffffffffffffff6e, 0x1d, 0x1, 0x0, 0x0, {0x15}}, 0x14}, 0x1}, 0x0) 13:31:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:02 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000600, &(0x7f0000781f70)) [ 974.528834] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 974.533849] ? do_raw_spin_unlock+0xa7/0x2f0 [ 974.538256] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 974.542838] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 974.547859] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 974.552869] ? find_next_bit+0x104/0x130 [ 974.556924] ? cpumask_next+0x24/0x30 [ 974.560726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.566270] ? pcpu_alloc+0x190/0x13a0 [ 974.570169] ? kmem_cache_alloc_trace+0x152/0x780 [ 974.575031] ? lock_acquire+0x1e4/0x540 [ 974.579016] ? fs_reclaim_acquire+0x20/0x20 [ 974.583332] ? lock_downgrade+0x8f0/0x8f0 [ 974.587554] ? pcpu_balance_workfn+0x1700/0x1700 [ 974.592386] ? check_same_owner+0x340/0x340 [ 974.596700] ? rcu_note_context_switch+0x730/0x730 [ 974.601628] ? lock_acquire+0x1e4/0x540 [ 974.605603] __should_failslab+0x124/0x180 [ 974.609848] should_failslab+0x9/0x14 [ 974.613668] __kmalloc+0x2c8/0x760 [ 974.617226] ? kasan_check_write+0x14/0x20 [ 974.621454] ? __init_rwsem+0x1cc/0x2a0 [ 974.625421] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 974.630470] ? prealloc_shrinker+0x124/0x480 [ 974.634870] ? __lockdep_init_map+0x105/0x590 [ 974.639361] prealloc_shrinker+0x124/0x480 [ 974.643581] ? __init_waitqueue_head+0x9e/0x150 [ 974.648409] ? inactive_list_is_low+0x850/0x850 [ 974.653088] ? __lockdep_init_map+0x105/0x590 [ 974.657572] alloc_super+0x8dd/0xb10 [ 974.661274] ? destroy_unused_super.part.11+0x110/0x110 [ 974.666623] ? lock_downgrade+0x8f0/0x8f0 [ 974.670768] ? kasan_check_read+0x11/0x20 [ 974.674904] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 974.679481] ? kasan_check_write+0x14/0x20 [ 974.683720] ? do_raw_spin_lock+0xc1/0x200 [ 974.687951] ? ns_test_super+0x50/0x50 [ 974.691826] sget_fc+0x269/0x950 [ 974.695199] ? compare_single+0x10/0x10 [ 974.699170] ? alloc_super+0xb10/0xb10 [ 974.703048] ? kasan_kmalloc+0xc4/0xe0 [ 974.706937] ? __kmalloc_track_caller+0x311/0x760 [ 974.711789] ? proc_root_lookup+0x60/0x60 [ 974.715930] vfs_get_super+0x6e/0x270 [ 974.719716] proc_get_tree+0x88/0xb0 [ 974.723417] vfs_get_tree+0x1cb/0x5c0 [ 974.727212] do_mount+0x6f2/0x1e20 [ 974.730754] ? check_same_owner+0x340/0x340 [ 974.735064] ? lock_release+0xa30/0xa30 [ 974.739035] ? copy_mount_string+0x40/0x40 [ 974.743255] ? kasan_kmalloc+0xc4/0xe0 [ 974.747136] ? kmem_cache_alloc_trace+0x318/0x780 [ 974.751972] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 974.757492] ? _copy_from_user+0xdf/0x150 [ 974.761645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.767219] ? copy_mount_options+0x285/0x380 [ 974.771721] ksys_mount+0x12d/0x140 [ 974.775341] __x64_sys_mount+0xbe/0x150 [ 974.779321] do_syscall_64+0x1b9/0x820 [ 974.783194] ? finish_task_switch+0x1d3/0x870 [ 974.787686] ? syscall_return_slowpath+0x5e0/0x5e0 [ 974.792606] ? syscall_return_slowpath+0x31d/0x5e0 [ 974.797523] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 974.802535] ? prepare_exit_to_usermode+0x291/0x3b0 [ 974.807537] ? perf_trace_sys_enter+0xb10/0xb10 [ 974.812202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 974.817047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.822225] RIP: 0033:0x455ab9 [ 974.825412] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 974.844542] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 974.852235] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 974.859487] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 974.866752] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 13:31:02 executing program 2 (fault-call:9 fault-nth:10): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 974.874016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 974.881369] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000009 13:31:02 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0xffff, 0xffffffffaa69b2b5}, {0x3, 0x7}]}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x412, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r1}, 0x2c}, {@msize={'msize', 0x3d, 0x8}, 0x2c}, {@loose='loose', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r2}, 0x2c}, {@afid={'afid', 0x3d, 0x3f}, 0x2c}, {@version_L='version=9p2000.L', 0x2c}]}}) socketpair(0x15, 0x0, 0x5, &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d4c0100000080000000000000f57a6e7289f4776ac3f835"], 0x1c}, 0x1}, 0x40000) 13:31:02 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x763, @loopback={0x0, 0x8}}, 0x1c) 13:31:02 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x1c000000, &(0x7f0000781f70)) [ 975.222298] FAULT_INJECTION: forcing a failure. [ 975.222298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 975.234139] CPU: 1 PID: 24087 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 975.242649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.252011] Call Trace: [ 975.254609] dump_stack+0x1c9/0x2b4 [ 975.258252] ? dump_stack_print_info.cold.2+0x52/0x52 [ 975.263502] should_fail.cold.4+0xa/0x11 [ 975.267935] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 975.273059] ? trace_hardirqs_on+0x10/0x10 [ 975.277326] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 975.282887] ? trace_hardirqs_on+0x10/0x10 [ 975.287141] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 975.292187] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 975.296969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.302518] ? should_fail+0x246/0xd86 [ 975.306406] ? lock_downgrade+0x8f0/0x8f0 [ 975.310554] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 975.315652] __alloc_pages_nodemask+0x36e/0xdb0 [ 975.320336] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 975.325399] ? is_bpf_text_address+0xae/0x170 [ 975.329933] ? lock_downgrade+0x8f0/0x8f0 [ 975.334105] ? lock_release+0xa30/0xa30 [ 975.338102] ? lock_acquire+0x1e4/0x540 [ 975.342088] ? fs_reclaim_acquire+0x20/0x20 [ 975.346427] ? lock_downgrade+0x8f0/0x8f0 [ 975.350595] ? lock_release+0xa30/0xa30 [ 975.354585] ? check_same_owner+0x340/0x340 [ 975.358918] cache_grow_begin+0x91/0x710 [ 975.362995] kmem_cache_alloc_trace+0x6a5/0x780 [ 975.367695] alloc_super+0xd4/0xb10 [ 975.371349] ? destroy_unused_super.part.11+0x110/0x110 [ 975.376726] ? sget_fc+0x261/0x950 [ 975.380289] ? lock_downgrade+0x8f0/0x8f0 [ 975.384464] ? kasan_check_read+0x11/0x20 [ 975.388630] ? do_raw_spin_unlock+0xa7/0x2f0 [ 975.393049] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 975.397640] ? kasan_check_write+0x14/0x20 [ 975.401891] ? do_raw_spin_lock+0xc1/0x200 [ 975.406149] ? ns_test_super+0x50/0x50 [ 975.410073] sget_fc+0x269/0x950 [ 975.413470] ? compare_single+0x10/0x10 [ 975.417461] ? alloc_super+0xb10/0xb10 [ 975.421350] ? kasan_kmalloc+0xc4/0xe0 [ 975.425242] ? __kmalloc_track_caller+0x311/0x760 [ 975.430090] ? proc_root_lookup+0x60/0x60 [ 975.434233] vfs_get_super+0x6e/0x270 [ 975.438040] proc_get_tree+0x88/0xb0 [ 975.441758] vfs_get_tree+0x1cb/0x5c0 [ 975.445560] do_mount+0x6f2/0x1e20 [ 975.449099] ? copy_mount_string+0x40/0x40 [ 975.453335] ? kasan_kmalloc+0xc4/0xe0 [ 975.457239] ? kmem_cache_alloc_trace+0x318/0x780 [ 975.462098] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 975.467643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.473194] ? copy_mount_options+0x285/0x380 [ 975.477782] ksys_mount+0x12d/0x140 [ 975.481407] __x64_sys_mount+0xbe/0x150 [ 975.485373] do_syscall_64+0x1b9/0x820 [ 975.489248] ? finish_task_switch+0x1d3/0x870 [ 975.493744] ? syscall_return_slowpath+0x5e0/0x5e0 [ 975.498671] ? syscall_return_slowpath+0x31d/0x5e0 [ 975.503588] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 975.508598] ? prepare_exit_to_usermode+0x291/0x3b0 [ 975.513620] ? perf_trace_sys_enter+0xb10/0xb10 [ 975.518292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 975.523134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 975.528307] RIP: 0033:0x455ab9 [ 975.531475] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 975.550614] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 975.558307] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 975.565658] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 975.572931] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 975.580198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 975.587461] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000a 13:31:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 13:31:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x10000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:31:03 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:03 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40002000, &(0x7f0000781f70)) 13:31:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x6016000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0xffff, &(0x7f0000000180)=0x4) 13:31:03 executing program 2 (fault-call:9 fault-nth:11): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 976.059529] FAULT_INJECTION: forcing a failure. [ 976.059529] name failslab, interval 1, probability 0, space 0, times 0 [ 976.071024] CPU: 1 PID: 24120 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 976.079521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.088880] Call Trace: [ 976.091478] dump_stack+0x1c9/0x2b4 [ 976.095120] ? dump_stack_print_info.cold.2+0x52/0x52 [ 976.100323] should_fail.cold.4+0xa/0x11 [ 976.104397] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 976.109975] ? save_stack+0xa9/0xd0 [ 976.113615] ? save_stack+0x43/0xd0 [ 976.117252] ? kasan_kmalloc+0xc4/0xe0 [ 976.121161] ? __kmalloc+0x14e/0x760 [ 976.124881] ? __list_lru_init+0x151/0x840 [ 976.129113] ? alloc_super+0x976/0xb10 [ 976.133012] ? sget_fc+0x269/0x950 [ 976.136560] ? vfs_get_super+0x6e/0x270 [ 976.140546] ? proc_get_tree+0x88/0xb0 [ 976.145566] ? vfs_get_tree+0x1cb/0x5c0 [ 976.149551] ? do_mount+0x6f2/0x1e20 [ 976.153283] ? ksys_mount+0x12d/0x140 13:31:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x3, 0x3}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:31:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1f0f0000, @loopback={0x0, 0x8}}, 0x1c) 13:31:03 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:03 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x4000222e, &(0x7f0000781f70)) [ 976.157322] ? __x64_sys_mount+0xbe/0x150 [ 976.161487] ? do_syscall_64+0x1b9/0x820 [ 976.165600] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 976.170974] ? save_stack+0xa9/0xd0 [ 976.174624] ? lock_acquire+0x1e4/0x540 [ 976.178621] ? fs_reclaim_acquire+0x20/0x20 [ 976.182962] ? lock_downgrade+0x8f0/0x8f0 [ 976.187144] ? check_same_owner+0x340/0x340 [ 976.191497] ? rcu_note_context_switch+0x730/0x730 [ 976.196448] __should_failslab+0x124/0x180 [ 976.200715] should_failslab+0x9/0x14 [ 976.204562] kmem_cache_alloc_node_trace+0x26f/0x770 [ 976.209684] ? kasan_kmalloc+0xc4/0xe0 [ 976.213607] __kmalloc_node+0x33/0x70 [ 976.217426] kvmalloc_node+0x65/0xf0 [ 976.221161] __list_lru_init+0x5d9/0x840 [ 976.225245] ? list_lru_destroy+0x500/0x500 [ 976.229593] ? prealloc_shrinker+0x213/0x480 [ 976.234015] ? __init_waitqueue_head+0x9e/0x150 [ 976.238704] ? inactive_list_is_low+0x850/0x850 [ 976.243395] ? __lockdep_init_map+0x105/0x590 [ 976.247906] alloc_super+0x976/0xb10 [ 976.251636] ? destroy_unused_super.part.11+0x110/0x110 [ 976.257022] ? lock_downgrade+0x8f0/0x8f0 [ 976.261193] ? kasan_check_read+0x11/0x20 [ 976.265382] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 976.269977] ? kasan_check_write+0x14/0x20 [ 976.274237] ? do_raw_spin_lock+0xc1/0x200 [ 976.278498] ? ns_test_super+0x50/0x50 [ 976.282397] sget_fc+0x269/0x950 [ 976.285797] ? compare_single+0x10/0x10 [ 976.289789] ? alloc_super+0xb10/0xb10 [ 976.293686] ? kasan_kmalloc+0xc4/0xe0 [ 976.298024] ? __kmalloc_track_caller+0x311/0x760 [ 976.302887] ? proc_root_lookup+0x60/0x60 [ 976.307055] vfs_get_super+0x6e/0x270 [ 976.310874] proc_get_tree+0x88/0xb0 [ 976.314588] vfs_get_tree+0x1cb/0x5c0 [ 976.318400] do_mount+0x6f2/0x1e20 [ 976.322718] ? check_same_owner+0x340/0x340 [ 976.327037] ? lock_release+0xa30/0xa30 [ 976.331033] ? copy_mount_string+0x40/0x40 [ 976.335280] ? kasan_kmalloc+0xc4/0xe0 [ 976.339165] ? kmem_cache_alloc_trace+0x318/0x780 [ 976.344016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 976.349549] ? _copy_from_user+0xdf/0x150 [ 976.353721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.359275] ? copy_mount_options+0x285/0x380 [ 976.363769] ksys_mount+0x12d/0x140 [ 976.367391] __x64_sys_mount+0xbe/0x150 [ 976.371363] do_syscall_64+0x1b9/0x820 [ 976.375250] ? finish_task_switch+0x1d3/0x870 [ 976.379753] ? syscall_return_slowpath+0x5e0/0x5e0 [ 976.384677] ? syscall_return_slowpath+0x31d/0x5e0 [ 976.389599] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 976.394613] ? prepare_exit_to_usermode+0x291/0x3b0 [ 976.399622] ? perf_trace_sys_enter+0xb10/0xb10 [ 976.404283] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 976.409121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 976.414300] RIP: 0033:0x455ab9 [ 976.417473] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 976.437186] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 976.444883] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 976.452138] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 13:31:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) flock(r0, 0x1) r1 = socket(0x1e, 0x80004, 0x20000000005) getsockname$packet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d0001000000000000000000150000000800030021000000d0ade0dadd3eb792071b1868fcef27d00e9dee2db040a318ca6197e8e47d4cffc3ef23bf15982691886c429234fd0308004af11b175dd04314cd88dc4b2126a30a95d876adf996f586791011f3f01cf45668cc14db3280796865956c6b56ab3c56d5c217c5091a46ed7f54adfbc45d4dd426"], 0x1c}, 0x1}, 0x0) [ 976.459401] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 976.466666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 976.473941] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000b 13:31:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x20f6000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:04 executing program 2 (fault-call:9 fault-nth:12): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 976.732872] FAULT_INJECTION: forcing a failure. [ 976.732872] name failslab, interval 1, probability 0, space 0, times 0 [ 976.744265] CPU: 1 PID: 24158 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 976.752755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.762114] Call Trace: [ 976.764708] dump_stack+0x1c9/0x2b4 [ 976.768373] ? dump_stack_print_info.cold.2+0x52/0x52 [ 976.773766] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 976.779321] should_fail.cold.4+0xa/0x11 [ 976.783385] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 976.788498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.794043] ? replace_slot+0xc9/0x4c0 [ 976.797954] ? __save_stack_trace+0x8d/0xf0 [ 976.802298] ? plist_requeue+0x650/0x650 [ 976.806369] ? save_stack+0xa9/0xd0 [ 976.810004] ? save_stack+0x43/0xd0 [ 976.813651] ? lock_acquire+0x1e4/0x540 [ 976.817638] ? fs_reclaim_acquire+0x20/0x20 [ 976.821976] ? lock_downgrade+0x8f0/0x8f0 [ 976.826227] ? check_same_owner+0x340/0x340 [ 976.830595] ? check_same_owner+0x340/0x340 [ 976.834937] ? rcu_note_context_switch+0x730/0x730 [ 976.839888] __should_failslab+0x124/0x180 [ 976.844144] should_failslab+0x9/0x14 [ 976.847965] __kmalloc+0x2c8/0x760 [ 976.851526] ? rcu_note_context_switch+0x730/0x730 [ 976.856489] ? __list_lru_init+0x151/0x840 [ 976.860761] __list_lru_init+0x151/0x840 [ 976.864818] ? list_lru_destroy+0x500/0x500 [ 976.869224] ? prealloc_shrinker+0x124/0x480 [ 976.873636] ? prealloc_shrinker+0x213/0x480 [ 976.878039] ? __init_waitqueue_head+0x9e/0x150 [ 976.882727] ? inactive_list_is_low+0x850/0x850 [ 976.887392] ? __lockdep_init_map+0x105/0x590 [ 976.891905] alloc_super+0x976/0xb10 [ 976.895623] ? destroy_unused_super.part.11+0x110/0x110 [ 976.900981] ? lock_downgrade+0x8f0/0x8f0 [ 976.905119] ? kasan_check_read+0x11/0x20 [ 976.909264] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 976.913838] ? kasan_check_write+0x14/0x20 [ 976.918056] ? do_raw_spin_lock+0xc1/0x200 [ 976.922278] ? ns_test_super+0x50/0x50 [ 976.926160] sget_fc+0x269/0x950 [ 976.929511] ? compare_single+0x10/0x10 [ 976.933469] ? alloc_super+0xb10/0xb10 [ 976.937341] ? kasan_kmalloc+0xc4/0xe0 [ 976.941215] ? __kmalloc_track_caller+0x311/0x760 [ 976.946054] ? proc_root_lookup+0x60/0x60 [ 976.950190] vfs_get_super+0x6e/0x270 [ 976.953984] proc_get_tree+0x88/0xb0 [ 976.957693] vfs_get_tree+0x1cb/0x5c0 [ 976.961490] do_mount+0x6f2/0x1e20 [ 976.965035] ? copy_mount_string+0x40/0x40 [ 976.969257] ? kasan_kmalloc+0xc4/0xe0 [ 976.973131] ? kmem_cache_alloc_trace+0x318/0x780 [ 976.977984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 976.983536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.989075] ? copy_mount_options+0x285/0x380 [ 976.993573] ksys_mount+0x12d/0x140 [ 976.997198] __x64_sys_mount+0xbe/0x150 [ 977.001160] do_syscall_64+0x1b9/0x820 [ 977.005041] ? syscall_return_slowpath+0x5e0/0x5e0 [ 977.009964] ? syscall_return_slowpath+0x31d/0x5e0 [ 977.014887] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 977.019897] ? prepare_exit_to_usermode+0x291/0x3b0 [ 977.024912] ? perf_trace_sys_enter+0xb10/0xb10 [ 977.029580] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 977.034426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.039632] RIP: 0033:0x455ab9 [ 977.042811] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 977.062128] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 977.070003] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 977.077274] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 977.084544] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 977.091825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 977.099115] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000c 13:31:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc8, 0x0, 0x1000) 13:31:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000700)=""/193) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2979e1de5d1a92ab869114") writev(r1, &(0x7f0000000340)=[{&(0x7f0000000580)="b2", 0x1}], 0x1) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r4, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) fcntl$setpipe(r0, 0x407, 0x0) tee(r3, r1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00010004000000008a13e9000004150000000000030021"], 0x1c}, 0x1}, 0x0) pwritev(r5, &(0x7f0000000680)=[{&(0x7f0000000140)="28367d09b526c375b3b3c06ef581ffb7c7119cb3080fbc2493c98de99d2719b139a24a20df7b431d14fb985fd54d1bda1bffda3a400521c9e354c8dbeb7ce49f9f5357ca1ea17550b2d0e6c3b8b123fc228d6b366089a76d3e75536d1d837e20a08475e6844a6034b5e0b8d3d26293632a44218fa16e1f", 0x77}, {&(0x7f00000001c0)="7539cb61177a7a119e0c626d782b689359bd0a7161a79e9e08ae604c035ce76e0e887201b67a52a68bc5469f2cf9c89c874cf21bed7d4ff7070eef3ed98f808775c240100f2e9a2583a916e2e992855c58447fd998eeab1d45f6cab7c5340075048c096d2291ea157fa00c7c6854b6f28ed67cc43b9d08e714d3a01429014d8f33", 0x81}, {}, {&(0x7f0000000280)="0938613cbd0b4085000784b2b2d3d8b1996b4d4f4c5d29878043109d332658105b816552d879bf602e596de7db93f78f1badf357d9c97ebea7ffde1169482994c51b3c7c78d60c949e5b486d257f0eb7bea510d9ad7eb12e97642ae18bf3a10a568b4312a7bf9feea031968cf3b4079d36de8bf8ba0f08db490757724f8880b33c71a2e1d728abbad61c93a84648684f452bba", 0x93}, {&(0x7f0000000340)="d7c3046110e5df5881fa9520bd36c49936cd8e9691e4711688bcf3d192af76cfda14280844eac22a5787f4632a488efc94684eeb8270a36a19a9dc230acda5fd127c7755fedc08949a549bb0b4b4388be44a0c722fc5d2526030391380db852b68a6c6bfd4f8ade4b8c7dd898cc2af15b8d23911a56557f6136b9476aed346556abfe3fb60fb96bb2ee34e32b666434b38e3d2f46be650105a952719fe45716d498d3d71e89c30e066a6e0fbcb8a3669613b54e183df", 0xb6}, {&(0x7f0000000400)="ff346c7b9266bfc8856c50201a9319809663c52fe6db8ee263a575a34a18ea508074a0c21e9cdfc6b0cf5b1234fa247591db204f6f80d6189a8b4cf95d03f0d125d69c8d57707d1c172dcd84b9715c8331c44defe57e1280d579395413e0cba310321d91424ba2faf9c075fcd40638df330c3b147216255d5325745cbd24a296fdb91b578e6f691e9e", 0x89}, {&(0x7f00000004c0)="f26cf8aa6fcc30245735a8d9076a8ba8e0e957991306fcfc3a4fbc6399d7e7a7f3e13e4d445416aa8bb90ca1cccb949f8f5c5b449f00a6442c8193d19f539261b9981a279806239a2e9b327d5d3853526857b93f1594c7d2f94ffc5c0e02fd18d3696f73597d7d26112e7ee67ee9b2e2f4637772aca4a243e9e3e05dd67d8a3ca171b643f7e8933d", 0x88}, {&(0x7f0000000580)="ce23cb090a6c58a5cc46ed5847fc307d3528eb0beb26b9b3e74b10a891d021277074588511fdb47f1cd6b76c20f7cd42c75a9f9658324bd86e6c39fbb99bb7cad4e85329accc28cc2696dc91e983f200be2c913204109d7ef46cbf441a89a9d455f3619ae760a69260faede6d04219a06ad135662e6e7bb430742b16b1f68cfa704691c959d9a586143ef2d71b764f12eb5fb1cb6fecb8c6c9af1a0d9b1db97014569966667d38d85354d60148e83c3b30db7ce0f39ce4791f869c26f4096f750f8f6508a17ee4293b854142e347a4fb412f90d9b0a95044604dda6a30", 0xdd}], 0x8, 0x0) 13:31:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x376e000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x0, "b5"}, 0x4ffff8005) 13:31:04 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x23000000, &(0x7f0000781f70)) 13:31:04 executing program 2 (fault-call:9 fault-nth:13): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) close(r3) dup3(r1, r2, 0x0) 13:31:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, r1, 0x400, 0x70bd2b, 0x25dfdbff, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3463}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x24008050) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:31:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x0, "b5"}, 0x4ffff8005) 13:31:04 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000220, &(0x7f0000781f70)) 13:31:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1fc20000, @loopback={0x0, 0x8}}, 0x1c) [ 977.331474] FAULT_INJECTION: forcing a failure. [ 977.331474] name failslab, interval 1, probability 0, space 0, times 0 [ 977.342797] CPU: 0 PID: 24183 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 977.351306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.360662] Call Trace: [ 977.363256] dump_stack+0x1c9/0x2b4 [ 977.366876] ? dump_stack_print_info.cold.2+0x52/0x52 [ 977.372065] should_fail.cold.4+0xa/0x11 [ 977.376116] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 977.381219] ? save_stack+0xa9/0xd0 [ 977.384933] ? save_stack+0x43/0xd0 [ 977.388547] ? kasan_kmalloc+0xc4/0xe0 [ 977.392431] ? __kmalloc+0x14e/0x760 [ 977.396138] ? __list_lru_init+0x151/0x840 [ 977.400362] ? alloc_super+0x976/0xb10 [ 977.404248] ? sget_fc+0x269/0x950 [ 977.407786] ? vfs_get_super+0x6e/0x270 [ 977.411763] ? proc_get_tree+0x88/0xb0 [ 977.415639] ? vfs_get_tree+0x1cb/0x5c0 [ 977.419613] ? do_mount+0x6f2/0x1e20 [ 977.423321] ? ksys_mount+0x12d/0x140 [ 977.427107] ? __x64_sys_mount+0xbe/0x150 [ 977.431248] ? do_syscall_64+0x1b9/0x820 [ 977.435480] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.440836] ? save_stack+0xa9/0xd0 [ 977.444455] ? lock_acquire+0x1e4/0x540 [ 977.448419] ? fs_reclaim_acquire+0x20/0x20 [ 977.452743] ? lock_downgrade+0x8f0/0x8f0 [ 977.456885] ? check_same_owner+0x340/0x340 [ 977.461206] ? rcu_note_context_switch+0x730/0x730 [ 977.466133] __should_failslab+0x124/0x180 [ 977.470363] should_failslab+0x9/0x14 [ 977.474167] kmem_cache_alloc_node_trace+0x26f/0x770 [ 977.479259] ? kasan_kmalloc+0xc4/0xe0 [ 977.483140] __kmalloc_node+0x33/0x70 [ 977.486929] kvmalloc_node+0x65/0xf0 [ 977.490641] __list_lru_init+0x5d9/0x840 [ 977.494688] ? list_lru_destroy+0x500/0x500 [ 977.499016] ? prealloc_shrinker+0x213/0x480 [ 977.503422] ? __init_waitqueue_head+0x9e/0x150 [ 977.508094] ? inactive_list_is_low+0x850/0x850 [ 977.512766] ? __lockdep_init_map+0x105/0x590 [ 977.517257] alloc_super+0x976/0xb10 [ 977.520973] ? destroy_unused_super.part.11+0x110/0x110 [ 977.526335] ? lock_downgrade+0x8f0/0x8f0 [ 977.530475] ? kasan_check_read+0x11/0x20 [ 977.534615] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 977.539184] ? kasan_check_write+0x14/0x20 [ 977.543415] ? do_raw_spin_lock+0xc1/0x200 [ 977.547649] ? ns_test_super+0x50/0x50 [ 977.551537] sget_fc+0x269/0x950 [ 977.554904] ? compare_single+0x10/0x10 [ 977.558869] ? alloc_super+0xb10/0xb10 [ 977.562753] ? kasan_kmalloc+0xc4/0xe0 [ 977.566642] ? __kmalloc_track_caller+0x311/0x760 [ 977.571479] ? proc_root_lookup+0x60/0x60 [ 977.575633] vfs_get_super+0x6e/0x270 [ 977.579431] proc_get_tree+0x88/0xb0 [ 977.583131] vfs_get_tree+0x1cb/0x5c0 [ 977.586930] do_mount+0x6f2/0x1e20 [ 977.590466] ? copy_mount_string+0x40/0x40 [ 977.594688] ? kasan_kmalloc+0xc4/0xe0 [ 977.598585] ? kmem_cache_alloc_trace+0x318/0x780 [ 977.603420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 977.608949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.614476] ? copy_mount_options+0x285/0x380 [ 977.618964] ksys_mount+0x12d/0x140 [ 977.622593] __x64_sys_mount+0xbe/0x150 [ 977.626587] do_syscall_64+0x1b9/0x820 13:31:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 977.630490] ? finish_task_switch+0x1d3/0x870 [ 977.634977] ? syscall_return_slowpath+0x5e0/0x5e0 [ 977.639893] ? syscall_return_slowpath+0x31d/0x5e0 [ 977.644811] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 977.649821] ? prepare_exit_to_usermode+0x291/0x3b0 [ 977.654831] ? perf_trace_sys_enter+0xb10/0xb10 [ 977.659507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 977.664374] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.669567] RIP: 0033:0x455ab9 [ 977.672749] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 977.691884] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 977.699582] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 977.706841] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 977.714104] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 977.721361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 13:31:05 executing program 2 (fault-call:9 fault-nth:14): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 977.728615] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000d 13:31:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00010000c2000000000000150000000800030021000000"], 0x1c}, 0x1}, 0x0) 13:31:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x0, "b5"}, 0x4ffff8005) 13:31:05 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3f520000, @loopback={0x0, 0x8}}, 0x1c) 13:31:05 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40005508, &(0x7f0000781f70)) [ 978.061989] FAULT_INJECTION: forcing a failure. [ 978.061989] name failslab, interval 1, probability 0, space 0, times 0 [ 978.073460] CPU: 0 PID: 24209 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 978.081953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.091296] Call Trace: [ 978.093882] dump_stack+0x1c9/0x2b4 [ 978.097503] ? dump_stack_print_info.cold.2+0x52/0x52 [ 978.102701] should_fail.cold.4+0xa/0x11 [ 978.106752] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 978.111841] ? is_bpf_text_address+0xd7/0x170 [ 978.116324] ? kernel_text_address+0x79/0xf0 [ 978.120731] ? __kernel_text_address+0xd/0x40 [ 978.125211] ? unwind_get_return_address+0x61/0xa0 [ 978.130136] ? __save_stack_trace+0x8d/0xf0 [ 978.134456] ? save_stack+0xa9/0xd0 [ 978.138069] ? lock_acquire+0x1e4/0x540 [ 978.142038] ? fs_reclaim_acquire+0x20/0x20 [ 978.146368] ? lock_downgrade+0x8f0/0x8f0 [ 978.150512] ? __x64_sys_mount+0xbe/0x150 [ 978.154657] ? check_same_owner+0x340/0x340 [ 978.158966] ? rcu_note_context_switch+0x730/0x730 [ 978.163896] __should_failslab+0x124/0x180 [ 978.168138] should_failslab+0x9/0x14 [ 978.171932] kmem_cache_alloc_trace+0x2cb/0x780 [ 978.176584] ? kasan_kmalloc+0xc4/0xe0 [ 978.180463] __memcg_init_list_lru_node+0x185/0x2d0 [ 978.185478] ? kvfree_rcu+0x20/0x20 [ 978.189103] ? __kmalloc_node+0x47/0x70 [ 978.193072] __list_lru_init+0x4d6/0x840 [ 978.197132] ? list_lru_destroy+0x500/0x500 [ 978.201451] ? prealloc_shrinker+0x213/0x480 [ 978.205842] ? __init_waitqueue_head+0x9e/0x150 [ 978.210497] ? inactive_list_is_low+0x850/0x850 [ 978.215168] ? __lockdep_init_map+0x105/0x590 [ 978.219658] alloc_super+0x976/0xb10 [ 978.223364] ? destroy_unused_super.part.11+0x110/0x110 [ 978.228715] ? lock_downgrade+0x8f0/0x8f0 [ 978.232865] ? kasan_check_read+0x11/0x20 [ 978.237042] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 978.241633] ? kasan_check_write+0x14/0x20 [ 978.245854] ? do_raw_spin_lock+0xc1/0x200 [ 978.250085] ? ns_test_super+0x50/0x50 [ 978.253975] sget_fc+0x269/0x950 [ 978.257333] ? compare_single+0x10/0x10 [ 978.261290] ? alloc_super+0xb10/0xb10 [ 978.265161] ? kasan_kmalloc+0xc4/0xe0 [ 978.269090] ? __kmalloc_track_caller+0x311/0x760 [ 978.273921] ? proc_root_lookup+0x60/0x60 [ 978.278059] vfs_get_super+0x6e/0x270 [ 978.281847] proc_get_tree+0x88/0xb0 [ 978.285546] vfs_get_tree+0x1cb/0x5c0 [ 978.289341] do_mount+0x6f2/0x1e20 [ 978.292867] ? copy_mount_string+0x40/0x40 [ 978.297097] ? retint_kernel+0x10/0x10 [ 978.300975] ? copy_mount_options+0x1a1/0x380 [ 978.305465] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 978.311219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 978.316755] ? copy_mount_options+0x285/0x380 [ 978.321238] ksys_mount+0x12d/0x140 [ 978.324939] __x64_sys_mount+0xbe/0x150 [ 978.328900] do_syscall_64+0x1b9/0x820 [ 978.332769] ? finish_task_switch+0x1d3/0x870 [ 978.337255] ? syscall_return_slowpath+0x5e0/0x5e0 [ 978.342165] ? syscall_return_slowpath+0x31d/0x5e0 [ 978.347097] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 978.352101] ? prepare_exit_to_usermode+0x291/0x3b0 [ 978.357113] ? perf_trace_sys_enter+0xb10/0xb10 [ 978.361765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 978.366598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.371786] RIP: 0033:0x455ab9 [ 978.374961] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 978.394141] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 978.401849] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 978.409541] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 978.416791] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 978.424043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 978.431294] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000e 13:31:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x40, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000140)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000795084cd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000885e85ae876aeaa48019673a88668b3e542ad808541a492ec46f157dda499a3b0941d41167149b"], 0xc8, 0x0, 0x1000) 13:31:06 executing program 2 (fault-call:9 fault-nth:15): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d000100000000000000000015000800030021000000e1d94c4e17c770c8b7e65dc35ca1dea13600a2b44faf45188cab6c6edee1ffab0e12fd4154a6782c"], 0x1c}, 0x1}, 0x0) sysfs$2(0x2, 0x7, &(0x7f0000000140)=""/207) 13:31:06 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xcf73, @loopback={0x0, 0x8}}, 0x1c) 13:31:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x8, 0x2}, 0x4ffff8005) 13:31:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:06 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x2010000, &(0x7f0000781f70)) 13:31:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@remote, @broadcast, 0x0}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000840)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'bridge0\x00', 0x0}) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f00000009c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000a00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000b40)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000043c0)={'teql0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004400)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004440)={0x0, @multicast1, @multicast1}, &(0x7f0000004480)=0xc) accept4(r0, &(0x7f0000004580)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000004600)=0x80, 0x800) accept$packet(0xffffffffffffff9c, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000046c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22000101}, 0xc, &(0x7f0000004d00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d4050000", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000600000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004002dfc905638000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="6c01020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004002000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004002000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400eb03000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004007600000008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="580102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000034000400010007050600000007000024020000009c0081050400000040007f1fff030000010001000300000004000103ffffffff3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="ff01070004000000"], 0x5d4}, 0x1}, 0x40040) [ 978.744850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 978.755357] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 978.776258] FAULT_INJECTION: forcing a failure. [ 978.776258] name failslab, interval 1, probability 0, space 0, times 0 13:31:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) [ 978.787714] CPU: 0 PID: 24234 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 978.796196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.805549] Call Trace: [ 978.808153] dump_stack+0x1c9/0x2b4 [ 978.811779] ? dump_stack_print_info.cold.2+0x52/0x52 [ 978.816967] ? __kernel_text_address+0xd/0x40 [ 978.821458] ? unwind_get_return_address+0x61/0xa0 [ 978.826383] should_fail.cold.4+0xa/0x11 [ 978.830445] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 978.835532] ? save_stack+0xa9/0xd0 [ 978.839139] ? save_stack+0x43/0xd0 [ 978.842743] ? kasan_kmalloc+0xc4/0xe0 [ 978.846626] ? kmem_cache_alloc_trace+0x152/0x780 [ 978.851450] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 978.856622] ? __list_lru_init+0x4d6/0x840 [ 978.860838] ? alloc_super+0x976/0xb10 [ 978.864718] ? vfs_get_super+0x6e/0x270 [ 978.868790] ? proc_get_tree+0x88/0xb0 [ 978.872673] ? vfs_get_tree+0x1cb/0x5c0 [ 978.876640] ? do_mount+0x6f2/0x1e20 [ 978.880336] ? ksys_mount+0x12d/0x140 [ 978.884122] ? __x64_sys_mount+0xbe/0x150 [ 978.888257] ? do_syscall_64+0x1b9/0x820 [ 978.892307] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.897661] ? save_stack+0xa9/0xd0 [ 978.901278] ? lock_acquire+0x1e4/0x540 [ 978.905244] ? fs_reclaim_acquire+0x20/0x20 [ 978.909550] ? lock_downgrade+0x8f0/0x8f0 [ 978.913692] ? __x64_sys_mount+0xbe/0x150 [ 978.917831] ? check_same_owner+0x340/0x340 [ 978.922137] ? rcu_note_context_switch+0x730/0x730 [ 978.927141] __should_failslab+0x124/0x180 [ 978.931358] should_failslab+0x9/0x14 [ 978.935155] kmem_cache_alloc_trace+0x2cb/0x780 [ 978.939811] ? kasan_kmalloc+0xc4/0xe0 [ 978.943685] __memcg_init_list_lru_node+0x185/0x2d0 [ 978.948709] ? kvfree_rcu+0x20/0x20 [ 978.952316] ? __kmalloc_node+0x47/0x70 [ 978.956274] __list_lru_init+0x4d6/0x840 [ 978.960317] ? list_lru_destroy+0x500/0x500 [ 978.964622] ? prealloc_shrinker+0x213/0x480 [ 978.969013] ? __init_waitqueue_head+0x9e/0x150 [ 978.973673] ? inactive_list_is_low+0x850/0x850 [ 978.978324] ? __lockdep_init_map+0x105/0x590 [ 978.982808] alloc_super+0x976/0xb10 [ 978.986514] ? destroy_unused_super.part.11+0x110/0x110 [ 978.991859] ? lock_downgrade+0x8f0/0x8f0 [ 978.995990] ? kasan_check_read+0x11/0x20 [ 979.000120] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 979.004689] ? kasan_check_write+0x14/0x20 [ 979.008906] ? do_raw_spin_lock+0xc1/0x200 [ 979.013123] ? ns_test_super+0x50/0x50 [ 979.016991] sget_fc+0x269/0x950 [ 979.020341] ? compare_single+0x10/0x10 [ 979.024297] ? alloc_super+0xb10/0xb10 [ 979.028174] ? kasan_kmalloc+0xc4/0xe0 [ 979.032049] ? __kmalloc_track_caller+0x311/0x760 [ 979.036885] ? proc_root_lookup+0x60/0x60 [ 979.041030] vfs_get_super+0x6e/0x270 [ 979.044817] proc_get_tree+0x88/0xb0 [ 979.048608] vfs_get_tree+0x1cb/0x5c0 [ 979.052392] do_mount+0x6f2/0x1e20 [ 979.055914] ? copy_mount_string+0x40/0x40 [ 979.060137] ? retint_kernel+0x10/0x10 [ 979.064015] ? copy_mount_options+0x1f0/0x380 [ 979.068498] ? copy_mount_options+0x202/0x380 [ 979.072985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.078507] ? copy_mount_options+0x285/0x380 [ 979.082986] ksys_mount+0x12d/0x140 [ 979.086606] __x64_sys_mount+0xbe/0x150 [ 979.090567] do_syscall_64+0x1b9/0x820 [ 979.094436] ? finish_task_switch+0x1d3/0x870 [ 979.098912] ? syscall_return_slowpath+0x5e0/0x5e0 [ 979.103827] ? syscall_return_slowpath+0x31d/0x5e0 [ 979.108749] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 979.113754] ? prepare_exit_to_usermode+0x291/0x3b0 [ 979.118758] ? perf_trace_sys_enter+0xb10/0xb10 [ 979.123415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 979.128242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.133426] RIP: 0033:0x455ab9 [ 979.136601] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.155733] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 979.163421] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 979.170680] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 979.177930] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 979.185181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 13:31:06 executing program 2 (fault-call:9 fault-nth:16): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 979.192431] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000000f 13:31:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x8, 0x2}, 0x4ffff8005) 13:31:06 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000009, &(0x7f0000781f70)) 13:31:06 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc02c000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) fcntl$dupfd(r0, 0x0, r0) [ 979.551910] FAULT_INJECTION: forcing a failure. [ 979.551910] name failslab, interval 1, probability 0, space 0, times 0 [ 979.563233] CPU: 1 PID: 24266 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 979.571730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.581086] Call Trace: [ 979.583713] dump_stack+0x1c9/0x2b4 [ 979.587344] ? dump_stack_print_info.cold.2+0x52/0x52 [ 979.592548] ? __kernel_text_address+0xd/0x40 [ 979.597075] ? unwind_get_return_address+0x61/0xa0 [ 979.602026] should_fail.cold.4+0xa/0x11 [ 979.606109] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 979.611220] ? save_stack+0xa9/0xd0 [ 979.614843] ? save_stack+0x43/0xd0 [ 979.618456] ? kasan_kmalloc+0xc4/0xe0 [ 979.622333] ? kmem_cache_alloc_trace+0x152/0x780 [ 979.627180] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 979.632451] ? __list_lru_init+0x4d6/0x840 [ 979.636678] ? alloc_super+0x976/0xb10 [ 979.640574] ? vfs_get_super+0x6e/0x270 [ 979.644547] ? proc_get_tree+0x88/0xb0 [ 979.648432] ? vfs_get_tree+0x1cb/0x5c0 [ 979.652434] ? do_mount+0x6f2/0x1e20 [ 979.656148] ? ksys_mount+0x12d/0x140 [ 979.659939] ? __x64_sys_mount+0xbe/0x150 [ 979.664091] ? do_syscall_64+0x1b9/0x820 [ 979.668141] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.673505] ? save_stack+0xa9/0xd0 [ 979.677147] ? lock_acquire+0x1e4/0x540 [ 979.681114] ? fs_reclaim_acquire+0x20/0x20 [ 979.685424] ? lock_downgrade+0x8f0/0x8f0 [ 979.689559] ? __x64_sys_mount+0xbe/0x150 [ 979.694311] ? check_same_owner+0x340/0x340 [ 979.698640] ? rcu_note_context_switch+0x730/0x730 [ 979.703565] __should_failslab+0x124/0x180 [ 979.707789] should_failslab+0x9/0x14 [ 979.711578] kmem_cache_alloc_trace+0x2cb/0x780 [ 979.716494] ? kasan_kmalloc+0xc4/0xe0 [ 979.720378] __memcg_init_list_lru_node+0x185/0x2d0 [ 979.725393] ? kvfree_rcu+0x20/0x20 [ 979.729006] ? __kmalloc_node+0x47/0x70 [ 979.732983] __list_lru_init+0x4d6/0x840 [ 979.737037] ? list_lru_destroy+0x500/0x500 [ 979.741363] ? prealloc_shrinker+0x213/0x480 [ 979.745766] ? __init_waitqueue_head+0x9e/0x150 [ 979.750423] ? inactive_list_is_low+0x850/0x850 [ 979.755086] ? __lockdep_init_map+0x105/0x590 [ 979.759573] alloc_super+0x976/0xb10 [ 979.763289] ? destroy_unused_super.part.11+0x110/0x110 [ 979.768643] ? lock_downgrade+0x8f0/0x8f0 [ 979.772798] ? kasan_check_read+0x11/0x20 [ 979.776936] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 979.781510] ? kasan_check_write+0x14/0x20 [ 979.785739] ? do_raw_spin_lock+0xc1/0x200 [ 979.789963] ? ns_test_super+0x50/0x50 [ 979.793843] sget_fc+0x269/0x950 [ 979.797225] ? compare_single+0x10/0x10 [ 979.801191] ? alloc_super+0xb10/0xb10 [ 979.805067] ? kasan_kmalloc+0xc4/0xe0 [ 979.808947] ? __kmalloc_track_caller+0x311/0x760 [ 979.813789] ? proc_root_lookup+0x60/0x60 [ 979.817938] vfs_get_super+0x6e/0x270 [ 979.821728] proc_get_tree+0x88/0xb0 [ 979.825447] vfs_get_tree+0x1cb/0x5c0 [ 979.829239] do_mount+0x6f2/0x1e20 [ 979.832771] ? copy_mount_string+0x40/0x40 [ 979.836993] ? kasan_kmalloc+0xc4/0xe0 [ 979.840871] ? kmem_cache_alloc_trace+0x318/0x780 [ 979.845704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 979.851234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.856873] ? copy_mount_options+0x285/0x380 [ 979.861363] ksys_mount+0x12d/0x140 [ 979.864986] __x64_sys_mount+0xbe/0x150 [ 979.868968] do_syscall_64+0x1b9/0x820 [ 979.872934] ? syscall_return_slowpath+0x5e0/0x5e0 [ 979.877858] ? syscall_return_slowpath+0x31d/0x5e0 [ 979.882784] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 979.887791] ? prepare_exit_to_usermode+0x291/0x3b0 [ 979.893058] ? perf_trace_sys_enter+0xb10/0xb10 [ 979.897726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 979.902569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.907760] RIP: 0033:0x455ab9 [ 979.910932] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.930234] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 979.937939] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 979.945196] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 979.952458] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 979.959819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 979.967075] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000010 13:31:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000)="f94d5e9d852e7f0c5c5e3b586be65b3d4aaf652c6f9a4e0bdb7c01129ee604e73703") r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x240080) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x6, 0xb67, 0x7, 0x40]}, &(0x7f00000001c0)=0xc) 13:31:07 executing program 2 (fault-call:9 fault-nth:17): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 980.219220] FAULT_INJECTION: forcing a failure. [ 980.219220] name failslab, interval 1, probability 0, space 0, times 0 [ 980.230523] CPU: 1 PID: 24299 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 980.239007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.248365] Call Trace: [ 980.250972] dump_stack+0x1c9/0x2b4 [ 980.254611] ? dump_stack_print_info.cold.2+0x52/0x52 [ 980.259817] ? __kernel_text_address+0xd/0x40 [ 980.264321] ? unwind_get_return_address+0x61/0xa0 13:31:07 executing program 6: r0 = socket$inet6(0xa, 0x1200000000002, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:31:07 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfe80, @loopback={0x0, 0x8}}, 0x1c) 13:31:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x8, 0x2}, 0x4ffff8005) 13:31:07 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000855, &(0x7f0000781f70)) 13:31:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d000106afd7790000000000150000030021000000"], 0x1c}, 0x1}, 0x0) flistxattr(r0, &(0x7f0000000280)=""/66, 0x42) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) getsockname$inet(r1, &(0x7f0000000400)={0x0, 0x0, @local}, &(0x7f0000000440)=0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x58000, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x501, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000380)={0x1, r3}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x0, 0x70bd2a, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffeff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) read(r0, &(0x7f0000000480)=""/173, 0xad) 13:31:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}) close(r3) dup3(r1, r2, 0x0) [ 980.269258] should_fail.cold.4+0xa/0x11 [ 980.273414] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 980.278527] ? save_stack+0xa9/0xd0 [ 980.282173] ? save_stack+0x43/0xd0 [ 980.285818] ? kasan_kmalloc+0xc4/0xe0 [ 980.289723] ? kmem_cache_alloc_trace+0x152/0x780 [ 980.294586] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 980.299794] ? __list_lru_init+0x4d6/0x840 [ 980.304047] ? alloc_super+0x976/0xb10 [ 980.307958] ? vfs_get_super+0x6e/0x270 [ 980.311953] ? proc_get_tree+0x88/0xb0 [ 980.315857] ? vfs_get_tree+0x1cb/0x5c0 [ 980.319846] ? do_mount+0x6f2/0x1e20 [ 980.323579] ? ksys_mount+0x12d/0x140 [ 980.327400] ? __x64_sys_mount+0xbe/0x150 [ 980.331565] ? do_syscall_64+0x1b9/0x820 [ 980.335656] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.341065] ? save_stack+0xa9/0xd0 [ 980.344702] ? lock_acquire+0x1e4/0x540 [ 980.348681] ? fs_reclaim_acquire+0x20/0x20 [ 980.353017] ? lock_downgrade+0x8f0/0x8f0 [ 980.357170] ? __x64_sys_mount+0xbe/0x150 [ 980.361350] ? check_same_owner+0x340/0x340 13:31:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) [ 980.365686] ? rcu_note_context_switch+0x730/0x730 [ 980.370629] __should_failslab+0x124/0x180 [ 980.374873] should_failslab+0x9/0x14 [ 980.378716] kmem_cache_alloc_trace+0x2cb/0x780 [ 980.383393] ? kasan_kmalloc+0xc4/0xe0 [ 980.387301] __memcg_init_list_lru_node+0x185/0x2d0 [ 980.392336] ? kvfree_rcu+0x20/0x20 [ 980.396011] ? __kmalloc_node+0x47/0x70 [ 980.400010] __list_lru_init+0x4d6/0x840 [ 980.404089] ? list_lru_destroy+0x500/0x500 [ 980.408431] ? prealloc_shrinker+0x213/0x480 [ 980.412853] ? __init_waitqueue_head+0x9e/0x150 13:31:07 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000300, &(0x7f0000781f70)) [ 980.417532] ? inactive_list_is_low+0x850/0x850 [ 980.422301] ? __lockdep_init_map+0x105/0x590 [ 980.426812] alloc_super+0x976/0xb10 [ 980.430559] ? destroy_unused_super.part.11+0x110/0x110 [ 980.435937] ? lock_downgrade+0x8f0/0x8f0 [ 980.440098] ? kasan_check_read+0x11/0x20 [ 980.444263] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 980.448861] ? kasan_check_write+0x14/0x20 [ 980.453106] ? do_raw_spin_lock+0xc1/0x200 [ 980.457349] ? ns_test_super+0x50/0x50 [ 980.461242] sget_fc+0x269/0x950 [ 980.464613] ? compare_single+0x10/0x10 [ 980.468587] ? alloc_super+0xb10/0xb10 [ 980.472485] ? kasan_kmalloc+0xc4/0xe0 [ 980.476388] ? __kmalloc_track_caller+0x311/0x760 [ 980.481245] ? proc_root_lookup+0x60/0x60 [ 980.485402] vfs_get_super+0x6e/0x270 [ 980.489218] proc_get_tree+0x88/0xb0 [ 980.492944] vfs_get_tree+0x1cb/0x5c0 [ 980.496755] do_mount+0x6f2/0x1e20 [ 980.500317] ? copy_mount_string+0x40/0x40 [ 980.504570] ? retint_kernel+0x10/0x10 [ 980.508461] ? copy_mount_options+0x1f0/0x380 [ 980.512954] ? copy_mount_options+0x1f6/0x380 [ 980.517457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.523004] ? copy_mount_options+0x285/0x380 [ 980.527503] ksys_mount+0x12d/0x140 [ 980.531163] __x64_sys_mount+0xbe/0x150 [ 980.535236] do_syscall_64+0x1b9/0x820 [ 980.539142] ? syscall_return_slowpath+0x5e0/0x5e0 [ 980.544094] ? syscall_return_slowpath+0x31d/0x5e0 [ 980.549048] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 980.554076] ? prepare_exit_to_usermode+0x291/0x3b0 [ 980.559106] ? perf_trace_sys_enter+0xb10/0xb10 [ 980.563796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 980.568659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.573856] RIP: 0033:0x455ab9 [ 980.577051] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.596302] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 980.604017] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 980.611295] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 13:31:08 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x2000000, &(0x7f0000781f70)) [ 980.618573] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 980.625847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 980.633122] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000011 [ 980.655120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:31:08 executing program 2 (fault-call:9 fault-nth:18): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe7d2, @loopback={0x0, 0x8}}, 0x1c) 13:31:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x0) 13:31:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x81, 0x40080) getpeername$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) r2 = request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='/dev/dsp#\x00', 0x0) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r3) [ 980.673333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:31:08 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x1e000000, &(0x7f0000781f70)) 13:31:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x897000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x101000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000180)={0x1, {r2, r3+30000000}, 0x5, 0x101}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) [ 980.876312] FAULT_INJECTION: forcing a failure. [ 980.876312] name failslab, interval 1, probability 0, space 0, times 0 [ 980.887642] CPU: 0 PID: 24345 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 980.896121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.905461] Call Trace: [ 980.908048] dump_stack+0x1c9/0x2b4 [ 980.911667] ? dump_stack_print_info.cold.2+0x52/0x52 [ 980.916857] ? __kernel_text_address+0xd/0x40 [ 980.921352] ? unwind_get_return_address+0x61/0xa0 [ 980.926273] should_fail.cold.4+0xa/0x11 [ 980.930327] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 980.935417] ? save_stack+0xa9/0xd0 [ 980.939034] ? save_stack+0x43/0xd0 [ 980.942650] ? kasan_kmalloc+0xc4/0xe0 [ 980.946537] ? kmem_cache_alloc_trace+0x152/0x780 [ 980.951375] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 980.956553] ? __list_lru_init+0x4d6/0x840 [ 980.960775] ? alloc_super+0x976/0xb10 [ 980.964671] ? vfs_get_super+0x6e/0x270 [ 980.968632] ? proc_get_tree+0x88/0xb0 [ 980.972516] ? vfs_get_tree+0x1cb/0x5c0 [ 980.976498] ? do_mount+0x6f2/0x1e20 [ 980.980206] ? ksys_mount+0x12d/0x140 [ 980.983993] ? __x64_sys_mount+0xbe/0x150 [ 980.988147] ? do_syscall_64+0x1b9/0x820 [ 980.992216] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.997571] ? save_stack+0xa9/0xd0 [ 981.001192] ? lock_acquire+0x1e4/0x540 [ 981.005178] ? fs_reclaim_acquire+0x20/0x20 [ 981.009491] ? lock_downgrade+0x8f0/0x8f0 [ 981.013631] ? __x64_sys_mount+0xbe/0x150 [ 981.017770] ? check_same_owner+0x340/0x340 [ 981.022078] ? rcu_note_context_switch+0x730/0x730 [ 981.027196] __should_failslab+0x124/0x180 [ 981.031427] should_failslab+0x9/0x14 [ 981.035218] kmem_cache_alloc_trace+0x2cb/0x780 [ 981.039880] ? kasan_kmalloc+0xc4/0xe0 [ 981.043755] __memcg_init_list_lru_node+0x185/0x2d0 [ 981.048757] ? kvfree_rcu+0x20/0x20 [ 981.052383] ? __kmalloc_node+0x47/0x70 [ 981.056344] __list_lru_init+0x4d6/0x840 [ 981.060391] ? list_lru_destroy+0x500/0x500 [ 981.064713] ? prealloc_shrinker+0x213/0x480 [ 981.069113] ? __init_waitqueue_head+0x9e/0x150 [ 981.073780] ? inactive_list_is_low+0x850/0x850 [ 981.078449] ? __lockdep_init_map+0x105/0x590 [ 981.082933] alloc_super+0x976/0xb10 [ 981.086644] ? destroy_unused_super.part.11+0x110/0x110 [ 981.092002] ? lock_downgrade+0x8f0/0x8f0 [ 981.096154] ? kasan_check_read+0x11/0x20 [ 981.100285] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 981.104866] ? kasan_check_write+0x14/0x20 [ 981.109095] ? do_raw_spin_lock+0xc1/0x200 [ 981.113332] ? ns_test_super+0x50/0x50 [ 981.117206] sget_fc+0x269/0x950 [ 981.120568] ? compare_single+0x10/0x10 [ 981.124551] ? alloc_super+0xb10/0xb10 [ 981.128427] ? kasan_kmalloc+0xc4/0xe0 [ 981.132389] ? __kmalloc_track_caller+0x311/0x760 [ 981.137219] ? proc_root_lookup+0x60/0x60 [ 981.141353] vfs_get_super+0x6e/0x270 [ 981.145165] proc_get_tree+0x88/0xb0 [ 981.148883] vfs_get_tree+0x1cb/0x5c0 [ 981.152685] do_mount+0x6f2/0x1e20 [ 981.156220] ? copy_mount_string+0x40/0x40 [ 981.160456] ? retint_kernel+0x10/0x10 [ 981.164344] ? __sanitizer_cov_trace_const_cmp4+0x20/0x20 [ 981.169962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.175491] ? copy_mount_options+0x285/0x380 [ 981.179973] ksys_mount+0x12d/0x140 [ 981.183600] __x64_sys_mount+0xbe/0x150 [ 981.187567] do_syscall_64+0x1b9/0x820 [ 981.191439] ? finish_task_switch+0x1d3/0x870 [ 981.195928] ? syscall_return_slowpath+0x5e0/0x5e0 [ 981.200845] ? syscall_return_slowpath+0x31d/0x5e0 [ 981.205772] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 981.210783] ? prepare_exit_to_usermode+0x291/0x3b0 [ 981.215796] ? perf_trace_sys_enter+0xb10/0xb10 [ 981.220454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 981.225292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.230465] RIP: 0033:0x455ab9 [ 981.233637] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.252768] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 981.260479] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 981.267749] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 981.275006] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 981.282275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 981.289534] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000012 13:31:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_setup(0x401, &(0x7f00000000c0)=0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x10000, 0x0) r3 = creat(&(0x7f0000000440)='\x00', 0xea) r4 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x800, 0x0) renameat(r2, &(0x7f0000000b40)='./file0\x00', r2, &(0x7f0000000b80)='./file1\x00') r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rfkill\x00', 0x2200, 0x0) r7 = fcntl$dupfd(r0, 0x406, r0) r8 = eventfd(0x6) r9 = socket$alg(0x26, 0x5, 0x0) close(r9) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r11 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="2c16a837da4b22913190800a2892dc92043764926430b522b90166e43e0ec172cf75ab7ce36c9d71c066997aec50662e257288c300e3e83ecc6ab4ce42d7154f58c5820bfebd38fab307ecb8662c45bc", 0x50}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r11, &(0x7f0000003e40)={&(0x7f0000003e80)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000580)=""/95, 0x5f}], 0x2, &(0x7f0000590000)}, 0x0) io_submit(r1, 0x7, &(0x7f0000000a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f00000002c0)="b48298910ba7700ebe0fdabdf1feb8636b044caaac9423d2b58821d7b91431e619420b2ec39f88e130c1943107f20e2f6bd3720b41284a0efa6bff11ced4a204c56261fcac127e896c356c332ad25f7a437f7e968808dfd8aa36d9870e81c49af70fe8523af7d78c70f88b33fe3b035e8c73b273b8f014182f42718fe4f2a23fa477ed142cfb743a1caadf51903df209d71ac38064911d65b5b8f2016559ea8901465f62c47bdd4a126121a028", 0xad, 0x80000000, 0x0, 0x1, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xe, 0x8001, r0, &(0x7f0000000380)="f2d257c2992f6e17ef11371f77b8a7dd1549ac23908d06a3edc152b70c69906f09f13cd5e9fb50ca1add4a28cd98b251c6d5b0e1783e7203c240c0d3045c7b417517a2a1d59d87b78fba5cbcde08a1aa97270c50bd26e30b6819184e08ec9896e78a666cd2b87a7909d1cf1b94271b02bc2c51a757de4b63a6837cec7adb3d8835280bf92b731c919aa97f2d63df77904ee04bbbd4b2bc53", 0x98, 0xffffffffffffffc1, 0x0, 0x0, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x2400000000000, r0, &(0x7f00000004c0)="47a1b09be34fbefbcbe66e6850c6c13a9f63542db21d59a62c473cea8025d765ef8c93982d3d20cf05525fc22793baa5889fe329cb7a9659146189b01b8cff408e6385b7a48b403b5c513b9a0b369d7b29aeb8869d72f69e5d650967fd80a9ab40892d61c4ad207a230c927836057e5d56df0ee9aaf4119c03931fc896b21372b67b6cf9aa0a09ae68518e8f62cc8860cf2edbdb116baa7719ed5f7e5c36176718e4968c17e7dfa6d2", 0xa9, 0xfffffffffffffffd, 0x0, 0x0, r4}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x6ca9, r0, &(0x7f0000000600)="77693c463da3001867996708f47ca2edf5c882608fdae43eca41eb9d0b9eb92249ce342cd63bffce9bfa9ae731b88a96b1dbe12ab2809eb5ff0d31de9054e6edc61f4623eb2e96a501bff676d18a5c32ae4ca767aaf5e51724d36fe9bb2835f1633e07501d5139fe48c4efa71a36fa49008cf756c6efd076bf40da40597f0818a926051b36a9a5f114433d006420277d700e1b4b184f41", 0x97, 0x3, 0x0, 0x1, r5}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000740)="29c0", 0x2, 0x5, 0x0, 0x1, r6}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff8, r0, &(0x7f0000000800)="a56ebcd157dfcef348364120bd8413c865a8f0c4da1ce9c0910c749a68a56c8b68c60f2423b4852f49767a602fe8c7fc60e34e072399021caba2c3ffc07358b2a386f95ee19aae98c67cd5b2cb5209dd56349b52a003476a621bd05727eb8e8997d6f9575f5d162d5bdb3d34353cd8bcc7037e60c8c5514f0d0d364fa04132a63d19854a3bf86ab8fe93d0bbebff73739d92194decf841f18034876121052deb85732e7e2cf96b0eb8717473fecfac02c6aac8450a54d932758b5f7d9304c29fbf8ad29dc039a5", 0xc7, 0x2, 0x0, 0x1, r7}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000000940)="82d43a735b8963b6b0bb3f40d47160ffd13edeac9c4f9784a18f66866dbb5f0acf40c8275e0129d32a072e9b1d9605ff491655c9b957c302711f44b7da6ecf2d85c3252c3d301ab9de41e43308ce2ebd34989b050ac2fc7128cc8fbf2a188f4379369801415bf78bc0cb881c8675c879546ade481df0aabc620400316e1293fca28e36aec6e23915e295f9baed098a4a116746f2835b5cff", 0x98, 0x8, 0x0, 0x0, r8}]) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000a80)="f79d2d95e6614d79c33440bf1c2f2148", 0x10) sendto$inet(r6, &(0x7f0000000bc0)="d89afeeafb4c17df76fd00ed3bcdde69f9947a4e9be2e2bfc8656646f0a80aa4c35321e99cb4b8ab1e0074a2b9d3af4b7f0050d1eedc2f1ec45fcc9d65a152e6e5a75f17e4de38d683db802bdc978f06706d9203f4a046959a5eb107c764104aa499df67f1e7622af6b2adad3d4972a6972d9caa6cdbbe302e875a746544bbc28babff06a20472210bf4c40c8bfc538eae02d1166b4ec47da9a41ddea18fba9487", 0xa1, 0x80, 0x0, 0x0) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000e9887927000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000310e0000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000031390251c10000"], 0xc8, 0x0, 0x1000) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r12}, 0x10) 13:31:08 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x7f000000, &(0x7f0000781f70)) 13:31:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x0) 13:31:08 executing program 2 (fault-call:9 fault-nth:19): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f]}}) close(r3) dup3(r1, r2, 0x0) 13:31:08 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0xfffffffffffffc84, 0x1d, 0x1, 0x3, 0x25dfdbfc, {0x11}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x4000080) 13:31:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x0) [ 981.514959] FAULT_INJECTION: forcing a failure. [ 981.514959] name failslab, interval 1, probability 0, space 0, times 0 [ 981.526394] CPU: 0 PID: 24378 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 981.534890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.544247] Call Trace: [ 981.546868] dump_stack+0x1c9/0x2b4 [ 981.550502] ? dump_stack_print_info.cold.2+0x52/0x52 [ 981.555704] ? __kernel_text_address+0xd/0x40 [ 981.560206] ? unwind_get_return_address+0x61/0xa0 13:31:09 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000003, &(0x7f0000781f70)) [ 981.565124] should_fail.cold.4+0xa/0x11 [ 981.569188] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 981.574307] ? save_stack+0xa9/0xd0 [ 981.577936] ? save_stack+0x43/0xd0 [ 981.581553] ? kasan_kmalloc+0xc4/0xe0 [ 981.585427] ? kmem_cache_alloc_trace+0x152/0x780 [ 981.590268] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 981.595446] ? __list_lru_init+0x4d6/0x840 [ 981.599679] ? alloc_super+0x976/0xb10 [ 981.603566] ? vfs_get_super+0x6e/0x270 [ 981.607541] ? proc_get_tree+0x88/0xb0 [ 981.611425] ? vfs_get_tree+0x1cb/0x5c0 [ 981.615396] ? do_mount+0x6f2/0x1e20 [ 981.619105] ? ksys_mount+0x12d/0x140 [ 981.622913] ? __x64_sys_mount+0xbe/0x150 [ 981.627064] ? do_syscall_64+0x1b9/0x820 [ 981.631130] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.636509] ? save_stack+0xa9/0xd0 [ 981.640152] ? lock_acquire+0x1e4/0x540 [ 981.644146] ? fs_reclaim_acquire+0x20/0x20 [ 981.648487] ? lock_downgrade+0x8f0/0x8f0 [ 981.652632] ? __x64_sys_mount+0xbe/0x150 [ 981.656788] ? check_same_owner+0x340/0x340 [ 981.661116] ? rcu_note_context_switch+0x730/0x730 [ 981.666055] __should_failslab+0x124/0x180 [ 981.670286] should_failslab+0x9/0x14 [ 981.674081] kmem_cache_alloc_trace+0x2cb/0x780 [ 981.678733] ? kasan_kmalloc+0xc4/0xe0 [ 981.682629] __memcg_init_list_lru_node+0x185/0x2d0 [ 981.687632] ? kvfree_rcu+0x20/0x20 [ 981.691248] ? __kmalloc_node+0x47/0x70 [ 981.695212] __list_lru_init+0x4d6/0x840 [ 981.699263] ? list_lru_destroy+0x500/0x500 [ 981.703569] ? prealloc_shrinker+0x213/0x480 [ 981.707974] ? __init_waitqueue_head+0x9e/0x150 [ 981.712638] ? inactive_list_is_low+0x850/0x850 [ 981.717303] ? __lockdep_init_map+0x105/0x590 [ 981.721794] alloc_super+0x976/0xb10 [ 981.725498] ? destroy_unused_super.part.11+0x110/0x110 [ 981.730852] ? lock_downgrade+0x8f0/0x8f0 [ 981.734998] ? kasan_check_read+0x11/0x20 [ 981.739138] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 981.743705] ? kasan_check_write+0x14/0x20 [ 981.747935] ? do_raw_spin_lock+0xc1/0x200 [ 981.752154] ? ns_test_super+0x50/0x50 [ 981.756034] sget_fc+0x269/0x950 [ 981.759391] ? compare_single+0x10/0x10 [ 981.763348] ? alloc_super+0xb10/0xb10 [ 981.767220] ? kasan_kmalloc+0xc4/0xe0 [ 981.771096] ? __kmalloc_track_caller+0x311/0x760 [ 981.775930] ? proc_root_lookup+0x60/0x60 [ 981.780245] vfs_get_super+0x6e/0x270 [ 981.784048] proc_get_tree+0x88/0xb0 [ 981.787763] vfs_get_tree+0x1cb/0x5c0 [ 981.791560] do_mount+0x6f2/0x1e20 [ 981.795088] ? check_same_owner+0x340/0x340 [ 981.799427] ? lock_release+0xa30/0xa30 [ 981.803398] ? copy_mount_string+0x40/0x40 [ 981.807617] ? kasan_kmalloc+0xc4/0xe0 [ 981.811492] ? kmem_cache_alloc_trace+0x318/0x780 [ 981.816324] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 981.821861] ? _copy_from_user+0xdf/0x150 [ 981.825997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.831528] ? copy_mount_options+0x285/0x380 [ 981.836015] ksys_mount+0x12d/0x140 [ 981.839659] __x64_sys_mount+0xbe/0x150 [ 981.843622] do_syscall_64+0x1b9/0x820 [ 981.847510] ? finish_task_switch+0x1d3/0x870 [ 981.852099] ? syscall_return_slowpath+0x5e0/0x5e0 [ 981.857034] ? syscall_return_slowpath+0x31d/0x5e0 [ 981.861952] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 981.866952] ? prepare_exit_to_usermode+0x291/0x3b0 [ 981.871960] ? perf_trace_sys_enter+0xb10/0xb10 [ 981.876629] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 981.881480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.886656] RIP: 0033:0x455ab9 [ 981.889834] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.909004] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 13:31:09 executing program 2 (fault-call:9 fault-nth:20): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 981.916716] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 981.923986] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 981.931253] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 981.938510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 981.945764] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000013 13:31:09 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x9f68, @loopback={0x0, 0x8}}, 0x1c) 13:31:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x105440) mq_getsetattr(r1, &(0x7f0000000180)={0x6, 0x8001, 0x100000000, 0xffffffffffffff7f, 0x5cad, 0x2, 0x2, 0x1f}, &(0x7f00000001c0)) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd517, 0x10000) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:31:09 executing program 0 (fault-call:2 fault-nth:0): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:09 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xffd2}, 0x1}, 0x0) [ 982.256540] FAULT_INJECTION: forcing a failure. [ 982.256540] name failslab, interval 1, probability 0, space 0, times 0 [ 982.267812] CPU: 1 PID: 24415 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 982.276300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.285645] Call Trace: [ 982.288244] dump_stack+0x1c9/0x2b4 [ 982.291902] ? dump_stack_print_info.cold.2+0x52/0x52 [ 982.297200] ? __kernel_text_address+0xd/0x40 [ 982.301710] ? unwind_get_return_address+0x61/0xa0 [ 982.306672] should_fail.cold.4+0xa/0x11 [ 982.310751] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 982.315871] ? save_stack+0xa9/0xd0 [ 982.319515] ? save_stack+0x43/0xd0 [ 982.323161] ? kasan_kmalloc+0xc4/0xe0 [ 982.327076] ? kmem_cache_alloc_trace+0x152/0x780 [ 982.331940] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 982.337149] ? __list_lru_init+0x4d6/0x840 [ 982.341403] ? alloc_super+0x976/0xb10 [ 982.345319] ? vfs_get_super+0x6e/0x270 [ 982.349312] ? proc_get_tree+0x88/0xb0 [ 982.353211] ? vfs_get_tree+0x1cb/0x5c0 [ 982.357189] ? do_mount+0x6f2/0x1e20 [ 982.360898] ? ksys_mount+0x12d/0x140 [ 982.364693] ? __x64_sys_mount+0xbe/0x150 [ 982.368836] ? do_syscall_64+0x1b9/0x820 [ 982.372892] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.378257] ? save_stack+0xa9/0xd0 [ 982.381877] ? lock_acquire+0x1e4/0x540 [ 982.385851] ? fs_reclaim_acquire+0x20/0x20 [ 982.390163] ? lock_downgrade+0x8f0/0x8f0 [ 982.394301] ? __x64_sys_mount+0xbe/0x150 [ 982.398444] ? check_same_owner+0x340/0x340 [ 982.402759] ? rcu_note_context_switch+0x730/0x730 [ 982.407681] __should_failslab+0x124/0x180 [ 982.411907] should_failslab+0x9/0x14 [ 982.415700] kmem_cache_alloc_trace+0x2cb/0x780 [ 982.420357] ? kasan_kmalloc+0xc4/0xe0 [ 982.424240] __memcg_init_list_lru_node+0x185/0x2d0 [ 982.429247] ? kvfree_rcu+0x20/0x20 [ 982.432861] ? __kmalloc_node+0x47/0x70 [ 982.436833] __list_lru_init+0x4d6/0x840 [ 982.440884] ? list_lru_destroy+0x500/0x500 [ 982.445206] ? prealloc_shrinker+0x213/0x480 [ 982.449600] ? __init_waitqueue_head+0x9e/0x150 [ 982.454257] ? inactive_list_is_low+0x850/0x850 [ 982.459176] ? __lockdep_init_map+0x105/0x590 [ 982.463677] alloc_super+0x976/0xb10 [ 982.467385] ? destroy_unused_super.part.11+0x110/0x110 [ 982.472742] ? lock_downgrade+0x8f0/0x8f0 [ 982.476889] ? kasan_check_read+0x11/0x20 [ 982.481051] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 982.485642] ? kasan_check_write+0x14/0x20 [ 982.489867] ? do_raw_spin_lock+0xc1/0x200 [ 982.494097] ? ns_test_super+0x50/0x50 [ 982.497982] sget_fc+0x269/0x950 [ 982.501347] ? compare_single+0x10/0x10 [ 982.505318] ? alloc_super+0xb10/0xb10 [ 982.509544] ? kasan_kmalloc+0xc4/0xe0 [ 982.514495] ? __kmalloc_track_caller+0x311/0x760 [ 982.519416] ? proc_root_lookup+0x60/0x60 [ 982.523559] vfs_get_super+0x6e/0x270 [ 982.527473] proc_get_tree+0x88/0xb0 [ 982.531187] vfs_get_tree+0x1cb/0x5c0 [ 982.534981] do_mount+0x6f2/0x1e20 [ 982.538521] ? check_same_owner+0x340/0x340 [ 982.542830] ? lock_release+0xa30/0xa30 [ 982.546797] ? copy_mount_string+0x40/0x40 [ 982.551022] ? kasan_kmalloc+0xc4/0xe0 [ 982.554914] ? kmem_cache_alloc_trace+0x318/0x780 [ 982.559751] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 982.565277] ? _copy_from_user+0xdf/0x150 [ 982.569413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.575378] ? copy_mount_options+0x285/0x380 [ 982.579867] ksys_mount+0x12d/0x140 [ 982.583483] __x64_sys_mount+0xbe/0x150 [ 982.587448] do_syscall_64+0x1b9/0x820 [ 982.591327] ? finish_task_switch+0x1d3/0x870 [ 982.595820] ? syscall_return_slowpath+0x5e0/0x5e0 [ 982.600742] ? syscall_return_slowpath+0x31d/0x5e0 [ 982.605663] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 982.610690] ? prepare_exit_to_usermode+0x291/0x3b0 [ 982.615698] ? perf_trace_sys_enter+0xb10/0xb10 [ 982.620359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 982.625212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.630650] RIP: 0033:0x455ab9 [ 982.633826] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:31:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf79a, @loopback={0x0, 0x8}}, 0x1c) [ 982.653130] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 982.660829] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 982.668094] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 982.675351] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 982.682607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 982.689863] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000014 [ 982.711500] FAULT_INJECTION: forcing a failure. [ 982.711500] name failslab, interval 1, probability 0, space 0, times 0 [ 982.722903] CPU: 0 PID: 24421 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 982.731409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.740771] Call Trace: [ 982.743360] dump_stack+0x1c9/0x2b4 [ 982.746983] ? dump_stack_print_info.cold.2+0x52/0x52 [ 982.752186] ? perf_trace_lock+0x49d/0x920 [ 982.756458] should_fail.cold.4+0xa/0x11 [ 982.760563] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 982.765700] ? zap_class+0x740/0x740 [ 982.769451] ? zap_class+0x740/0x740 [ 982.773210] ? __f_unlock_pos+0x19/0x20 [ 982.777235] ? lock_downgrade+0x8f0/0x8f0 [ 982.781421] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 982.786974] ? proc_fail_nth_write+0x9e/0x210 [ 982.791474] ? lock_acquire+0x1e4/0x540 [ 982.795448] ? fs_reclaim_acquire+0x20/0x20 [ 982.799767] ? lock_downgrade+0x8f0/0x8f0 [ 982.804703] ? check_same_owner+0x340/0x340 [ 982.809029] ? lock_release+0xa30/0xa30 [ 982.813014] ? rcu_note_context_switch+0x730/0x730 [ 982.817953] __should_failslab+0x124/0x180 [ 982.822204] should_failslab+0x9/0x14 [ 982.826181] __kmalloc+0x2c8/0x760 [ 982.829733] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 982.835282] ? do_handle_open+0x138/0x940 [ 982.839447] ? _copy_from_user+0xdf/0x150 [ 982.843624] do_handle_open+0x138/0x940 [ 982.847603] ? vfs_dentry_acceptable+0x10/0x10 [ 982.852184] ? ksys_write+0x1ae/0x260 [ 982.855996] ? __ia32_sys_read+0xb0/0xb0 [ 982.860085] ? syscall_slow_exit_work+0x500/0x500 [ 982.864932] __x64_sys_open_by_handle_at+0x76/0xb0 [ 982.869858] do_syscall_64+0x1b9/0x820 [ 982.873746] ? finish_task_switch+0x1d3/0x870 [ 982.878251] ? syscall_return_slowpath+0x5e0/0x5e0 [ 982.883176] ? syscall_return_slowpath+0x31d/0x5e0 [ 982.888112] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 982.893144] ? prepare_exit_to_usermode+0x291/0x3b0 [ 982.898169] ? perf_trace_sys_enter+0xb10/0xb10 [ 982.902836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 982.907680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.912860] RIP: 0033:0x455ab9 [ 982.916120] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.935667] RSP: 002b:00007f97d3f00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 982.943372] RAX: ffffffffffffffda RBX: 00007f97d3f016d4 RCX: 0000000000455ab9 [ 982.950646] RDX: 00000004ffff8005 RSI: 0000000020000040 RDI: 0000000000000013 [ 982.957916] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 982.965188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 982.972474] R13: 00000000004c038d R14: 00000000004d01b0 R15: 0000000000000000 13:31:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:31:10 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x1d000000, &(0x7f0000781f70)) 13:31:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d001200000000000000ffffff7f010000000395d6297f00"], 0x1c}, 0x1}, 0x0) 13:31:10 executing program 2 (fault-call:9 fault-nth:21): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:10 executing program 0 (fault-call:2 fault-nth:1): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xda28, @loopback={0x0, 0x8}}, 0x1c) 13:31:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0001000000000800000000150000000800030021000000"], 0x1c}, 0x1}, 0x0) [ 983.237873] FAULT_INJECTION: forcing a failure. [ 983.237873] name failslab, interval 1, probability 0, space 0, times 0 [ 983.245173] FAULT_INJECTION: forcing a failure. [ 983.245173] name failslab, interval 1, probability 0, space 0, times 0 [ 983.249731] CPU: 0 PID: 24454 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 983.269448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.279063] Call Trace: [ 983.282287] dump_stack+0x1c9/0x2b4 [ 983.285929] ? dump_stack_print_info.cold.2+0x52/0x52 [ 983.291122] ? perf_trace_lock+0x49d/0x920 [ 983.295365] should_fail.cold.4+0xa/0x11 [ 983.299431] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 983.304819] ? check_same_owner+0x340/0x340 [ 983.309147] ? rcu_note_context_switch+0x730/0x730 [ 983.314083] ? memset+0x31/0x40 [ 983.317369] ? perf_trace_lock+0x49d/0x920 [ 983.321628] ? lock_acquire+0x1e4/0x540 [ 983.325599] ? fs_reclaim_acquire+0x20/0x20 [ 983.329925] ? lock_downgrade+0x8f0/0x8f0 [ 983.334085] ? check_same_owner+0x340/0x340 [ 983.338410] ? rcu_note_context_switch+0x730/0x730 [ 983.343355] __should_failslab+0x124/0x180 [ 983.347591] should_failslab+0x9/0x14 [ 983.351391] kmem_cache_alloc+0x2af/0x760 [ 983.355557] __d_alloc+0xc8/0xd50 [ 983.359016] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 983.364046] ? kasan_check_read+0x11/0x20 [ 983.368191] ? do_raw_spin_unlock+0xa7/0x2f0 [ 983.372600] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 983.377193] ? kasan_check_write+0x14/0x20 [ 983.381426] ? do_raw_spin_lock+0xc1/0x200 [ 983.385664] ? _raw_spin_unlock+0x22/0x30 [ 983.389808] ? d_find_any_alias+0x13b/0x1b0 [ 983.394130] ? dentry_free+0x170/0x170 [ 983.398035] __d_obtain_alias.part.38+0x6b/0xb0 [ 983.402733] ? ext4_journal_commit_callback+0x5e0/0x5e0 [ 983.408104] d_obtain_alias+0x5a/0x70 [ 983.411905] generic_fh_to_dentry+0x64/0x110 [ 983.416325] ext4_fh_to_dentry+0x34/0x40 [ 983.420393] ? ext4_fh_to_parent+0x40/0x40 [ 983.424631] exportfs_decode_fh+0x12a/0x6d0 [ 983.429224] ? drop_caches_sysctl_handler.cold.0+0x7e/0x7e [ 983.434853] ? find_acceptable_alias.part.5+0x1e0/0x1e0 [ 983.440218] ? __fget_light+0x2f7/0x440 [ 983.444198] ? fget_raw+0x20/0x20 [ 983.447662] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 983.452693] ? __check_object_size+0xa3/0x5d7 [ 983.457227] do_handle_open+0x407/0x940 [ 983.461208] ? vfs_dentry_acceptable+0x10/0x10 [ 983.465794] ? ksys_write+0x1ae/0x260 [ 983.469608] ? __ia32_sys_read+0xb0/0xb0 [ 983.473666] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 983.479233] __x64_sys_open_by_handle_at+0x76/0xb0 [ 983.484174] do_syscall_64+0x1b9/0x820 [ 983.488059] ? finish_task_switch+0x1d3/0x870 [ 983.492562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 983.497494] ? syscall_return_slowpath+0x31d/0x5e0 [ 983.502437] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 983.507462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 983.512324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.517514] RIP: 0033:0x455ab9 [ 983.520697] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.540162] RSP: 002b:00007f97d3f00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 983.547872] RAX: ffffffffffffffda RBX: 00007f97d3f016d4 RCX: 0000000000455ab9 [ 983.555136] RDX: 00000004ffff8005 RSI: 0000000020000040 RDI: 0000000000000013 [ 983.562399] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 983.569674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 983.576937] R13: 00000000004c038d R14: 00000000004d01b0 R15: 0000000000000001 13:31:11 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000c00, &(0x7f0000781f70)) [ 983.584232] CPU: 1 PID: 24451 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 983.592855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.603256] Call Trace: [ 983.605871] dump_stack+0x1c9/0x2b4 [ 983.609518] ? dump_stack_print_info.cold.2+0x52/0x52 [ 983.614727] ? perf_trace_lock+0xde/0x920 [ 983.618888] should_fail.cold.4+0xa/0x11 [ 983.622966] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 983.628096] ? save_stack+0xa9/0xd0 [ 983.631724] ? save_stack+0x43/0xd0 [ 983.635358] ? kasan_kmalloc+0xc4/0xe0 [ 983.639251] ? kmem_cache_alloc_trace+0x152/0x780 [ 983.644084] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 983.649260] ? __list_lru_init+0x4d6/0x840 [ 983.653490] ? alloc_super+0x976/0xb10 [ 983.657374] ? vfs_get_super+0x6e/0x270 [ 983.661342] ? proc_get_tree+0x88/0xb0 [ 983.665219] ? do_mount+0x6f2/0x1e20 [ 983.668928] ? ksys_mount+0x12d/0x140 [ 983.672714] ? __x64_sys_mount+0xbe/0x150 [ 983.676849] ? do_syscall_64+0x1b9/0x820 [ 983.681335] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.686695] ? lock_acquire+0x1e4/0x540 [ 983.690657] ? fs_reclaim_acquire+0x20/0x20 [ 983.695056] ? lock_downgrade+0x8f0/0x8f0 [ 983.699197] ? __x64_sys_mount+0xbe/0x150 [ 983.703339] ? check_same_owner+0x340/0x340 [ 983.707655] ? rcu_note_context_switch+0x730/0x730 [ 983.712575] __should_failslab+0x124/0x180 [ 983.716796] should_failslab+0x9/0x14 [ 983.720582] kmem_cache_alloc_trace+0x2cb/0x780 [ 983.725233] ? kasan_kmalloc+0xc4/0xe0 [ 983.729117] __memcg_init_list_lru_node+0x185/0x2d0 [ 983.734121] ? kvfree_rcu+0x20/0x20 [ 983.737735] ? __kmalloc_node+0x47/0x70 [ 983.741700] __list_lru_init+0x4d6/0x840 [ 983.745748] ? list_lru_destroy+0x500/0x500 [ 983.750062] ? prealloc_shrinker+0x213/0x480 [ 983.754459] ? __init_waitqueue_head+0x9e/0x150 [ 983.759115] ? inactive_list_is_low+0x850/0x850 [ 983.763771] ? __lockdep_init_map+0x105/0x590 [ 983.768257] alloc_super+0x976/0xb10 [ 983.771973] ? destroy_unused_super.part.11+0x110/0x110 [ 983.777359] ? lock_downgrade+0x8f0/0x8f0 [ 983.781500] ? kasan_check_read+0x11/0x20 [ 983.785636] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 983.790216] ? kasan_check_write+0x14/0x20 [ 983.794436] ? do_raw_spin_lock+0xc1/0x200 [ 983.798663] ? ns_test_super+0x50/0x50 [ 983.802538] sget_fc+0x269/0x950 [ 983.805892] ? compare_single+0x10/0x10 [ 983.809856] ? alloc_super+0xb10/0xb10 [ 983.813739] ? kasan_kmalloc+0xc4/0xe0 [ 983.817624] ? __kmalloc_track_caller+0x311/0x760 [ 983.822458] ? proc_root_lookup+0x60/0x60 [ 983.826592] vfs_get_super+0x6e/0x270 [ 983.830383] proc_get_tree+0x88/0xb0 [ 983.834083] vfs_get_tree+0x1cb/0x5c0 [ 983.837871] do_mount+0x6f2/0x1e20 [ 983.841402] ? copy_mount_string+0x40/0x40 [ 983.845634] ? kasan_kmalloc+0xc4/0xe0 [ 983.849516] ? kmem_cache_alloc_trace+0x318/0x780 [ 983.854350] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 983.859880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 983.865406] ? copy_mount_options+0x285/0x380 [ 983.869896] ksys_mount+0x12d/0x140 [ 983.873522] __x64_sys_mount+0xbe/0x150 [ 983.877501] do_syscall_64+0x1b9/0x820 [ 983.881376] ? syscall_return_slowpath+0x5e0/0x5e0 [ 983.886295] ? syscall_return_slowpath+0x31d/0x5e0 [ 983.891210] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 983.896222] ? prepare_exit_to_usermode+0x291/0x3b0 [ 983.901232] ? perf_trace_sys_enter+0xb10/0xb10 [ 983.905893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 983.910729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.915904] RIP: 0033:0x455ab9 [ 983.919077] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:31:11 executing program 2 (fault-call:9 fault-nth:22): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:11 executing program 0 (fault-call:2 fault-nth:2): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) 13:31:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x8497, @loopback={0x0, 0x8}}, 0x1c) [ 983.938348] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 983.946046] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 983.953309] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 983.960572] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 983.967828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 983.975089] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000015 13:31:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000101d00010000000000000000041500000c620000a9b7810e7c9fff96b6f8d37a69b66f68"], 0x1c}, 0x1}, 0x0) [ 984.265556] FAULT_INJECTION: forcing a failure. [ 984.265556] name failslab, interval 1, probability 0, space 0, times 0 [ 984.277005] CPU: 0 PID: 24487 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 984.285535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.294904] Call Trace: [ 984.297506] dump_stack+0x1c9/0x2b4 [ 984.301142] ? dump_stack_print_info.cold.2+0x52/0x52 [ 984.306335] ? perf_trace_lock+0x49d/0x920 [ 984.311511] should_fail.cold.4+0xa/0x11 [ 984.315585] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 984.320690] ? memset+0x31/0x40 [ 984.323966] ? perf_trace_lock+0x49d/0x920 [ 984.328198] ? zap_class+0x740/0x740 [ 984.331922] ? lock_acquire+0x1e4/0x540 [ 984.335901] ? fs_reclaim_acquire+0x20/0x20 [ 984.340220] ? lock_downgrade+0x8f0/0x8f0 [ 984.344372] ? check_same_owner+0x340/0x340 [ 984.348690] ? rcu_note_context_switch+0x730/0x730 [ 984.353618] __should_failslab+0x124/0x180 [ 984.357862] should_failslab+0x9/0x14 [ 984.361675] kmem_cache_alloc+0x2af/0x760 [ 984.365838] ? kasan_check_read+0x11/0x20 [ 984.369979] ? do_raw_spin_unlock+0xa7/0x2f0 [ 984.374378] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 984.378970] getname_kernel+0x54/0x370 [ 984.382858] do_file_open_root+0x1b0/0x4e0 [ 984.387094] ? do_filp_open+0x380/0x380 [ 984.391181] ? exit_files+0xb0/0xb0 [ 984.394825] ? trace_hardirqs_off+0xd/0x10 [ 984.399063] ? debug_check_no_obj_freed+0x30b/0x595 [ 984.404080] file_open_root+0x39d/0x580 [ 984.408049] ? dentry_open+0x180/0x180 [ 984.411933] ? trace_hardirqs_on+0xd/0x10 [ 984.416086] do_handle_open+0x4fd/0x940 [ 984.420056] ? vfs_dentry_acceptable+0x10/0x10 [ 984.424636] ? ksys_write+0x1ae/0x260 [ 984.428446] ? __ia32_sys_read+0xb0/0xb0 [ 984.432504] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 984.438061] __x64_sys_open_by_handle_at+0x76/0xb0 [ 984.442988] do_syscall_64+0x1b9/0x820 [ 984.446877] ? finish_task_switch+0x1d3/0x870 [ 984.451376] ? syscall_return_slowpath+0x5e0/0x5e0 [ 984.456310] ? syscall_return_slowpath+0x31d/0x5e0 [ 984.461241] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 984.466268] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 984.471127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.476315] RIP: 0033:0x455ab9 [ 984.479503] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.498881] RSP: 002b:00007f97d3f00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 984.506607] RAX: ffffffffffffffda RBX: 00007f97d3f016d4 RCX: 0000000000455ab9 13:31:12 executing program 6: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x20}, 0x8793}, @in6={0xa, 0x4e21, 0x109, @local={0xfe, 0x80, [], 0xaa}, 0x7}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x40, 0x1, 0x6, 0x1e7fbe22, r1}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = dup2(r2, r2) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x5775a4027f73d7bb, 0x0) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) 13:31:12 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40003f00, &(0x7f0000781f70)) 13:31:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1100000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xfffffd4c}, 0x1}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3f, 0x200) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000081}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {0x2}, [@FOU_ATTR_TYPE={0x8, 0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) 13:31:12 executing program 0 (fault-call:2 fault-nth:3): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) [ 984.513874] RDX: 00000004ffff8005 RSI: 0000000020000040 RDI: 0000000000000013 [ 984.521134] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 984.528395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 984.535654] R13: 00000000004c038d R14: 00000000004d01b0 R15: 0000000000000002 [ 984.600086] FAULT_INJECTION: forcing a failure. [ 984.600086] name failslab, interval 1, probability 0, space 0, times 0 [ 984.611414] CPU: 0 PID: 24491 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 984.619900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.629237] Call Trace: [ 984.631826] dump_stack+0x1c9/0x2b4 [ 984.635439] ? dump_stack_print_info.cold.2+0x52/0x52 [ 984.640632] ? __kernel_text_address+0xd/0x40 [ 984.645119] ? unwind_get_return_address+0x61/0xa0 [ 984.650062] should_fail.cold.4+0xa/0x11 [ 984.654112] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 984.659212] ? save_stack+0xa9/0xd0 [ 984.662830] ? save_stack+0x43/0xd0 [ 984.666438] ? kasan_kmalloc+0xc4/0xe0 [ 984.670321] ? kmem_cache_alloc_trace+0x152/0x780 [ 984.675157] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 984.680340] ? __list_lru_init+0x4d6/0x840 [ 984.684581] ? alloc_super+0x976/0xb10 [ 984.688473] ? vfs_get_super+0x6e/0x270 [ 984.692443] ? proc_get_tree+0x88/0xb0 [ 984.696315] ? vfs_get_tree+0x1cb/0x5c0 [ 984.700271] ? do_mount+0x6f2/0x1e20 [ 984.703968] ? ksys_mount+0x12d/0x140 [ 984.707751] ? __x64_sys_mount+0xbe/0x150 [ 984.711895] ? do_syscall_64+0x1b9/0x820 [ 984.715957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.721319] ? save_stack+0xa9/0xd0 [ 984.724952] ? lock_acquire+0x1e4/0x540 [ 984.728926] ? fs_reclaim_acquire+0x20/0x20 [ 984.733236] ? lock_downgrade+0x8f0/0x8f0 [ 984.737367] ? lock_downgrade+0x8f0/0x8f0 [ 984.741530] ? check_same_owner+0x340/0x340 [ 984.745835] ? do_raw_spin_unlock+0xa7/0x2f0 [ 984.750230] ? rcu_note_context_switch+0x730/0x730 [ 984.755145] __should_failslab+0x124/0x180 [ 984.759377] should_failslab+0x9/0x14 [ 984.763161] kmem_cache_alloc_trace+0x2cb/0x780 [ 984.767820] __memcg_init_list_lru_node+0x185/0x2d0 [ 984.772830] ? kvfree_rcu+0x20/0x20 [ 984.776451] ? __kmalloc_node+0x47/0x70 [ 984.780424] __list_lru_init+0x4d6/0x840 [ 984.784478] ? list_lru_destroy+0x500/0x500 [ 984.788799] ? prealloc_shrinker+0x213/0x480 [ 984.793205] ? __init_waitqueue_head+0x9e/0x150 [ 984.797869] ? inactive_list_is_low+0x850/0x850 [ 984.802525] ? __lockdep_init_map+0x105/0x590 [ 984.807031] alloc_super+0x976/0xb10 [ 984.810746] ? destroy_unused_super.part.11+0x110/0x110 [ 984.816109] ? lock_downgrade+0x8f0/0x8f0 [ 984.820268] ? kasan_check_read+0x11/0x20 [ 984.824409] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 984.828983] ? kasan_check_write+0x14/0x20 [ 984.833220] ? do_raw_spin_lock+0xc1/0x200 [ 984.837447] ? ns_test_super+0x50/0x50 [ 984.841317] sget_fc+0x269/0x950 [ 984.844668] ? compare_single+0x10/0x10 [ 984.848640] ? alloc_super+0xb10/0xb10 [ 984.852595] ? kasan_kmalloc+0xc4/0xe0 [ 984.856468] ? __kmalloc_track_caller+0x311/0x760 [ 984.861302] ? proc_root_lookup+0x60/0x60 [ 984.865460] vfs_get_super+0x6e/0x270 [ 984.869255] proc_get_tree+0x88/0xb0 [ 984.872971] vfs_get_tree+0x1cb/0x5c0 [ 984.876759] do_mount+0x6f2/0x1e20 [ 984.880295] ? copy_mount_string+0x40/0x40 [ 984.884518] ? kasan_kmalloc+0xc4/0xe0 [ 984.888401] ? kmem_cache_alloc_trace+0x318/0x780 [ 984.893251] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 984.898791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.904322] ? copy_mount_options+0x285/0x380 [ 984.908824] ksys_mount+0x12d/0x140 [ 984.912442] __x64_sys_mount+0xbe/0x150 [ 984.916404] do_syscall_64+0x1b9/0x820 [ 984.920302] ? finish_task_switch+0x1d3/0x870 [ 984.924878] ? syscall_return_slowpath+0x5e0/0x5e0 [ 984.929808] ? syscall_return_slowpath+0x31d/0x5e0 [ 984.934735] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 984.939751] ? prepare_exit_to_usermode+0x291/0x3b0 [ 984.944775] ? perf_trace_sys_enter+0xb10/0xb10 [ 984.949433] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 984.954293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.959491] RIP: 0033:0x455ab9 [ 984.962673] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.981907] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 984.989605] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 13:31:12 executing program 2 (fault-call:9 fault-nth:23): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 984.996868] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 985.004122] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 985.011391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 985.018652] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000016 13:31:12 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40002002, &(0x7f0000781f70)) 13:31:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x40000) getdents64(r1, &(0x7f0000000140)=""/158, 0x9e) 13:31:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf5ffffff00000000, @loopback={0x0, 0x8}}, 0x1c) [ 985.291882] FAULT_INJECTION: forcing a failure. [ 985.291882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 985.303829] CPU: 0 PID: 24511 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 985.312325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.321684] Call Trace: [ 985.324364] dump_stack+0x1c9/0x2b4 [ 985.327998] ? dump_stack_print_info.cold.2+0x52/0x52 [ 985.333196] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 985.338311] should_fail.cold.4+0xa/0x11 [ 985.342382] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 985.347519] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 985.352637] ? memset+0x31/0x40 [ 985.355938] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 985.361068] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 985.366225] ? perf_tp_event+0xc40/0xc40 [ 985.370307] ? memset+0x31/0x40 [ 985.373592] ? perf_trace_lock+0x49d/0x920 [ 985.377843] ? perf_tp_event+0xc40/0xc40 [ 985.381918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.387476] ? should_fail+0x246/0xd86 [ 985.391366] ? zap_class+0x740/0x740 [ 985.395098] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 985.400220] ? memset+0x31/0x40 [ 985.403514] __alloc_pages_nodemask+0x36e/0xdb0 [ 985.408225] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 985.413259] ? zap_class+0x740/0x740 [ 985.417021] ? lock_acquire+0x1e4/0x540 [ 985.421009] ? fs_reclaim_acquire+0x20/0x20 [ 985.425347] ? lock_downgrade+0x8f0/0x8f0 [ 985.429513] ? lock_release+0xa30/0xa30 [ 985.433504] ? check_same_owner+0x340/0x340 [ 985.437846] cache_grow_begin+0x91/0x710 13:31:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) [ 985.441940] kmem_cache_alloc+0x689/0x760 [ 985.446089] ? kasan_check_read+0x11/0x20 [ 985.450247] ? do_raw_spin_unlock+0xa7/0x2f0 [ 985.454689] getname_kernel+0x54/0x370 [ 985.458605] do_file_open_root+0x1b0/0x4e0 [ 985.462856] ? do_filp_open+0x380/0x380 [ 985.466851] ? exit_files+0xb0/0xb0 [ 985.470524] ? trace_hardirqs_off+0xd/0x10 [ 985.474769] ? debug_check_no_obj_freed+0x30b/0x595 [ 985.479784] file_open_root+0x39d/0x580 [ 985.483768] ? dentry_open+0x180/0x180 [ 985.487664] ? trace_hardirqs_on+0xd/0x10 13:31:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) close(r3) dup3(r1, r2, 0x0) [ 985.491910] do_handle_open+0x4fd/0x940 [ 985.495901] ? vfs_dentry_acceptable+0x10/0x10 [ 985.500495] ? ksys_write+0x1ae/0x260 [ 985.504319] ? __ia32_sys_read+0xb0/0xb0 [ 985.508401] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 985.513993] __x64_sys_open_by_handle_at+0x76/0xb0 [ 985.518935] do_syscall_64+0x1b9/0x820 [ 985.522818] ? finish_task_switch+0x1d3/0x870 [ 985.527316] ? syscall_return_slowpath+0x5e0/0x5e0 [ 985.532256] ? syscall_return_slowpath+0x31d/0x5e0 [ 985.537185] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 985.542234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 985.547096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.552284] RIP: 0033:0x455ab9 [ 985.555483] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.574840] RSP: 002b:00007f97d3f00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 985.582557] RAX: ffffffffffffffda RBX: 00007f97d3f016d4 RCX: 0000000000455ab9 13:31:13 executing program 0 (fault-call:2 fault-nth:4): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) [ 985.589827] RDX: 00000004ffff8005 RSI: 0000000020000040 RDI: 0000000000000013 [ 985.597094] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 985.604360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 985.611630] R13: 00000000004c038d R14: 00000000004d01b0 R15: 0000000000000003 [ 985.662322] FAULT_INJECTION: forcing a failure. [ 985.662322] name failslab, interval 1, probability 0, space 0, times 0 [ 985.673635] CPU: 1 PID: 24516 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 985.682135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.691485] Call Trace: [ 985.694186] dump_stack+0x1c9/0x2b4 [ 985.697823] ? dump_stack_print_info.cold.2+0x52/0x52 [ 985.703033] ? __kernel_text_address+0xd/0x40 [ 985.707554] ? unwind_get_return_address+0x61/0xa0 [ 985.712508] should_fail.cold.4+0xa/0x11 [ 985.716595] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 985.721722] ? save_stack+0xa9/0xd0 [ 985.725364] ? save_stack+0x43/0xd0 [ 985.729024] ? kasan_kmalloc+0xc4/0xe0 [ 985.732928] ? kmem_cache_alloc_trace+0x152/0x780 [ 985.737794] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 985.743007] ? __list_lru_init+0x4d6/0x840 [ 985.747274] ? alloc_super+0x976/0xb10 [ 985.751214] ? vfs_get_super+0x6e/0x270 [ 985.755206] ? proc_get_tree+0x88/0xb0 [ 985.759115] ? vfs_get_tree+0x1cb/0x5c0 [ 985.763109] ? do_mount+0x6f2/0x1e20 [ 985.766847] ? ksys_mount+0x12d/0x140 [ 985.770691] ? __x64_sys_mount+0xbe/0x150 [ 985.774860] ? do_syscall_64+0x1b9/0x820 [ 985.778985] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.784372] ? save_stack+0xa9/0xd0 [ 985.788025] ? lock_acquire+0x1e4/0x540 [ 985.792019] ? fs_reclaim_acquire+0x20/0x20 [ 985.796366] ? lock_downgrade+0x8f0/0x8f0 [ 985.800539] ? __x64_sys_mount+0xbe/0x150 [ 985.804701] ? check_same_owner+0x340/0x340 [ 985.809038] ? rcu_note_context_switch+0x730/0x730 [ 985.813995] __should_failslab+0x124/0x180 [ 985.818242] should_failslab+0x9/0x14 [ 985.822051] kmem_cache_alloc_trace+0x2cb/0x780 [ 985.826748] ? kasan_kmalloc+0xc4/0xe0 [ 985.830655] __memcg_init_list_lru_node+0x185/0x2d0 [ 985.835700] ? kvfree_rcu+0x20/0x20 [ 985.839361] ? __kmalloc_node+0x47/0x70 [ 985.843351] __list_lru_init+0x4d6/0x840 [ 985.847434] ? list_lru_destroy+0x500/0x500 [ 985.851774] ? prealloc_shrinker+0x213/0x480 [ 985.856222] ? __init_waitqueue_head+0x9e/0x150 13:31:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xff7e, @loopback={0x0, 0x8}}, 0x1c) 13:31:13 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000200)={0x20, 0x0, 0x5}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x18000, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x800) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) [ 985.860907] ? inactive_list_is_low+0x850/0x850 [ 985.865595] ? __lockdep_init_map+0x105/0x590 [ 985.870108] alloc_super+0x976/0xb10 [ 985.873852] ? destroy_unused_super.part.11+0x110/0x110 [ 985.880798] ? lock_downgrade+0x8f0/0x8f0 [ 985.884978] ? kasan_check_read+0x11/0x20 [ 985.889159] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 985.893759] ? kasan_check_write+0x14/0x20 [ 985.898009] ? do_raw_spin_lock+0xc1/0x200 [ 985.902262] ? ns_test_super+0x50/0x50 [ 985.906167] sget_fc+0x269/0x950 [ 985.909563] ? compare_single+0x10/0x10 [ 985.913556] ? alloc_super+0xb10/0xb10 [ 985.917458] ? kasan_kmalloc+0xc4/0xe0 [ 985.921368] ? __kmalloc_track_caller+0x311/0x760 [ 985.926235] ? proc_root_lookup+0x60/0x60 [ 985.930407] vfs_get_super+0x6e/0x270 [ 985.934229] proc_get_tree+0x88/0xb0 [ 985.937989] vfs_get_tree+0x1cb/0x5c0 [ 985.941810] do_mount+0x6f2/0x1e20 [ 985.945367] ? copy_mount_string+0x40/0x40 [ 985.949615] ? kasan_kmalloc+0xc4/0xe0 [ 985.953524] ? kmem_cache_alloc_trace+0x318/0x780 [ 985.958385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 985.963950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.969509] ? copy_mount_options+0x285/0x380 [ 985.974024] ksys_mount+0x12d/0x140 [ 985.977669] __x64_sys_mount+0xbe/0x150 [ 985.981664] do_syscall_64+0x1b9/0x820 [ 985.985570] ? syscall_return_slowpath+0x5e0/0x5e0 [ 985.990521] ? syscall_return_slowpath+0x31d/0x5e0 [ 985.995602] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 986.000642] ? prepare_exit_to_usermode+0x291/0x3b0 [ 986.005678] ? perf_trace_sys_enter+0xb10/0xb10 13:31:13 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40004000, &(0x7f0000781f70)) [ 986.010364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 986.015231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.020461] RIP: 0033:0x455ab9 [ 986.023654] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.042933] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 986.050666] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 13:31:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xdfee000000000000, @loopback={0x0, 0x8}}, 0x1c) [ 986.057991] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 986.065269] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 986.072546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 986.079827] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000017 [ 986.101498] FAULT_INJECTION: forcing a failure. [ 986.101498] name failslab, interval 1, probability 0, space 0, times 0 [ 986.113065] CPU: 0 PID: 24539 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 986.121844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.131218] Call Trace: [ 986.133877] dump_stack+0x1c9/0x2b4 [ 986.137531] ? dump_stack_print_info.cold.2+0x52/0x52 [ 986.142761] ? perf_trace_lock+0x49d/0x920 [ 986.147051] should_fail.cold.4+0xa/0x11 [ 986.151146] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 986.156280] ? memset+0x31/0x40 [ 986.159567] ? perf_trace_lock+0x49d/0x920 [ 986.163812] ? zap_class+0x740/0x740 [ 986.167544] ? lock_acquire+0x1e4/0x540 [ 986.171527] ? fs_reclaim_acquire+0x20/0x20 [ 986.175851] ? lock_downgrade+0x8f0/0x8f0 [ 986.180803] ? check_same_owner+0x340/0x340 [ 986.185133] ? rcu_note_context_switch+0x730/0x730 [ 986.190064] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 986.194832] __should_failslab+0x124/0x180 [ 986.199089] should_failslab+0x9/0x14 [ 986.202901] kmem_cache_alloc+0x2af/0x760 [ 986.207059] ? lock_downgrade+0x8f0/0x8f0 [ 986.211220] ? lock_release+0xa30/0xa30 [ 986.215218] __alloc_file+0xac/0x400 [ 986.218934] ? file_free_rcu+0x90/0x90 [ 986.222832] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 986.227533] ? is_bpf_text_address+0xd7/0x170 [ 986.232064] ? kernel_text_address+0x79/0xf0 [ 986.236481] ? __kernel_text_address+0xd/0x40 [ 986.241505] alloc_empty_file+0x72/0x170 [ 986.245578] path_openat+0x15f/0x5300 [ 986.249407] ? save_stack+0x43/0xd0 [ 986.253036] ? kasan_kmalloc+0xc4/0xe0 [ 986.256932] ? kasan_slab_alloc+0x12/0x20 [ 986.261081] ? kmem_cache_alloc+0x12e/0x760 [ 986.265398] ? getname_kernel+0x54/0x370 [ 986.269480] ? do_file_open_root+0x1b0/0x4e0 [ 986.273879] ? file_open_root+0x39d/0x580 [ 986.278027] ? do_handle_open+0x4fd/0x940 [ 986.282184] ? __x64_sys_open_by_handle_at+0x76/0xb0 [ 986.287279] ? do_syscall_64+0x1b9/0x820 [ 986.291334] ? path_lookupat.isra.45+0xc00/0xc00 [ 986.296084] ? zap_class+0x740/0x740 [ 986.299811] ? lock_acquire+0x1e4/0x540 [ 986.303791] ? cache_grow_end.part.37+0x95/0x170 [ 986.308548] ? lock_downgrade+0x8f0/0x8f0 [ 986.313584] ? kasan_check_read+0x11/0x20 [ 986.317730] ? do_raw_spin_unlock+0xa7/0x2f0 [ 986.322143] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 986.326741] ? kasan_check_write+0x14/0x20 [ 986.330972] ? do_raw_spin_lock+0xc1/0x200 [ 986.335214] ? kasan_unpoison_shadow+0x35/0x50 [ 986.339795] ? kasan_kmalloc+0xc4/0xe0 [ 986.343701] ? kasan_slab_alloc+0x12/0x20 [ 986.347841] ? kmem_cache_alloc+0x2fc/0x760 [ 986.352171] ? kasan_check_read+0x11/0x20 [ 986.356325] ? do_raw_spin_unlock+0xa7/0x2f0 [ 986.360737] ? memcpy+0x45/0x50 [ 986.364029] do_file_open_root+0x389/0x4e0 [ 986.368270] ? do_filp_open+0x380/0x380 [ 986.372247] ? exit_files+0xb0/0xb0 [ 986.375873] ? trace_hardirqs_off+0xd/0x10 [ 986.380119] ? debug_check_no_obj_freed+0x30b/0x595 [ 986.385154] file_open_root+0x39d/0x580 [ 986.389144] ? dentry_open+0x180/0x180 [ 986.393057] ? trace_hardirqs_on+0xd/0x10 [ 986.397208] do_handle_open+0x4fd/0x940 [ 986.401180] ? vfs_dentry_acceptable+0x10/0x10 [ 986.405778] ? ksys_write+0x1ae/0x260 [ 986.409590] ? __ia32_sys_read+0xb0/0xb0 [ 986.413660] ? syscall_slow_exit_work+0x500/0x500 [ 986.418517] __x64_sys_open_by_handle_at+0x76/0xb0 [ 986.423454] do_syscall_64+0x1b9/0x820 [ 986.427345] ? syscall_return_slowpath+0x5e0/0x5e0 [ 986.432271] ? syscall_return_slowpath+0x31d/0x5e0 [ 986.437212] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 986.442243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 986.447102] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.452323] RIP: 0033:0x455ab9 [ 986.455499] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.474830] RSP: 002b:00007f97d3f00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 986.482542] RAX: ffffffffffffffda RBX: 00007f97d3f016d4 RCX: 0000000000455ab9 [ 986.489806] RDX: 00000004ffff8005 RSI: 0000000020000040 RDI: 0000000000000013 [ 986.497067] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 986.504337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 13:31:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80000, 0x0) tgkill(r1, r2, 0x3c) 13:31:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x141, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d000100bb8800000000080f030021000000000000000000"], 0x1c}, 0x1}, 0x0) 13:31:14 executing program 2 (fault-call:9 fault-nth:24): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:14 executing program 0 (fault-call:2 fault-nth:5): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) [ 986.511599] R13: 00000000004c038d R14: 00000000004d01b0 R15: 0000000000000004 13:31:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:14 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x1000000, &(0x7f0000781f70)) 13:31:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x5110c0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000300)={r1, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x400800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x10000, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x17}}, 0x47d2}, {0xa, 0x4e24, 0xffffffff, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x2}, r5, 0x100000001}}, 0x48) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d0001000000000000000000150000000800030021000000ee396140512a584a7254d95a63224a6f5184f08b1cfa3bdddd125df82aa4ad07"], 0x1c}, 0x1}, 0x0) 13:31:14 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xf401000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) [ 986.843097] FAULT_INJECTION: forcing a failure. [ 986.843097] name failslab, interval 1, probability 0, space 0, times 0 [ 986.855146] CPU: 1 PID: 24570 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 986.863664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.873023] Call Trace: [ 986.875640] dump_stack+0x1c9/0x2b4 [ 986.879295] ? dump_stack_print_info.cold.2+0x52/0x52 [ 986.884508] ? kasan_check_write+0x14/0x20 [ 986.888767] ? __mutex_lock+0x6c4/0x1680 [ 986.892853] should_fail.cold.4+0xa/0x11 [ 986.896945] ? __list_lru_init+0x4d6/0x840 [ 986.901569] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 986.906692] ? mutex_trylock+0x2b0/0x2b0 [ 986.910774] ? __x64_sys_mount+0xbe/0x150 [ 986.915038] ? do_syscall_64+0x1b9/0x820 [ 986.919120] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.924538] ? __list_lru_init+0x409/0x840 [ 986.928791] ? lock_downgrade+0x8f0/0x8f0 [ 986.932972] ? lock_acquire+0x1e4/0x540 [ 986.936958] ? fs_reclaim_acquire+0x20/0x20 [ 986.941331] ? lock_downgrade+0x8f0/0x8f0 [ 986.945490] ? lock_acquire+0x1e4/0x540 [ 986.949477] ? fs_reclaim_acquire+0x20/0x20 [ 986.953805] ? lock_downgrade+0x8f0/0x8f0 [ 986.957974] ? check_same_owner+0x340/0x340 [ 986.962324] ? check_same_owner+0x340/0x340 [ 986.966648] ? rcu_note_context_switch+0x730/0x730 [ 986.971592] __should_failslab+0x124/0x180 [ 986.975936] should_failslab+0x9/0x14 [ 986.979734] __kmalloc+0x2c8/0x760 [ 986.983282] ? kvfree_rcu+0x20/0x20 [ 986.986908] ? __list_lru_init+0x151/0x840 [ 986.991173] __list_lru_init+0x151/0x840 [ 986.995251] ? list_lru_destroy+0x500/0x500 [ 986.999594] ? prealloc_shrinker+0x213/0x480 [ 987.004106] ? __init_waitqueue_head+0x9e/0x150 [ 987.008785] ? inactive_list_is_low+0x850/0x850 [ 987.013455] ? __lockdep_init_map+0x105/0x590 [ 987.018045] alloc_super+0x9a6/0xb10 [ 987.021774] ? destroy_unused_super.part.11+0x110/0x110 [ 987.027142] ? lock_downgrade+0x8f0/0x8f0 [ 987.031310] ? kasan_check_read+0x11/0x20 [ 987.035466] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 987.040047] ? kasan_check_write+0x14/0x20 [ 987.044290] ? do_raw_spin_lock+0xc1/0x200 [ 987.048542] ? ns_test_super+0x50/0x50 [ 987.052530] sget_fc+0x269/0x950 [ 987.055917] ? compare_single+0x10/0x10 [ 987.059946] ? alloc_super+0xb10/0xb10 [ 987.063831] ? kasan_kmalloc+0xc4/0xe0 [ 987.067723] ? __kmalloc_track_caller+0x311/0x760 [ 987.072584] ? proc_root_lookup+0x60/0x60 [ 987.076738] vfs_get_super+0x6e/0x270 [ 987.080548] proc_get_tree+0x88/0xb0 [ 987.084285] vfs_get_tree+0x1cb/0x5c0 [ 987.088097] do_mount+0x6f2/0x1e20 [ 987.091654] ? copy_mount_string+0x40/0x40 [ 987.095978] ? kasan_kmalloc+0xc4/0xe0 [ 987.099882] ? kmem_cache_alloc_trace+0x318/0x780 [ 987.104755] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 987.110308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.115864] ? copy_mount_options+0x285/0x380 [ 987.120387] ksys_mount+0x12d/0x140 [ 987.124029] __x64_sys_mount+0xbe/0x150 [ 987.128026] do_syscall_64+0x1b9/0x820 [ 987.132099] ? syscall_return_slowpath+0x5e0/0x5e0 [ 987.137040] ? syscall_return_slowpath+0x31d/0x5e0 [ 987.141964] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 987.146972] ? prepare_exit_to_usermode+0x291/0x3b0 [ 987.151994] ? perf_trace_sys_enter+0xb10/0xb10 [ 987.156678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 987.161538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.166730] RIP: 0033:0x455ab9 [ 987.169924] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.189154] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 987.196860] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 987.204127] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 987.211396] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 987.218700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 987.225979] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000018 13:31:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:14 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x4000000c, &(0x7f0000781f70)) 13:31:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:31:14 executing program 2 (fault-call:9 fault-nth:25): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:14 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x10000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x20000051, 0x2, "b5"}, 0x4ffff8005) [ 987.482493] FAULT_INJECTION: forcing a failure. [ 987.482493] name failslab, interval 1, probability 0, space 0, times 0 [ 987.493948] CPU: 0 PID: 24598 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 987.502445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.511805] Call Trace: [ 987.514428] dump_stack+0x1c9/0x2b4 [ 987.518075] ? dump_stack_print_info.cold.2+0x52/0x52 [ 987.523314] ? perf_trace_lock+0xde/0x920 [ 987.527480] should_fail.cold.4+0xa/0x11 [ 987.531564] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 987.536691] ? save_stack+0xa9/0xd0 [ 987.540332] ? save_stack+0x43/0xd0 [ 987.544062] ? kasan_kmalloc+0xc4/0xe0 [ 987.548002] ? __kmalloc+0x14e/0x760 [ 987.551818] ? __list_lru_init+0x151/0x840 [ 987.556077] ? alloc_super+0x9a6/0xb10 [ 987.559957] ? vfs_get_super+0x6e/0x270 [ 987.563922] ? proc_get_tree+0x88/0xb0 [ 987.567807] ? vfs_get_tree+0x1cb/0x5c0 [ 987.571770] ? do_mount+0x6f2/0x1e20 [ 987.575468] ? ksys_mount+0x12d/0x140 [ 987.579256] ? __x64_sys_mount+0xbe/0x150 [ 987.583404] ? lock_acquire+0x1e4/0x540 [ 987.587377] ? fs_reclaim_acquire+0x20/0x20 [ 987.591696] ? lock_downgrade+0x8f0/0x8f0 [ 987.596021] ? check_same_owner+0x340/0x340 [ 987.600343] ? rcu_note_context_switch+0x730/0x730 [ 987.605274] __should_failslab+0x124/0x180 [ 987.609502] should_failslab+0x9/0x14 [ 987.613305] kmem_cache_alloc_node_trace+0x26f/0x770 [ 987.618414] ? kasan_kmalloc+0xc4/0xe0 [ 987.622317] __kmalloc_node+0x33/0x70 [ 987.626110] kvmalloc_node+0x65/0xf0 [ 987.629815] __list_lru_init+0x5d9/0x840 [ 987.633864] ? list_lru_destroy+0x500/0x500 [ 987.638177] ? prealloc_shrinker+0x213/0x480 [ 987.642576] ? __init_waitqueue_head+0x9e/0x150 [ 987.647244] ? inactive_list_is_low+0x850/0x850 [ 987.651913] ? __lockdep_init_map+0x105/0x590 [ 987.656404] alloc_super+0x9a6/0xb10 [ 987.660109] ? destroy_unused_super.part.11+0x110/0x110 [ 987.665463] ? lock_downgrade+0x8f0/0x8f0 [ 987.669786] ? kasan_check_read+0x11/0x20 [ 987.673923] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 987.678512] ? kasan_check_write+0x14/0x20 [ 987.682820] ? do_raw_spin_lock+0xc1/0x200 [ 987.687044] ? ns_test_super+0x50/0x50 [ 987.690924] sget_fc+0x269/0x950 [ 987.694279] ? compare_single+0x10/0x10 [ 987.698243] ? alloc_super+0xb10/0xb10 [ 987.702116] ? kasan_kmalloc+0xc4/0xe0 [ 987.705994] ? __kmalloc_track_caller+0x311/0x760 [ 987.710829] ? proc_root_lookup+0x60/0x60 [ 987.714966] vfs_get_super+0x6e/0x270 [ 987.718845] proc_get_tree+0x88/0xb0 [ 987.722546] vfs_get_tree+0x1cb/0x5c0 [ 987.726355] do_mount+0x6f2/0x1e20 [ 987.729885] ? copy_mount_string+0x40/0x40 [ 987.734106] ? kasan_kmalloc+0xc4/0xe0 [ 987.737987] ? kmem_cache_alloc_trace+0x318/0x780 [ 987.742821] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 987.748352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.753884] ? copy_mount_options+0x285/0x380 [ 987.758367] ksys_mount+0x12d/0x140 [ 987.761991] __x64_sys_mount+0xbe/0x150 [ 987.765959] do_syscall_64+0x1b9/0x820 [ 987.769832] ? finish_task_switch+0x1d3/0x870 [ 987.774837] ? syscall_return_slowpath+0x5e0/0x5e0 [ 987.779760] ? syscall_return_slowpath+0x31d/0x5e0 [ 987.784694] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 987.789700] ? prepare_exit_to_usermode+0x291/0x3b0 [ 987.794708] ? perf_trace_sys_enter+0xb10/0xb10 [ 987.799362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 987.804215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.809400] RIP: 0033:0x455ab9 [ 987.812568] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:31:15 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x4000002d, &(0x7f0000781f70)) [ 987.831774] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 987.839469] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 987.846726] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 987.853987] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 987.861255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 987.868511] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000019 13:31:15 executing program 6 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:31:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001de700000000000000000000150000000800030021000000073d1cf1bfcd4a9bdcfc1ba709747c9746d02ee1e7530bdc63abb22507ae84c309085a7f4d3e5a340824d4fcb92b87c3008b285e6f64e1e682fc001c4680e40710197bf92d18e6a715fdbed240b8033510c805530db8bf0f6188c4a1f992e9d0db1bcd3e9144753fe15001710701662455125880f7f95531492853"], 0x1c}, 0x1}, 0x0) 13:31:15 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xb30000, @loopback={0x0, 0x8}}, 0x1c) 13:31:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0xffffffffffffffe0, "b5"}, 0x4ffff8005) 13:31:15 executing program 2 (fault-call:9 fault-nth:26): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:15 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000002, &(0x7f0000781f70)) 13:31:15 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffff9c}) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000001c0)=""/242, &(0x7f00000002c0)=0xf2) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$can_raw(r1, &(0x7f0000000140)={0x1d}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000400), 0xfffffffffffffdeb) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={@dev={0xfe, 0x80, [], 0xe}, 0x6f, r2}) 13:31:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x25, "b5"}, 0x4ffff8005) [ 988.226597] FAULT_INJECTION: forcing a failure. [ 988.226597] name failslab, interval 1, probability 0, space 0, times 0 [ 988.237918] CPU: 0 PID: 24631 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 988.246417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.255776] Call Trace: [ 988.258392] dump_stack+0x1c9/0x2b4 [ 988.262116] ? dump_stack_print_info.cold.2+0x52/0x52 [ 988.267501] ? __kernel_text_address+0xd/0x40 [ 988.272004] ? unwind_get_return_address+0x61/0xa0 [ 988.276952] should_fail.cold.4+0xa/0x11 [ 988.281108] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 988.286205] ? save_stack+0xa9/0xd0 [ 988.289829] ? save_stack+0x43/0xd0 [ 988.293450] ? kasan_kmalloc+0xc4/0xe0 [ 988.297328] ? kmem_cache_alloc_trace+0x152/0x780 [ 988.302155] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 988.307354] ? __list_lru_init+0x4d6/0x840 [ 988.312462] ? alloc_super+0x9a6/0xb10 [ 988.316356] ? vfs_get_super+0x6e/0x270 [ 988.320339] ? proc_get_tree+0x88/0xb0 [ 988.324211] ? vfs_get_tree+0x1cb/0x5c0 [ 988.328173] ? do_mount+0x6f2/0x1e20 [ 988.331889] ? ksys_mount+0x12d/0x140 [ 988.335675] ? __x64_sys_mount+0xbe/0x150 [ 988.339808] ? do_syscall_64+0x1b9/0x820 [ 988.343867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.349232] ? save_stack+0xa9/0xd0 [ 988.352883] ? lock_acquire+0x1e4/0x540 [ 988.356849] ? fs_reclaim_acquire+0x20/0x20 [ 988.361168] ? lock_downgrade+0x8f0/0x8f0 [ 988.365305] ? __x64_sys_mount+0xbe/0x150 [ 988.369446] ? check_same_owner+0x340/0x340 [ 988.373765] ? rcu_note_context_switch+0x730/0x730 [ 988.378685] __should_failslab+0x124/0x180 [ 988.382920] should_failslab+0x9/0x14 [ 988.386708] kmem_cache_alloc_trace+0x2cb/0x780 [ 988.391361] ? kasan_kmalloc+0xc4/0xe0 [ 988.395242] __memcg_init_list_lru_node+0x185/0x2d0 [ 988.400244] ? kvfree_rcu+0x20/0x20 [ 988.403853] ? __kmalloc_node+0x47/0x70 [ 988.407818] __list_lru_init+0x4d6/0x840 [ 988.411869] ? list_lru_destroy+0x500/0x500 [ 988.416291] ? prealloc_shrinker+0x213/0x480 [ 988.420709] ? __init_waitqueue_head+0x9e/0x150 [ 988.425388] ? inactive_list_is_low+0x850/0x850 [ 988.430053] ? __lockdep_init_map+0x105/0x590 [ 988.434537] alloc_super+0x9a6/0xb10 [ 988.438239] ? destroy_unused_super.part.11+0x110/0x110 [ 988.443599] ? lock_downgrade+0x8f0/0x8f0 [ 988.447735] ? kasan_check_read+0x11/0x20 [ 988.451877] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 988.456455] ? kasan_check_write+0x14/0x20 [ 988.460681] ? do_raw_spin_lock+0xc1/0x200 [ 988.464908] ? ns_test_super+0x50/0x50 [ 988.468787] sget_fc+0x269/0x950 [ 988.472154] ? compare_single+0x10/0x10 [ 988.476125] ? alloc_super+0xb10/0xb10 [ 988.480001] ? kasan_kmalloc+0xc4/0xe0 [ 988.483887] ? __kmalloc_track_caller+0x311/0x760 [ 988.488732] ? proc_root_lookup+0x60/0x60 [ 988.492974] vfs_get_super+0x6e/0x270 [ 988.496772] proc_get_tree+0x88/0xb0 [ 988.500473] vfs_get_tree+0x1cb/0x5c0 [ 988.504266] do_mount+0x6f2/0x1e20 [ 988.507795] ? check_same_owner+0x340/0x340 [ 988.512122] ? lock_release+0xa30/0xa30 [ 988.516089] ? copy_mount_string+0x40/0x40 [ 988.520325] ? retint_kernel+0x10/0x10 [ 988.524230] ? copy_mount_options+0x213/0x380 [ 988.528737] ? copy_mount_options+0x213/0x380 [ 988.533225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.538760] ? copy_mount_options+0x285/0x380 [ 988.543259] ksys_mount+0x12d/0x140 [ 988.546874] __x64_sys_mount+0xbe/0x150 [ 988.550845] do_syscall_64+0x1b9/0x820 [ 988.554720] ? syscall_slow_exit_work+0x500/0x500 [ 988.559552] ? syscall_return_slowpath+0x5e0/0x5e0 [ 988.564473] ? syscall_return_slowpath+0x31d/0x5e0 [ 988.569416] ? prepare_exit_to_usermode+0x291/0x3b0 [ 988.574432] ? perf_trace_sys_enter+0xb10/0xb10 [ 988.579100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 988.583937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.589131] RIP: 0033:0x455ab9 [ 988.592317] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.611485] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 988.619203] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 13:31:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe06f, @loopback={0x0, 0x8}}, 0x1c) 13:31:16 executing program 2 (fault-call:9 fault-nth:27): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 988.626465] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 988.633722] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 988.640990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 988.648249] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001a 13:31:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:31:16 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40002e22, &(0x7f0000781f70)) 13:31:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x8000, 0x0) sendto$inet(r0, &(0x7f0000000200)="c80f44775bb2d59d2db13db90165499dc7e3634bafbf99fd4af15ba7485186961fd9a8bff2195f3501f3c15e7455263d09afff4b2664abdb547c46d630c889a248ff8d10db4841818ab31dde6b", 0x4d, 0x20040000, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = dup(r1) ioctl$RTC_WIE_ON(r2, 0x700f) pread64(r1, &(0x7f0000000140)=""/136, 0x88, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x40) 13:31:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x9708, @loopback={0x0, 0x8}}, 0x1c) [ 988.987114] FAULT_INJECTION: forcing a failure. [ 988.987114] name failslab, interval 1, probability 0, space 0, times 0 [ 988.998422] CPU: 1 PID: 24660 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 989.006909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.016258] Call Trace: [ 989.018860] dump_stack+0x1c9/0x2b4 [ 989.022574] ? dump_stack_print_info.cold.2+0x52/0x52 [ 989.027791] ? __kernel_text_address+0xd/0x40 [ 989.032285] ? unwind_get_return_address+0x61/0xa0 [ 989.037217] should_fail.cold.4+0xa/0x11 [ 989.041278] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 989.046376] ? save_stack+0xa9/0xd0 [ 989.050016] ? save_stack+0x43/0xd0 [ 989.053643] ? kasan_kmalloc+0xc4/0xe0 [ 989.057535] ? kmem_cache_alloc_trace+0x152/0x780 [ 989.062402] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 989.067596] ? __list_lru_init+0x4d6/0x840 [ 989.071935] ? alloc_super+0x9a6/0xb10 [ 989.075837] ? vfs_get_super+0x6e/0x270 [ 989.079826] ? proc_get_tree+0x88/0xb0 [ 989.083723] ? vfs_get_tree+0x1cb/0x5c0 [ 989.087697] ? do_mount+0x6f2/0x1e20 [ 989.091406] ? ksys_mount+0x12d/0x140 [ 989.095211] ? __x64_sys_mount+0xbe/0x150 [ 989.099356] ? do_syscall_64+0x1b9/0x820 [ 989.103408] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.108896] ? save_stack+0xa9/0xd0 [ 989.112528] ? lock_acquire+0x1e4/0x540 [ 989.116506] ? fs_reclaim_acquire+0x20/0x20 [ 989.120839] ? lock_downgrade+0x8f0/0x8f0 [ 989.124992] ? __x64_sys_mount+0xbe/0x150 [ 989.129148] ? check_same_owner+0x340/0x340 13:31:16 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0xffffffe0, "b5"}, 0x4ffff8005) 13:31:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}) close(r3) dup3(r1, r2, 0x0) [ 989.133496] ? rcu_note_context_switch+0x730/0x730 [ 989.138432] __should_failslab+0x124/0x180 [ 989.142668] should_failslab+0x9/0x14 [ 989.146554] kmem_cache_alloc_trace+0x2cb/0x780 [ 989.151205] ? kasan_kmalloc+0xc4/0xe0 [ 989.155097] __memcg_init_list_lru_node+0x185/0x2d0 [ 989.160117] ? kvfree_rcu+0x20/0x20 [ 989.163785] ? __kmalloc_node+0x47/0x70 [ 989.167776] __list_lru_init+0x4d6/0x840 [ 989.171860] ? list_lru_destroy+0x500/0x500 [ 989.176190] ? prealloc_shrinker+0x213/0x480 [ 989.180609] ? __init_waitqueue_head+0x9e/0x150 13:31:16 executing program 7: r0 = socket$inet6(0xa, 0x8000007, 0xf7fffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x1, &(0x7f0000000240)="7525e4a90db11d9e15b5031b406bd016dcbb7ec0984398010ab74fcc1f249e0fde589d1f43c6ff774ea18ba6d1b8000e564e65aa21f9ee4661de0579000000", &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f00000003c0)="8705fc0d41168950f67191af8c9a5f1c9b8267388a236d808728b64f5b08b3b2b8680b75303523b858c2c9e324f620b2a2b00a1475ab128a7101b1dcafb232b5aa7348dad1ed27959f46048e4358b37290e43e93051e99a405543586f58393cdb4874fecffffb68276b9cc56bcb6897b1504ad8c0bb260f98a6c6c7d46987c3194ad17825b1d77aba2bfdc3e4d5fa7014569e98b33ad2c114ef751df8fd20d540468efb5e7d18a0f89d283a7a639d388ced05305b05e001200d6a4e45c34eb94581a0dc6cbe17c5e") wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 989.185308] ? inactive_list_is_low+0x850/0x850 [ 989.189986] ? __lockdep_init_map+0x105/0x590 [ 989.194502] alloc_super+0x9a6/0xb10 [ 989.198235] ? destroy_unused_super.part.11+0x110/0x110 [ 989.203619] ? lock_downgrade+0x8f0/0x8f0 [ 989.207817] ? kasan_check_read+0x11/0x20 [ 989.211997] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 989.216596] ? kasan_check_write+0x14/0x20 [ 989.220859] ? do_raw_spin_lock+0xc1/0x200 [ 989.225111] ? ns_test_super+0x50/0x50 [ 989.229012] sget_fc+0x269/0x950 [ 989.232393] ? compare_single+0x10/0x10 [ 989.236380] ? alloc_super+0xb10/0xb10 [ 989.240280] ? kasan_kmalloc+0xc4/0xe0 [ 989.244189] ? __kmalloc_track_caller+0x311/0x760 [ 989.249052] ? proc_root_lookup+0x60/0x60 [ 989.253231] vfs_get_super+0x6e/0x270 [ 989.257037] proc_get_tree+0x88/0xb0 [ 989.260748] vfs_get_tree+0x1cb/0x5c0 [ 989.264541] do_mount+0x6f2/0x1e20 [ 989.268086] ? copy_mount_string+0x40/0x40 [ 989.272320] ? kasan_kmalloc+0xc4/0xe0 [ 989.276203] ? kmem_cache_alloc_trace+0x318/0x780 [ 989.281044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 989.286579] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.292105] ? copy_mount_options+0x285/0x380 [ 989.296586] ksys_mount+0x12d/0x140 [ 989.300208] __x64_sys_mount+0xbe/0x150 [ 989.304190] do_syscall_64+0x1b9/0x820 [ 989.308077] ? finish_task_switch+0x1d3/0x870 [ 989.312579] ? syscall_return_slowpath+0x5e0/0x5e0 [ 989.317515] ? syscall_return_slowpath+0x31d/0x5e0 [ 989.322453] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 989.327469] ? prepare_exit_to_usermode+0x291/0x3b0 [ 989.332502] ? perf_trace_sys_enter+0xb10/0xb10 [ 989.337174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 989.342032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.347223] RIP: 0033:0x455ab9 [ 989.350402] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.369577] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 989.377283] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 13:31:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x55, 0x2}, {{0x77359400}}], 0x30) [ 989.384552] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 989.391823] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 989.399096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 989.406363] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001b 13:31:16 executing program 2 (fault-call:9 fault-nth:28): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0xb, 0xcc) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r2 = dup3(r0, r0, 0x80000) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @loopback=0x7f000001}, 0x4, 0x1, 0x1, 0x4}}, 0x2e) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x6, &(0x7f0000000180)=@raw=[@exit={0x95}, @alu={0x7, 0xc13, 0x1, 0x0, 0xf, 0xc, 0x1}, @call={0x85, 0x0, 0x0, 0x31}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x39, &(0x7f0000000200)=""/57, 0x41000, 0x0, [], r3, 0xf}, 0x48) 13:31:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0xffe0, "b5"}, 0x4ffff8005) 13:31:17 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xb30, @loopback={0x0, 0x8}}, 0x1c) 13:31:17 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0xa6, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x21}}, 0x818b}, @in6={0xa, 0x4e21, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0xffffffff}, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0xa4) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="800100170000168b3506e0684acca9ae95e587d3544c1c5edaad98b8c12ab8f6349a077a4e6fb5b3822c27826312f9036dbe2fe200000000000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48d]}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:31:17 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000400)=0x14, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@remote, @empty, 0x0}, &(0x7f0000000600)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000680)=0x14) accept$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000900)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @empty, @multicast2}, &(0x7f0000000980)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000009c0)={0x0, @empty, @broadcast}, &(0x7f0000000a00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000cc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000d00)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e40)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000f40)=0xe8) accept$packet(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001080)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000011c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000001200)={@dev, @empty, 0x0}, &(0x7f0000001240)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001540)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000001680)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000016c0)={0x0, @multicast1, @dev}, &(0x7f0000001700)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001fc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f80)={&(0x7f0000002040)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16=r1, @ANYBLOB="04002cbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="7c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400a000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r3, @ANYBLOB="8000020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="b40102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400800000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="a801020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004008100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="3c02020084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000540004000100250303000000020009d50010000007000105d20800000200000608000000090001e6ffff0000d90d0104aa00000088000207ff0f0000e6000007030000008000000401000000030008fe01000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004001f00000008000600", @ANYRES32=r21, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ffffffff08000600", @ANYRES32=r22, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400030000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24], 0x83c}, 0x1, 0x0, 0x0, 0x5}, 0xc0) r25 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r25, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:31:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x4000, 0x55, 0x2}, {{0x77359400}}], 0x30) [ 989.677680] FAULT_INJECTION: forcing a failure. [ 989.677680] name failslab, interval 1, probability 0, space 0, times 0 [ 989.689178] CPU: 0 PID: 24700 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 989.697660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.707018] Call Trace: [ 989.709609] dump_stack+0x1c9/0x2b4 [ 989.713222] ? dump_stack_print_info.cold.2+0x52/0x52 [ 989.718405] ? __kernel_text_address+0xd/0x40 [ 989.722890] ? unwind_get_return_address+0x61/0xa0 [ 989.727822] should_fail.cold.4+0xa/0x11 [ 989.731901] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 989.737000] ? save_stack+0xa9/0xd0 [ 989.740622] ? save_stack+0x43/0xd0 [ 989.744231] ? kasan_kmalloc+0xc4/0xe0 [ 989.748107] ? kmem_cache_alloc_trace+0x152/0x780 [ 989.753118] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 989.758303] ? __list_lru_init+0x4d6/0x840 [ 989.762540] ? alloc_super+0x9a6/0xb10 [ 989.766435] ? vfs_get_super+0x6e/0x270 [ 989.770398] ? proc_get_tree+0x88/0xb0 [ 989.774269] ? vfs_get_tree+0x1cb/0x5c0 [ 989.778228] ? do_mount+0x6f2/0x1e20 [ 989.781926] ? ksys_mount+0x12d/0x140 [ 989.785722] ? __x64_sys_mount+0xbe/0x150 [ 989.789865] ? do_syscall_64+0x1b9/0x820 [ 989.793916] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.799269] ? save_stack+0xa9/0xd0 [ 989.802893] ? lock_acquire+0x1e4/0x540 [ 989.806867] ? fs_reclaim_acquire+0x20/0x20 [ 989.811177] ? lock_downgrade+0x8f0/0x8f0 [ 989.815327] ? __x64_sys_mount+0xbe/0x150 [ 989.819462] ? check_same_owner+0x340/0x340 [ 989.823769] ? rcu_note_context_switch+0x730/0x730 [ 989.828686] __should_failslab+0x124/0x180 [ 989.832918] should_failslab+0x9/0x14 [ 989.836703] kmem_cache_alloc_trace+0x2cb/0x780 [ 989.841363] ? kasan_kmalloc+0xc4/0xe0 [ 989.845247] __memcg_init_list_lru_node+0x185/0x2d0 [ 989.850270] ? kvfree_rcu+0x20/0x20 [ 989.853884] ? __kmalloc_node+0x47/0x70 [ 989.857851] __list_lru_init+0x4d6/0x840 [ 989.861908] ? list_lru_destroy+0x500/0x500 [ 989.866230] ? prealloc_shrinker+0x213/0x480 [ 989.870638] ? __init_waitqueue_head+0x9e/0x150 [ 989.875303] ? inactive_list_is_low+0x850/0x850 [ 989.879966] ? __lockdep_init_map+0x105/0x590 [ 989.884474] alloc_super+0x9a6/0xb10 [ 989.888175] ? destroy_unused_super.part.11+0x110/0x110 [ 989.893526] ? lock_downgrade+0x8f0/0x8f0 [ 989.897664] ? kasan_check_read+0x11/0x20 [ 989.901797] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 989.906365] ? kasan_check_write+0x14/0x20 [ 989.910585] ? do_raw_spin_lock+0xc1/0x200 [ 989.914808] ? ns_test_super+0x50/0x50 [ 989.918680] sget_fc+0x269/0x950 [ 989.922039] ? compare_single+0x10/0x10 [ 989.926017] ? alloc_super+0xb10/0xb10 [ 989.929907] ? kasan_kmalloc+0xc4/0xe0 [ 989.933788] ? __kmalloc_track_caller+0x311/0x760 [ 989.938623] ? proc_root_lookup+0x60/0x60 [ 989.942758] vfs_get_super+0x6e/0x270 [ 989.946568] proc_get_tree+0x88/0xb0 [ 989.950279] vfs_get_tree+0x1cb/0x5c0 [ 989.954075] do_mount+0x6f2/0x1e20 [ 989.957610] ? copy_mount_string+0x40/0x40 [ 989.961839] ? kasan_kmalloc+0xc4/0xe0 [ 989.965714] ? kmem_cache_alloc_trace+0x318/0x780 [ 989.970541] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 989.976071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.981681] ? copy_mount_options+0x285/0x380 [ 989.986169] ksys_mount+0x12d/0x140 [ 989.989794] __x64_sys_mount+0xbe/0x150 [ 989.993762] do_syscall_64+0x1b9/0x820 [ 989.997633] ? finish_task_switch+0x1d3/0x870 [ 990.002111] ? syscall_return_slowpath+0x5e0/0x5e0 [ 990.007025] ? syscall_return_slowpath+0x31d/0x5e0 [ 990.011937] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 990.016945] ? prepare_exit_to_usermode+0x291/0x3b0 [ 990.021943] ? perf_trace_sys_enter+0xb10/0xb10 [ 990.026595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 990.031437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.036608] RIP: 0033:0x455ab9 [ 990.039776] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.058946] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.066646] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 13:31:17 executing program 2 (fault-call:9 fault-nth:29): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 990.073897] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 990.081150] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 990.088400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 990.095660] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001c 13:31:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0xe0, "b5"}, 0x4ffff8005) 13:31:17 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x5d6f, @loopback={0x0, 0x8}}, 0x1c) 13:31:17 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") clone(0x1840000, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000000000)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:31:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000007f000000000000000000000015000000088d030021000000e916d9970fd727b6c38ac5aad8dc6a17459603ec8c49c948d181006b2419aabb0f376ee2bf265f701da51e0459c300f10ceb2aa5fef03f8360a5c8ef833148f1ba0cb830893effcd2e74d07de7a40870b54ecf57619a6a980c"], 0x1c}, 0x1}, 0x0) 13:31:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x7500, 0x55, 0x2}, {{0x77359400}}], 0x30) [ 990.424926] FAULT_INJECTION: forcing a failure. [ 990.424926] name failslab, interval 1, probability 0, space 0, times 0 [ 990.436482] CPU: 0 PID: 24728 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 990.444995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.454335] Call Trace: [ 990.456923] dump_stack+0x1c9/0x2b4 [ 990.460553] ? dump_stack_print_info.cold.2+0x52/0x52 [ 990.465733] ? __kernel_text_address+0xd/0x40 [ 990.470223] ? unwind_get_return_address+0x61/0xa0 [ 990.475168] should_fail.cold.4+0xa/0x11 [ 990.479217] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 990.484326] ? save_stack+0xa9/0xd0 [ 990.487962] ? save_stack+0x43/0xd0 [ 990.491569] ? kasan_kmalloc+0xc4/0xe0 [ 990.495443] ? kmem_cache_alloc_trace+0x152/0x780 [ 990.500279] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 990.505466] ? __list_lru_init+0x4d6/0x840 [ 990.509699] ? alloc_super+0x9a6/0xb10 [ 990.513583] ? vfs_get_super+0x6e/0x270 [ 990.517541] ? proc_get_tree+0x88/0xb0 [ 990.521423] ? vfs_get_tree+0x1cb/0x5c0 [ 990.525389] ? do_mount+0x6f2/0x1e20 [ 990.529089] ? ksys_mount+0x12d/0x140 [ 990.532879] ? __x64_sys_mount+0xbe/0x150 [ 990.537012] ? do_syscall_64+0x1b9/0x820 [ 990.541059] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.546433] ? save_stack+0xa9/0xd0 [ 990.550061] ? lock_acquire+0x1e4/0x540 [ 990.554042] ? fs_reclaim_acquire+0x20/0x20 [ 990.558349] ? lock_downgrade+0x8f0/0x8f0 [ 990.562481] ? __x64_sys_mount+0xbe/0x150 [ 990.566624] ? check_same_owner+0x340/0x340 [ 990.570942] ? rcu_note_context_switch+0x730/0x730 [ 990.575868] __should_failslab+0x124/0x180 [ 990.580096] should_failslab+0x9/0x14 [ 990.583881] kmem_cache_alloc_trace+0x2cb/0x780 [ 990.588538] ? kasan_kmalloc+0xc4/0xe0 [ 990.592435] __memcg_init_list_lru_node+0x185/0x2d0 [ 990.597440] ? kvfree_rcu+0x20/0x20 [ 990.601058] ? __kmalloc_node+0x47/0x70 [ 990.605027] __list_lru_init+0x4d6/0x840 [ 990.609084] ? list_lru_destroy+0x500/0x500 [ 990.613400] ? prealloc_shrinker+0x213/0x480 [ 990.617791] ? __init_waitqueue_head+0x9e/0x150 [ 990.622444] ? inactive_list_is_low+0x850/0x850 [ 990.627107] ? __lockdep_init_map+0x105/0x590 [ 990.631588] alloc_super+0x9a6/0xb10 [ 990.635289] ? destroy_unused_super.part.11+0x110/0x110 [ 990.640645] ? lock_downgrade+0x8f0/0x8f0 [ 990.644803] ? kasan_check_read+0x11/0x20 [ 990.648934] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 990.653502] ? kasan_check_write+0x14/0x20 [ 990.657740] ? do_raw_spin_lock+0xc1/0x200 [ 990.661963] ? ns_test_super+0x50/0x50 [ 990.665834] sget_fc+0x269/0x950 [ 990.669184] ? compare_single+0x10/0x10 [ 990.673149] ? alloc_super+0xb10/0xb10 [ 990.677031] ? kasan_kmalloc+0xc4/0xe0 [ 990.680906] ? __kmalloc_track_caller+0x311/0x760 [ 990.685737] ? proc_root_lookup+0x60/0x60 [ 990.689869] vfs_get_super+0x6e/0x270 [ 990.693670] proc_get_tree+0x88/0xb0 [ 990.697368] vfs_get_tree+0x1cb/0x5c0 [ 990.701155] do_mount+0x6f2/0x1e20 [ 990.704687] ? check_same_owner+0x340/0x340 [ 990.709000] ? lock_release+0xa30/0xa30 [ 990.712967] ? copy_mount_string+0x40/0x40 [ 990.717191] ? retint_kernel+0x10/0x10 [ 990.721075] ? copy_mount_options+0x1a1/0x380 [ 990.725556] ? copy_mount_options+0x1a4/0x380 [ 990.730042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 990.735565] ? copy_mount_options+0x285/0x380 [ 990.740132] ksys_mount+0x12d/0x140 [ 990.743745] __x64_sys_mount+0xbe/0x150 [ 990.747708] do_syscall_64+0x1b9/0x820 [ 990.751604] ? finish_task_switch+0x1d3/0x870 [ 990.756099] ? syscall_return_slowpath+0x5e0/0x5e0 [ 990.761018] ? syscall_return_slowpath+0x31d/0x5e0 [ 990.765941] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 990.770941] ? prepare_exit_to_usermode+0x291/0x3b0 [ 990.775943] ? perf_trace_sys_enter+0xb10/0xb10 [ 990.780596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 990.785432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.790625] RIP: 0033:0x455ab9 [ 990.793801] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.812931] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 13:31:18 executing program 2 (fault-call:9 fault-nth:30): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) [ 990.820627] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 990.827884] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 990.835147] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 990.842400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 990.849657] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001d 13:31:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, '\x00'}, 0x4ffff8005) 13:31:18 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f00000000c0)="a443e391190ff258e7ece16e00d509b2b1f2b17e35c500569023b76b4e8f7c54265f0d516a99f0a4d77b51fa7a796f9860d1102598e4139524a500cb594bdda5b3e67802e73a45cfcc393c5f42f3dd1a02483acc3393ff970f157b868b32759e9c415462ceb4dac9e69cec80a06b5cf306c561a64ca6", &(0x7f0000000140)=""/200}, 0x18) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 991.182098] FAULT_INJECTION: forcing a failure. [ 991.182098] name failslab, interval 1, probability 0, space 0, times 0 [ 991.193408] CPU: 1 PID: 24758 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 991.201903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.211264] Call Trace: [ 991.213866] dump_stack+0x1c9/0x2b4 [ 991.217505] ? dump_stack_print_info.cold.2+0x52/0x52 [ 991.222714] ? __kernel_text_address+0xd/0x40 [ 991.227241] ? unwind_get_return_address+0x61/0xa0 [ 991.232196] should_fail.cold.4+0xa/0x11 [ 991.236285] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 991.241414] ? save_stack+0xa9/0xd0 [ 991.245061] ? save_stack+0x43/0xd0 [ 991.248703] ? kasan_kmalloc+0xc4/0xe0 [ 991.252606] ? kmem_cache_alloc_trace+0x152/0x780 [ 991.257466] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 991.262671] ? __list_lru_init+0x4d6/0x840 [ 991.266931] ? alloc_super+0x9a6/0xb10 [ 991.270810] ? vfs_get_super+0x6e/0x270 [ 991.274783] ? proc_get_tree+0x88/0xb0 [ 991.278656] ? vfs_get_tree+0x1cb/0x5c0 [ 991.282623] ? do_mount+0x6f2/0x1e20 [ 991.286323] ? ksys_mount+0x12d/0x140 [ 991.290105] ? __x64_sys_mount+0xbe/0x150 [ 991.294930] ? do_syscall_64+0x1b9/0x820 [ 991.298977] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.304328] ? save_stack+0xa9/0xd0 [ 991.307947] ? lock_acquire+0x1e4/0x540 [ 991.311918] ? fs_reclaim_acquire+0x20/0x20 [ 991.316236] ? lock_downgrade+0x8f0/0x8f0 [ 991.320373] ? __x64_sys_mount+0xbe/0x150 [ 991.324523] ? check_same_owner+0x340/0x340 [ 991.329014] ? rcu_note_context_switch+0x730/0x730 [ 991.333932] __should_failslab+0x124/0x180 [ 991.338162] should_failslab+0x9/0x14 [ 991.341949] kmem_cache_alloc_trace+0x2cb/0x780 [ 991.346600] ? kasan_kmalloc+0xc4/0xe0 [ 991.350475] __memcg_init_list_lru_node+0x185/0x2d0 [ 991.355484] ? kvfree_rcu+0x20/0x20 [ 991.359096] ? __kmalloc_node+0x47/0x70 [ 991.363056] __list_lru_init+0x4d6/0x840 [ 991.367102] ? list_lru_destroy+0x500/0x500 [ 991.371410] ? prealloc_shrinker+0x213/0x480 [ 991.375802] ? __init_waitqueue_head+0x9e/0x150 [ 991.380463] ? inactive_list_is_low+0x850/0x850 [ 991.385120] ? __lockdep_init_map+0x105/0x590 [ 991.389601] alloc_super+0x9a6/0xb10 [ 991.393300] ? destroy_unused_super.part.11+0x110/0x110 [ 991.398652] ? lock_downgrade+0x8f0/0x8f0 [ 991.402801] ? kasan_check_read+0x11/0x20 [ 991.406942] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 991.411509] ? kasan_check_write+0x14/0x20 [ 991.415727] ? do_raw_spin_lock+0xc1/0x200 [ 991.419965] ? ns_test_super+0x50/0x50 [ 991.423837] sget_fc+0x269/0x950 [ 991.427191] ? compare_single+0x10/0x10 [ 991.431148] ? alloc_super+0xb10/0xb10 [ 991.435021] ? kasan_kmalloc+0xc4/0xe0 [ 991.438894] ? __kmalloc_track_caller+0x311/0x760 [ 991.443719] ? proc_root_lookup+0x60/0x60 [ 991.447850] vfs_get_super+0x6e/0x270 [ 991.451634] proc_get_tree+0x88/0xb0 [ 991.455334] vfs_get_tree+0x1cb/0x5c0 [ 991.459120] do_mount+0x6f2/0x1e20 [ 991.462648] ? copy_mount_string+0x40/0x40 [ 991.466866] ? kasan_kmalloc+0xc4/0xe0 [ 991.470738] ? kmem_cache_alloc_trace+0x318/0x780 [ 991.475567] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 991.481091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.486622] ? copy_mount_options+0x285/0x380 [ 991.491104] ksys_mount+0x12d/0x140 [ 991.494726] __x64_sys_mount+0xbe/0x150 [ 991.498688] do_syscall_64+0x1b9/0x820 [ 991.502558] ? finish_task_switch+0x1d3/0x870 [ 991.507039] ? syscall_return_slowpath+0x5e0/0x5e0 [ 991.511953] ? syscall_return_slowpath+0x31d/0x5e0 [ 991.516867] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 991.521867] ? prepare_exit_to_usermode+0x291/0x3b0 [ 991.526866] ? perf_trace_sys_enter+0xb10/0xb10 [ 991.531704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 991.536536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.541725] RIP: 0033:0x455ab9 [ 991.544902] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.564083] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 991.571777] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 13:31:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d000100150000000800030021000000f89b236006b03b65d7a15ee013afd0c05ebe145ff24527c9a3b5f5c56274af3a4c10ef3c2eef"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x208000000000000) 13:31:19 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3f00000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0xff00, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:31:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, '\v'}, 0x4ffff8005) [ 991.579030] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 991.586282] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 991.593541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 991.600792] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001e 13:31:19 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) ioctl$TCXONC(r1, 0x540a, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:31:19 executing program 2 (fault-call:9 fault-nth:31): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:19 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7091000000000000, @loopback={0x0, 0x8}}, 0x1c) 13:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0xffffffa3, 0x1d, 0x1, 0x0, 0x25dfdbfe, {0x13}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13:31:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x223, 0x55, 0x2}, {{0x77359400}}], 0x30) [ 991.691285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 991.701071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:31:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='eth0procwlan1lomime_type)eth1%/)\x00', r0}, 0x10) unlinkat(r0, &(0x7f00000001c0)='./bus\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100)=0x40000ea, 0x4) 13:31:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}) close(r3) dup3(r1, r2, 0x0) 13:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r1, 0x104, 0x70bd26, 0x25dfdbff, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:31:19 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0xe4b, 0x80000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @rand_addr, @multicast1}, &(0x7f00000023c0)=0xc) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) [ 991.899879] FAULT_INJECTION: forcing a failure. [ 991.899879] name failslab, interval 1, probability 0, space 0, times 0 [ 991.911251] CPU: 0 PID: 24799 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 991.919754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.929109] Call Trace: [ 991.931707] dump_stack+0x1c9/0x2b4 [ 991.935349] ? dump_stack_print_info.cold.2+0x52/0x52 [ 991.940554] ? __kernel_text_address+0xd/0x40 [ 991.945078] ? unwind_get_return_address+0x61/0xa0 [ 991.950028] should_fail.cold.4+0xa/0x11 [ 991.954084] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 991.959172] ? save_stack+0xa9/0xd0 [ 991.962782] ? save_stack+0x43/0xd0 [ 991.966396] ? kasan_kmalloc+0xc4/0xe0 [ 991.970291] ? kmem_cache_alloc_trace+0x152/0x780 [ 991.975138] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 991.980319] ? __list_lru_init+0x4d6/0x840 [ 991.984538] ? alloc_super+0x9a6/0xb10 [ 991.988412] ? vfs_get_super+0x6e/0x270 [ 991.992371] ? proc_get_tree+0x88/0xb0 [ 991.996262] ? vfs_get_tree+0x1cb/0x5c0 [ 992.000219] ? do_mount+0x6f2/0x1e20 [ 992.004020] ? ksys_mount+0x12d/0x140 [ 992.007812] ? __x64_sys_mount+0xbe/0x150 [ 992.011960] ? do_syscall_64+0x1b9/0x820 [ 992.016024] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.021391] ? save_stack+0xa9/0xd0 [ 992.025014] ? lock_acquire+0x1e4/0x540 [ 992.028979] ? fs_reclaim_acquire+0x20/0x20 [ 992.033288] ? lock_downgrade+0x8f0/0x8f0 [ 992.037434] ? __x64_sys_mount+0xbe/0x150 [ 992.041574] ? check_same_owner+0x340/0x340 [ 992.045880] ? rcu_note_context_switch+0x730/0x730 [ 992.050799] __should_failslab+0x124/0x180 [ 992.055028] should_failslab+0x9/0x14 [ 992.058838] kmem_cache_alloc_trace+0x2cb/0x780 [ 992.063489] ? kasan_kmalloc+0xc4/0xe0 [ 992.067364] __memcg_init_list_lru_node+0x185/0x2d0 [ 992.072371] ? kvfree_rcu+0x20/0x20 [ 992.075983] ? __kmalloc_node+0x47/0x70 [ 992.079947] __list_lru_init+0x4d6/0x840 [ 992.083993] ? list_lru_destroy+0x500/0x500 [ 992.088303] ? prealloc_shrinker+0x213/0x480 [ 992.092702] ? __init_waitqueue_head+0x9e/0x150 [ 992.097376] ? inactive_list_is_low+0x850/0x850 [ 992.102046] ? __lockdep_init_map+0x105/0x590 [ 992.106543] alloc_super+0x9a6/0xb10 [ 992.110244] ? destroy_unused_super.part.11+0x110/0x110 [ 992.115609] ? lock_downgrade+0x8f0/0x8f0 [ 992.119754] ? kasan_check_read+0x11/0x20 [ 992.123896] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 992.128472] ? kasan_check_write+0x14/0x20 [ 992.132694] ? do_raw_spin_lock+0xc1/0x200 [ 992.136912] ? ns_test_super+0x50/0x50 [ 992.140783] sget_fc+0x269/0x950 [ 992.144141] ? compare_single+0x10/0x10 [ 992.148111] ? alloc_super+0xb10/0xb10 [ 992.151989] ? kasan_kmalloc+0xc4/0xe0 [ 992.155874] ? __kmalloc_track_caller+0x311/0x760 [ 992.160712] ? proc_root_lookup+0x60/0x60 [ 992.164848] vfs_get_super+0x6e/0x270 [ 992.168636] proc_get_tree+0x88/0xb0 [ 992.172342] vfs_get_tree+0x1cb/0x5c0 [ 992.176135] do_mount+0x6f2/0x1e20 [ 992.179658] ? check_same_owner+0x340/0x340 [ 992.183970] ? lock_release+0xa30/0xa30 [ 992.187930] ? copy_mount_string+0x40/0x40 [ 992.192157] ? kasan_kmalloc+0xc4/0xe0 [ 992.196044] ? kmem_cache_alloc_trace+0x318/0x780 [ 992.200883] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.206412] ? _copy_from_user+0xdf/0x150 [ 992.210554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 992.216085] ? copy_mount_options+0x285/0x380 [ 992.220574] ksys_mount+0x12d/0x140 [ 992.224186] __x64_sys_mount+0xbe/0x150 [ 992.228170] do_syscall_64+0x1b9/0x820 [ 992.232056] ? finish_task_switch+0x1d3/0x870 [ 992.236544] ? syscall_return_slowpath+0x5e0/0x5e0 [ 992.241463] ? syscall_return_slowpath+0x31d/0x5e0 [ 992.246379] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 992.251381] ? prepare_exit_to_usermode+0x291/0x3b0 [ 992.256399] ? perf_trace_sys_enter+0xb10/0xb10 [ 992.261060] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.265894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.271070] RIP: 0033:0x455ab9 [ 992.274239] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.293390] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 13:31:19 executing program 2 (fault-call:9 fault-nth:32): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:19 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xe06f0000, @loopback={0x0, 0x8}}, 0x1c) [ 992.301450] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 992.308704] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 992.316826] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 992.324091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 992.331354] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 000000000000001f [ 992.680109] FAULT_INJECTION: forcing a failure. [ 992.680109] name failslab, interval 1, probability 0, space 0, times 0 [ 992.691395] CPU: 1 PID: 24826 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 992.699898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.709260] Call Trace: [ 992.711868] dump_stack+0x1c9/0x2b4 [ 992.715514] ? dump_stack_print_info.cold.2+0x52/0x52 [ 992.720778] ? __kernel_text_address+0xd/0x40 [ 992.725293] ? unwind_get_return_address+0x61/0xa0 [ 992.730242] should_fail.cold.4+0xa/0x11 [ 992.734322] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 992.739443] ? save_stack+0xa9/0xd0 [ 992.743062] ? save_stack+0x43/0xd0 [ 992.746689] ? kasan_kmalloc+0xc4/0xe0 [ 992.750585] ? kmem_cache_alloc_trace+0x152/0x780 [ 992.755448] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 992.760646] ? __list_lru_init+0x4d6/0x840 [ 992.764893] ? alloc_super+0x9a6/0xb10 [ 992.768791] ? vfs_get_super+0x6e/0x270 [ 992.772777] ? proc_get_tree+0x88/0xb0 [ 992.776674] ? vfs_get_tree+0x1cb/0x5c0 [ 992.780659] ? do_mount+0x6f2/0x1e20 [ 992.784395] ? ksys_mount+0x12d/0x140 [ 992.788207] ? __x64_sys_mount+0xbe/0x150 [ 992.792364] ? do_syscall_64+0x1b9/0x820 [ 992.796438] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.801827] ? save_stack+0xa9/0xd0 [ 992.805461] ? lock_acquire+0x1e4/0x540 [ 992.809424] ? fs_reclaim_acquire+0x20/0x20 [ 992.813751] ? lock_downgrade+0x8f0/0x8f0 [ 992.817894] ? __x64_sys_mount+0xbe/0x150 [ 992.822049] ? check_same_owner+0x340/0x340 [ 992.826377] ? rcu_note_context_switch+0x730/0x730 [ 992.831324] __should_failslab+0x124/0x180 [ 992.835563] should_failslab+0x9/0x14 [ 992.839372] kmem_cache_alloc_trace+0x2cb/0x780 [ 992.844052] ? kasan_kmalloc+0xc4/0xe0 [ 992.847955] __memcg_init_list_lru_node+0x185/0x2d0 [ 992.852990] ? kvfree_rcu+0x20/0x20 [ 992.856630] ? __kmalloc_node+0x47/0x70 [ 992.860616] __list_lru_init+0x4d6/0x840 [ 992.864689] ? list_lru_destroy+0x500/0x500 [ 992.869017] ? prealloc_shrinker+0x213/0x480 [ 992.873430] ? __init_waitqueue_head+0x9e/0x150 [ 992.878102] ? inactive_list_is_low+0x850/0x850 [ 992.882780] ? __lockdep_init_map+0x105/0x590 [ 992.887296] alloc_super+0x9a6/0xb10 [ 992.891025] ? destroy_unused_super.part.11+0x110/0x110 [ 992.896404] ? lock_downgrade+0x8f0/0x8f0 [ 992.900567] ? kasan_check_read+0x11/0x20 [ 992.904734] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 992.909362] ? kasan_check_write+0x14/0x20 [ 992.913610] ? do_raw_spin_lock+0xc1/0x200 [ 992.917858] ? ns_test_super+0x50/0x50 [ 992.921761] sget_fc+0x269/0x950 [ 992.925143] ? compare_single+0x10/0x10 [ 992.929130] ? alloc_super+0xb10/0xb10 [ 992.933023] ? kasan_kmalloc+0xc4/0xe0 [ 992.936917] ? __kmalloc_track_caller+0x311/0x760 [ 992.941791] ? proc_root_lookup+0x60/0x60 [ 992.945949] vfs_get_super+0x6e/0x270 [ 992.949803] proc_get_tree+0x88/0xb0 [ 992.953532] vfs_get_tree+0x1cb/0x5c0 [ 992.957344] do_mount+0x6f2/0x1e20 [ 992.960918] ? check_same_owner+0x340/0x340 [ 992.965264] ? lock_release+0xa30/0xa30 [ 992.969265] ? copy_mount_string+0x40/0x40 [ 992.973506] ? kasan_kmalloc+0xc4/0xe0 [ 992.977410] ? kmem_cache_alloc_trace+0x318/0x780 [ 992.982268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.987815] ? _copy_from_user+0xdf/0x150 [ 992.991981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 992.997530] ? copy_mount_options+0x285/0x380 [ 993.002035] ksys_mount+0x12d/0x140 [ 993.005679] __x64_sys_mount+0xbe/0x150 [ 993.009664] do_syscall_64+0x1b9/0x820 [ 993.013558] ? finish_task_switch+0x1d3/0x870 [ 993.018067] ? syscall_return_slowpath+0x5e0/0x5e0 [ 993.023006] ? syscall_return_slowpath+0x31d/0x5e0 [ 993.027943] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 993.032959] ? prepare_exit_to_usermode+0x291/0x3b0 [ 993.037979] ? perf_trace_sys_enter+0xb10/0xb10 [ 993.042649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 993.047490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.052697] RIP: 0033:0x455ab9 [ 993.055883] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:31:20 executing program 3: socket$inet6(0xa, 0x1000000000006, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x12, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:31:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fstat(r0, &(0x7f0000000240)) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, r1}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x7f, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x3, 'lblc\x00', 0x4, 0x10001, 0x53}, 0x2c) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000001c0)=""/73) 13:31:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffff7, 0x200) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 13:31:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xef030000, @loopback={0x0, 0x8}}, 0x1c) 13:31:20 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000100)) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socketpair$inet(0x2, 0x2, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0xfff, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}], 0x3c) 13:31:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc8100000, @loopback={0x0, 0x8}}, 0x1c) 13:31:20 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = getpgrp(0xffffffffffffffff) migrate_pages(r1, 0x7, &(0x7f0000000000)=0xfffffffffffff001, &(0x7f00000000c0)=0xf) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000040), &(0x7f00000000c0)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:31:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x883d, @loopback={0x0, 0x8}}, 0x1c) [ 993.075128] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 993.082841] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 993.090109] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 993.097381] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 993.104893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 993.112259] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000020 13:31:20 executing program 2 (fault-call:9 fault-nth:33): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000000c0)=0x40000000000003, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) [ 993.324832] FAULT_INJECTION: forcing a failure. [ 993.324832] name failslab, interval 1, probability 0, space 0, times 0 [ 993.336152] CPU: 1 PID: 24873 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 993.344633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.353975] Call Trace: [ 993.356564] dump_stack+0x1c9/0x2b4 [ 993.360181] ? dump_stack_print_info.cold.2+0x52/0x52 [ 993.365366] ? __kernel_text_address+0xd/0x40 [ 993.369847] ? unwind_get_return_address+0x61/0xa0 [ 993.374765] should_fail.cold.4+0xa/0x11 [ 993.378827] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 993.383933] ? save_stack+0xa9/0xd0 [ 993.387559] ? save_stack+0x43/0xd0 [ 993.391193] ? kasan_kmalloc+0xc4/0xe0 [ 993.395097] ? kmem_cache_alloc_trace+0x152/0x780 [ 993.399935] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 993.405109] ? __list_lru_init+0x4d6/0x840 [ 993.409326] ? alloc_super+0x9a6/0xb10 [ 993.413218] ? vfs_get_super+0x6e/0x270 [ 993.417186] ? proc_get_tree+0x88/0xb0 [ 993.421067] ? vfs_get_tree+0x1cb/0x5c0 [ 993.425041] ? do_mount+0x6f2/0x1e20 [ 993.428755] ? ksys_mount+0x12d/0x140 [ 993.432547] ? __x64_sys_mount+0xbe/0x150 [ 993.436691] ? do_syscall_64+0x1b9/0x820 [ 993.440755] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.446111] ? save_stack+0xa9/0xd0 [ 993.449742] ? lock_acquire+0x1e4/0x540 [ 993.453733] ? fs_reclaim_acquire+0x20/0x20 [ 993.458064] ? lock_downgrade+0x8f0/0x8f0 [ 993.462229] ? __x64_sys_mount+0xbe/0x150 [ 993.466388] ? check_same_owner+0x340/0x340 [ 993.470716] ? rcu_note_context_switch+0x730/0x730 [ 993.475650] __should_failslab+0x124/0x180 [ 993.479885] should_failslab+0x9/0x14 [ 993.483691] kmem_cache_alloc_trace+0x2cb/0x780 [ 993.488367] ? kasan_kmalloc+0xc4/0xe0 [ 993.492251] __memcg_init_list_lru_node+0x185/0x2d0 [ 993.497258] ? kvfree_rcu+0x20/0x20 [ 993.500872] ? __kmalloc_node+0x47/0x70 [ 993.504844] __list_lru_init+0x4d6/0x840 [ 993.508900] ? list_lru_destroy+0x500/0x500 [ 993.513219] ? prealloc_shrinker+0x213/0x480 [ 993.517630] ? __init_waitqueue_head+0x9e/0x150 [ 993.522302] ? inactive_list_is_low+0x850/0x850 [ 993.526956] ? __lockdep_init_map+0x105/0x590 [ 993.531446] alloc_super+0x9a6/0xb10 [ 993.535164] ? destroy_unused_super.part.11+0x110/0x110 [ 993.540522] ? lock_downgrade+0x8f0/0x8f0 [ 993.544675] ? kasan_check_read+0x11/0x20 [ 993.548806] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 993.553386] ? kasan_check_write+0x14/0x20 [ 993.557607] ? do_raw_spin_lock+0xc1/0x200 [ 993.561830] ? ns_test_super+0x50/0x50 [ 993.565745] sget_fc+0x269/0x950 [ 993.569110] ? compare_single+0x10/0x10 [ 993.573068] ? alloc_super+0xb10/0xb10 [ 993.576957] ? kasan_kmalloc+0xc4/0xe0 [ 993.580857] ? __kmalloc_track_caller+0x311/0x760 [ 993.585722] ? proc_root_lookup+0x60/0x60 [ 993.589881] vfs_get_super+0x6e/0x270 [ 993.593681] proc_get_tree+0x88/0xb0 [ 993.597384] vfs_get_tree+0x1cb/0x5c0 [ 993.601170] do_mount+0x6f2/0x1e20 [ 993.604694] ? copy_mount_string+0x40/0x40 [ 993.608924] ? kasan_kmalloc+0xc4/0xe0 [ 993.612805] ? kmem_cache_alloc_trace+0x318/0x780 [ 993.617634] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 993.623169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.628692] ? copy_mount_options+0x285/0x380 [ 993.633173] ksys_mount+0x12d/0x140 [ 993.636805] __x64_sys_mount+0xbe/0x150 [ 993.640769] do_syscall_64+0x1b9/0x820 [ 993.644640] ? finish_task_switch+0x1d3/0x870 [ 993.649127] ? syscall_return_slowpath+0x5e0/0x5e0 [ 993.654047] ? syscall_return_slowpath+0x31d/0x5e0 [ 993.658980] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 993.663986] ? prepare_exit_to_usermode+0x291/0x3b0 [ 993.668991] ? perf_trace_sys_enter+0xb10/0xb10 [ 993.673649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 993.678482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.683653] RIP: 0033:0x455ab9 [ 993.686822] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.705981] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 993.713685] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 13:31:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x77f4, @loopback={0x0, 0x8}}, 0x1c) 13:31:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mq_timedsend(r0, &(0x7f00000001c0)="1c287609b94666367f97cdbb586938b9cbb90abaef3158229b21757a242e2ea717817abd769d7d9c02363e62676c3b72ca29fb85bd6bfd5603a086afd63e900ea4db7a819a83a4422cd5aa4c3f723b0742818b301df8f9cce42a6f85", 0x5c, 0x100000001, &(0x7f0000000000)={0x0, 0x1c9c380}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f00000005c0)=""/182, 0xb6}, {&(0x7f0000000680)=""/71, 0x47}, {&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f00000007c0)=""/202, 0xca}], 0x7, 0x0) mq_timedreceive(r0, &(0x7f0000000240)=""/136, 0x88, 0xfffffffffffffe01, &(0x7f0000000080)={0x77359400}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x7, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x10000) 13:31:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0xc, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:31:21 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") open_by_handle_at(r0, &(0x7f0000000180)={0x18, 0x400, "73df5b3dbc84bd8c3db370357a897d9a"}, 0x400) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200400, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="2970e303a1700f000002000000be1a"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x7d, &(0x7f0000000140), 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x8}, 0x2) ioctl$TIOCSCTTY(r5, 0x540e, 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$setlease(r2, 0x400, 0x2) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:31:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) close(r3) dup3(r1, r2, 0x0) [ 993.721091] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 993.728378] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 993.735659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 993.742946] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000021 13:31:21 executing program 3: socket$inet6(0xa, 0x1000000000006, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 13:31:21 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) 13:31:21 executing program 2 (fault-call:9 fault-nth:34): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000001c0)='bddv\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='iso9660\x00', 0x101000, &(0x7f0000000380)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, &(0x7f0000000580)) 13:31:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x9, 0x2, "b5"}, 0x4ffff8005) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) 13:31:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x6016, @loopback={0x0, 0x8}}, 0x1c) 13:31:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x5, 0x55, 0x2}, {{0x77359400}}], 0x30) 13:31:21 executing program 7: r0 = socket$inet6(0xa, 0x80005, 0x80000001) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 13:31:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x3, 0x8000000000, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) [ 993.972879] FAULT_INJECTION: forcing a failure. [ 993.972879] name failslab, interval 1, probability 0, space 0, times 0 [ 993.984172] CPU: 1 PID: 24904 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 993.992667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.002014] Call Trace: [ 994.004596] dump_stack+0x1c9/0x2b4 [ 994.008216] ? dump_stack_print_info.cold.2+0x52/0x52 [ 994.013403] should_fail.cold.4+0xa/0x11 [ 994.017465] ? wait_for_completion+0x8d0/0x8d0 [ 994.022038] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 994.027135] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 994.032139] ? __memcg_init_list_lru_node+0x20a/0x2d0 [ 994.037322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.042848] ? xas_find_tagged+0x49d/0x1310 [ 994.047163] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 994.052691] ? xas_store+0x52f/0x1720 [ 994.056491] ? ida_alloc_range+0x5d0/0xc70 [ 994.060714] ? lock_downgrade+0x8f0/0x8f0 [ 994.064860] ? lock_acquire+0x1e4/0x540 [ 994.068824] ? fs_reclaim_acquire+0x20/0x20 [ 994.073133] ? lock_downgrade+0x8f0/0x8f0 [ 994.077277] ? check_same_owner+0x340/0x340 [ 994.081583] ? kfree+0x15e/0x260 [ 994.084945] ? rcu_note_context_switch+0x730/0x730 [ 994.089872] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 994.095414] __should_failslab+0x124/0x180 [ 994.099648] should_failslab+0x9/0x14 [ 994.103437] kmem_cache_alloc+0x2af/0x760 [ 994.107578] ? up_read+0x110/0x110 [ 994.111105] ? down_read+0x1d0/0x1d0 [ 994.114814] ? proc_i_callback+0x30/0x30 [ 994.118867] proc_alloc_inode+0x1b/0x190 [ 994.122919] alloc_inode+0x63/0x190 [ 994.126532] new_inode_pseudo+0x71/0x1a0 [ 994.130587] ? prune_icache_sb+0x1b0/0x1b0 [ 994.134813] ? memcpy+0x45/0x50 [ 994.138086] proc_get_inode+0x1e/0x680 [ 994.142975] proc_fill_super+0x32c/0x630 [ 994.147026] ? proc_root_lookup+0x60/0x60 [ 994.151166] ? __kmalloc_track_caller+0x311/0x760 [ 994.156084] ? proc_root_lookup+0x60/0x60 [ 994.160222] vfs_get_super+0x15e/0x270 [ 994.164097] proc_get_tree+0x88/0xb0 [ 994.167809] vfs_get_tree+0x1cb/0x5c0 [ 994.171606] do_mount+0x6f2/0x1e20 [ 994.175132] ? check_same_owner+0x340/0x340 [ 994.179441] ? lock_release+0xa30/0xa30 [ 994.183406] ? copy_mount_string+0x40/0x40 [ 994.187626] ? kasan_kmalloc+0xc4/0xe0 [ 994.191505] ? kmem_cache_alloc_trace+0x318/0x780 [ 994.196337] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 994.201863] ? _copy_from_user+0xdf/0x150 [ 994.206000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.211527] ? copy_mount_options+0x285/0x380 [ 994.216014] ksys_mount+0x12d/0x140 [ 994.219641] __x64_sys_mount+0xbe/0x150 [ 994.223622] do_syscall_64+0x1b9/0x820 [ 994.227503] ? finish_task_switch+0x1d3/0x870 [ 994.231983] ? syscall_return_slowpath+0x5e0/0x5e0 [ 994.236910] ? syscall_return_slowpath+0x31d/0x5e0 [ 994.241828] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 994.246831] ? prepare_exit_to_usermode+0x291/0x3b0 [ 994.251843] ? perf_trace_sys_enter+0xb10/0xb10 [ 994.256501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 994.261355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.266530] RIP: 0033:0x455ab9 [ 994.269701] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.288978] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 994.296681] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 994.303935] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 994.311197] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 994.318452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 994.325707] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000022 [ 994.333263] proc_fill_super: get root inode failed [ 994.347988] ================================================================== [ 994.355413] BUG: KASAN: use-after-free in dput.part.26+0x634/0x7a0 [ 994.361753] Read of size 4 at addr ffff8801b3735ce0 by task syz-executor2/24904 [ 994.369203] [ 994.370832] CPU: 1 PID: 24904 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 994.379299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.388629] Call Trace: [ 994.391203] dump_stack+0x1c9/0x2b4 [ 994.394809] ? dump_stack_print_info.cold.2+0x52/0x52 [ 994.399980] ? printk+0xa7/0xcf [ 994.403239] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 994.407977] ? dput.part.26+0x634/0x7a0 [ 994.411938] print_address_description+0x6c/0x20b [ 994.416774] ? dput.part.26+0x634/0x7a0 [ 994.420732] kasan_report.cold.7+0x242/0x30d [ 994.425119] __asan_report_load4_noabort+0x14/0x20 [ 994.430037] dput.part.26+0x634/0x7a0 [ 994.433823] ? shrink_dcache_sb+0x350/0x350 [ 994.438122] ? __kasan_slab_free+0x131/0x170 [ 994.442510] ? trace_hardirqs_on+0xd/0x10 [ 994.446648] dput+0x15/0x20 [ 994.449562] proc_kill_sb+0x125/0x1e0 [ 994.453341] ? proc_get_inode+0x680/0x680 [ 994.457468] ? proc_root_lookup+0x60/0x60 [ 994.461598] deactivate_locked_super+0x97/0x100 [ 994.466247] vfs_get_super+0x20f/0x270 [ 994.470116] proc_get_tree+0x88/0xb0 [ 994.473822] vfs_get_tree+0x1cb/0x5c0 [ 994.477605] do_mount+0x6f2/0x1e20 [ 994.481126] ? check_same_owner+0x340/0x340 [ 994.485425] ? lock_release+0xa30/0xa30 [ 994.489394] ? copy_mount_string+0x40/0x40 [ 994.493607] ? kasan_kmalloc+0xc4/0xe0 [ 994.497484] ? kmem_cache_alloc_trace+0x318/0x780 [ 994.502317] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 994.507842] ? _copy_from_user+0xdf/0x150 [ 994.511980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.517497] ? copy_mount_options+0x285/0x380 [ 994.521972] ksys_mount+0x12d/0x140 [ 994.525587] __x64_sys_mount+0xbe/0x150 [ 994.529542] do_syscall_64+0x1b9/0x820 [ 994.533419] ? finish_task_switch+0x1d3/0x870 [ 994.537901] ? syscall_return_slowpath+0x5e0/0x5e0 [ 994.542819] ? syscall_return_slowpath+0x31d/0x5e0 [ 994.547738] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 994.552735] ? prepare_exit_to_usermode+0x291/0x3b0 [ 994.557738] ? perf_trace_sys_enter+0xb10/0xb10 [ 994.562396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 994.567232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.572402] RIP: 0033:0x455ab9 [ 994.575576] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.594708] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 994.602398] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 994.609658] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 994.616914] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 994.624258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 994.631514] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000022 [ 994.638776] [ 994.640386] Allocated by task 24087: [ 994.644084] save_stack+0x43/0xd0 [ 994.647515] kasan_kmalloc+0xc4/0xe0 [ 994.651208] kasan_slab_alloc+0x12/0x20 [ 994.655170] kmem_cache_alloc+0x12e/0x760 [ 994.659296] __d_alloc+0xc8/0xd50 [ 994.662735] d_alloc+0x96/0x380 [ 994.666003] d_alloc_name+0xbb/0x120 [ 994.669703] proc_setup_self+0xe1/0x3af [ 994.673656] proc_fill_super+0x37e/0x630 [ 994.677697] vfs_get_super+0x15e/0x270 [ 994.681562] proc_get_tree+0x88/0xb0 [ 994.685256] vfs_get_tree+0x1cb/0x5c0 [ 994.689038] do_mount+0x6f2/0x1e20 [ 994.692558] ksys_mount+0x12d/0x140 [ 994.696162] __x64_sys_mount+0xbe/0x150 [ 994.700121] do_syscall_64+0x1b9/0x820 [ 994.703993] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.709162] [ 994.710768] Freed by task 24075: [ 994.714113] save_stack+0x43/0xd0 [ 994.717543] __kasan_slab_free+0x11a/0x170 [ 994.721757] kasan_slab_free+0xe/0x10 [ 994.725541] kmem_cache_free+0x86/0x2d0 [ 994.729502] __d_free+0x20/0x30 [ 994.732760] rcu_process_callbacks+0xf98/0x2860 [ 994.737408] __do_softirq+0x2e8/0xb17 [ 994.741182] [ 994.742790] The buggy address belongs to the object at ffff8801b3735ce0 [ 994.742790] which belongs to the cache dentry(87:syz2) of size 288 [ 994.755772] The buggy address is located 0 bytes inside of [ 994.755772] 288-byte region [ffff8801b3735ce0, ffff8801b3735e00) [ 994.767447] The buggy address belongs to the page: [ 994.772456] page:ffffea0006cdcd40 count:1 mapcount:0 mapping:ffff8801cefc6b40 index:0xffff8801b3735080 [ 994.781878] flags: 0x2fffc0000000200(slab) [ 994.786112] raw: 02fffc0000000200 ffffea00062d38c8 ffffea0006cdc448 ffff8801cefc6b40 [ 994.793979] raw: ffff8801b3735080 ffff8801b3735080 0000000100000002 ffff8801c7ec8d80 [ 994.801837] page dumped because: kasan: bad access detected [ 994.807525] page->mem_cgroup:ffff8801c7ec8d80 [ 994.811999] [ 994.813612] Memory state around the buggy address: [ 994.818517] ffff8801b3735b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 994.825863] ffff8801b3735c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 994.833200] >ffff8801b3735c80: fb fb fb fb fc fc fc fc fc fc fc fc fb fb fb fb [ 994.840534] ^ [ 994.847001] ffff8801b3735d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 994.854351] ffff8801b3735d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 994.861681] ================================================================== [ 994.869305] Kernel panic - not syncing: panic_on_warn set ... [ 994.869305] 13:31:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000000040)='./bus\x00', 0x400, 0x102, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x500, 0x228, 0x468, 0x0, 0x330, 0x120, 0x468, 0x468, 0x468, 0x468, 0x468, 0x5, &(0x7f0000000340), {[{{@ip={@broadcast=0xffffffff, @empty, 0xffffff00, 0xffffffff, 'tunl0\x00', 'ip_vti0\x00', {}, {0xff}, 0xdd, 0x1, 0x6}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@empty, 0x1}}, @common=@socket0={0x20, 'socket\x00'}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2=0xe0000002, @empty, @gre_key=0x3f, @gre_key=0x3}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x10000, 0xffffffff, 0xffffffff, 'teql0\x00', 'veth0_to_bond\x00', {}, {}, 0x2f, 0x1, 0x20}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x3}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x5, @ipv6=@local={0xfe, 0x80, [], 0xaa}, @ipv6=@mcast2={0xff, 0x2, [], 0x1}, @port=0x4e21, @port=0x4e22}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={0x38, 'devgroup\x00', 0x0, {0xf, 0x5, 0x1, 0x10000, 0x8}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@unspec=@helper={0x48, 'helper\x00', 0x0, {0x0, 'RAS\x00'}}, @common=@socket0={0x20, 'socket\x00'}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, @gre_key=0xdb, @gre_key=0x9}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x560) mkdirat(r0, &(0x7f0000000080)='./bus\x00', 0xa0) open_by_handle_at(r0, &(0x7f0000000940)=ANY=[@ANYPTR], 0x4ffff8005) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 13:31:22 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x8000000000002a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xc8050000, @loopback={0x0, 0x8}}, 0x1c) [ 994.876696] CPU: 1 PID: 24904 Comm: syz-executor2 Tainted: G B 4.18.0-rc5-next-20180719+ #11 [ 994.886576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.895949] Call Trace: [ 994.898551] dump_stack+0x1c9/0x2b4 [ 994.902195] ? dump_stack_print_info.cold.2+0x52/0x52 [ 994.907398] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 994.912157] panic+0x238/0x4e7 [ 994.915343] ? add_taint.cold.5+0x16/0x16 [ 994.919504] ? do_raw_spin_unlock+0xa7/0x2f0 13:31:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff0f, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}) close(r3) dup3(r1, r2, 0x0) [ 994.923910] ? dput.part.26+0x634/0x7a0 [ 994.927867] kasan_end_report+0x47/0x4f [ 994.931838] kasan_report.cold.7+0x76/0x30d [ 994.936166] __asan_report_load4_noabort+0x14/0x20 [ 994.941102] dput.part.26+0x634/0x7a0 [ 994.946823] ? shrink_dcache_sb+0x350/0x350 [ 994.951176] ? __kasan_slab_free+0x131/0x170 [ 994.955612] ? trace_hardirqs_on+0xd/0x10 [ 994.959771] dput+0x15/0x20 [ 994.962721] proc_kill_sb+0x125/0x1e0 [ 994.966535] ? proc_get_inode+0x680/0x680 [ 994.970698] ? proc_root_lookup+0x60/0x60 13:31:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x15}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) getpgrp(r2) [ 994.974874] deactivate_locked_super+0x97/0x100 [ 994.979568] vfs_get_super+0x20f/0x270 [ 994.983471] proc_get_tree+0x88/0xb0 [ 994.987194] vfs_get_tree+0x1cb/0x5c0 [ 994.990999] do_mount+0x6f2/0x1e20 [ 994.994541] ? check_same_owner+0x340/0x340 [ 994.998878] ? lock_release+0xa30/0xa30 [ 995.002860] ? copy_mount_string+0x40/0x40 [ 995.007102] ? kasan_kmalloc+0xc4/0xe0 [ 995.011010] ? kmem_cache_alloc_trace+0x318/0x780 [ 995.015874] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 995.021421] ? _copy_from_user+0xdf/0x150 13:31:22 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x3, 0xf6, 0x1, 0x500, 0x10001, 0x0, r1}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x3, 0x6, 0x3}) [ 995.025587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.031133] ? copy_mount_options+0x285/0x380 [ 995.035643] ksys_mount+0x12d/0x140 [ 995.039370] __x64_sys_mount+0xbe/0x150 [ 995.043345] do_syscall_64+0x1b9/0x820 [ 995.047217] ? finish_task_switch+0x1d3/0x870 [ 995.051709] ? syscall_return_slowpath+0x5e0/0x5e0 [ 995.056635] ? syscall_return_slowpath+0x31d/0x5e0 [ 995.061570] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 995.066589] ? prepare_exit_to_usermode+0x291/0x3b0 [ 995.071609] ? perf_trace_sys_enter+0xb10/0xb10 [ 995.076308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 995.081156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.086337] RIP: 0033:0x455ab9 [ 995.089522] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 995.108788] RSP: 002b:00007f176d76ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 995.116500] RAX: ffffffffffffffda RBX: 00007f176d76f6d4 RCX: 0000000000455ab9 [ 995.123759] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 995.131026] RBP: 000000000072bea0 R08: 0000000020000580 R09: 0000000000000000 [ 995.138306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 995.145583] R13: 00000000004c01fb R14: 00000000004cfe38 R15: 0000000000000022 [ 995.153351] Dumping ftrace buffer: [ 995.156880] (ftrace buffer empty) [ 995.160587] Kernel Offset: disabled [ 995.164200] Rebooting in 86400 seconds..