[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 32.101556] audit: type=1800 audit(1539318869.878:25): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 32.141036] audit: type=1800 audit(1539318869.878:26): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 32.171492] audit: type=1800 audit(1539318869.878:27): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. 2018/10/12 04:34:41 fuzzer started 2018/10/12 04:34:43 dialing manager at 10.128.0.26:46745 2018/10/12 04:34:43 syscalls: 1 2018/10/12 04:34:43 code coverage: enabled 2018/10/12 04:34:43 comparison tracing: enabled 2018/10/12 04:34:43 setuid sandbox: enabled 2018/10/12 04:34:43 namespace sandbox: enabled 2018/10/12 04:34:43 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/12 04:34:43 fault injection: enabled 2018/10/12 04:34:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/12 04:34:43 net packed injection: enabled 2018/10/12 04:34:43 net device setup: enabled 04:37:26 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100, 0x181000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r1, 0xa00, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xd}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xc}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x14d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xb0db}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) fsetxattr$security_capability(r0, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x0, 0x20}]}, 0xc, 0x2) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000300)=0x14020, 0x4) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000340)={0x2, 0x2, 0xffff, 0x6}) connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff}, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000003c0)=0x9, 0x4) clock_gettime(0x2, &(0x7f0000000400)) bind$bt_rfcomm(r0, &(0x7f0000000440)={0x1f, {0x4, 0x1, 0xfffffffeffffffff, 0x8, 0x80000001, 0x400}, 0x401}, 0xa) sysfs$1(0x1, &(0x7f0000000480)='\'proc\x00') setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000004c0)=0x4d479f2e, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000500), 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000540)=""/178, &(0x7f0000000600)=0xb2) getpeername$unix(r0, &(0x7f0000000640), &(0x7f00000006c0)=0x6e) preadv(r2, &(0x7f0000002b80)=[{&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/155, 0x9b}, {&(0x7f0000000880)=""/141, 0x8d}, {&(0x7f0000000940)=""/242, 0xf2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/166, 0xa6}, {&(0x7f0000001b00)=""/123, 0x7b}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x8, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000002c00)={0x1, 0x0, [0x0]}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002c40)=0x0) getpriority(0x3, r3) ioprio_set$pid(0x1, r3, 0xfffffffffffffffc) accept4$inet6(r0, &(0x7f0000002c80)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000002cc0)=0x1c, 0x800) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000002d40), &(0x7f0000002d80)=0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000002dc0)={'ip6gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000002e00)={0x8, 0x559c9dc8, 0x5, 0x61, 0x6, 0x4, 0x4, 0x81, 0x4, 0x0, 0x800, 0x5}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000002e40)='tls\x00', 0x4) socket$pptp(0x18, 0x1, 0x2) syzkaller login: [ 208.662912] IPVS: ftp: loaded support on port[0] = 21 04:37:26 executing program 1: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x101000, 0x0) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x80000001, 0x400140) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x800, 0x1cf, 0x6, 0x0, 0x0, [{r1, 0x0, 0x3}, {r2, 0x0, 0x80000000}, {r3}, {r4, 0x0, 0x3}, {r6, 0x0, 0x6}, {r7}]}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x6a, "514102c5b8da9e1ddf86cf24ef1028dfddcfe77558caea29f79276d6f5867e680311dccaeec9219d5753209498ae417d24ba0522da366a7b907ec82e7dc895d6dc714cef5ae7345f99b4c0dfb03851f41844970cf7e68f0d5df3cfc2afbaf9dddf99b57cd0a51a0f24c6"}, &(0x7f00000002c0)=0x8e) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0xf000, 0x7000, 0x0, 0xed2d, 0x2, 0x0, 0x1, 0x5, 0x6, 0x5, 0x8, 0x200}, {0x0, 0x0, 0xb, 0x5, 0x2, 0x1000, 0x7, 0x283, 0x1, 0x100000001, 0xfffffffffffffffe, 0x86}, {0x100000, 0xf000, 0xc, 0x8, 0x1000, 0x1, 0x80000001, 0x1, 0x3, 0x8, 0x5, 0x100000001}, {0x4000, 0x10f002, 0xf, 0x81, 0x10000, 0x80, 0x100000000, 0x2bd4, 0x0, 0x4, 0xffffffff, 0x1}, {0x3000, 0x100000, 0x10, 0x4, 0x100000000, 0x3, 0x2, 0x1, 0x5, 0x7fffffff, 0x7, 0x6}, {0x1000, 0x1, 0xf, 0x100, 0x0, 0x1, 0x0, 0x324, 0x8, 0x9, 0x5, 0x5}, {0x2000, 0x0, 0x4, 0x0, 0x4, 0x3, 0x79bb, 0x9, 0x0, 0x3, 0xfffffffffffffffe, 0x6eb7}, {0x10000, 0xf000, 0xd, 0xfffffffffffffffd, 0x3, 0x32, 0x8, 0x1, 0xe36, 0x3f51, 0x9, 0x7}, {0xd002, 0x111000}, {0x0, 0x7000}, 0x40000000, 0x0, 0xf000, 0x100, 0x3, 0x2000, 0x15000, [0x7, 0x8, 0xb2cc, 0x7fffffff]}) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) r9 = accept$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000004c0)={r10, 0x0, 0x9, 0xfffffffffffffff9, 0x7, 0x7, 0xffffffffffffffff}) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000500)=0x10000) truncate(&(0x7f0000000540)='./file0\x00', 0x80000000) ioctl$KDENABIO(r6, 0x4b36) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000580)={0x1}, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000005c0)={0x1ff}, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000600)={@mcast2}, &(0x7f0000000640)=0x14) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000680)=0xffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000006c0)={0x1, [0x0]}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000740)={r11, 0x1ff}, &(0x7f0000000780)=0x8) setsockopt$inet6_dccp_int(r6, 0x21, 0x1f, &(0x7f00000007c0)=0x80, 0x4) getsockopt$sock_int(r8, 0x1, 0x0, &(0x7f0000000800), &(0x7f0000000840)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000880)={r11, 0xec58, 0xe74, 0x4}, &(0x7f00000008c0)=0x10) ioctl$SCSI_IOCTL_START_UNIT(r9, 0x5) setitimer(0x1, &(0x7f0000000900)={{}, {0x0, 0x2710}}, &(0x7f0000000940)) [ 208.904272] IPVS: ftp: loaded support on port[0] = 21 04:37:26 executing program 2: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'eth0}/\x00'}, &(0x7f0000000080)='\x00', 0x1, 0x3) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)={0x0, @aes128, 0x0, "dedf32d32bf5e81e"}) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RREADDIR(r1, &(0x7f0000000180)={0x49, 0x29, 0x1, {0x1ff, [{{0x2, 0x3, 0x7}, 0x0, 0x26, 0x7, './file0'}, {{0x1, 0x2, 0x5}, 0x2, 0xe6f8, 0x7, './file0'}]}}, 0x49) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={"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"}) unlink(&(0x7f0000000600)='./file0\x00') ioctl$KDDELIO(r1, 0x4b35, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000640)='/dev/audio#\x00', 0x1ff, 0x210000) fcntl$setsig(r2, 0xa, 0x3) setxattr$trusted_overlay_upper(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='trusted.overlay.upper\x00', &(0x7f0000000700)={0x0, 0xfb, 0x10b, 0x1, 0x20, "c8596f79c47b1ed76d62316bead6c0a0", "b3fe19d7eb11d6c8de7cb50a9f70402af6921e70f0af8a2ad733dd4531b7aed65c04666be65cf5f5a40733cc3bad8b2f5c13cf842a6c1afae9beb7a514b167212b18bfecbcbe8da5900df3258424ad4df797025abedeee833f0b49cada491d046d248abb6086cb042075ff7e9f8a6b0dbfd46e390fc93150de1ab50c971fe81a33c912f75fd5ea9bd5f2439e8af0e3a7469943fd110f9bb36d99a4387fc3c94d1ab88ba183101684748ebca569dceaaf92ff9fb50b83b7631880752aa72f0f96d25c37916bc71484f898882a798dd5cc8c8c03de6efee7e74d72f33f8d6c923e65b76f5d7f277a44f51a8af92c2e05aeeca48c266a72"}, 0x10b, 0x3) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000008c0)={0x7, @local}) syz_open_pts(r2, 0x288402) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000900), &(0x7f0000000940)=0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000980)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x470, 0x0, 0x0, 0x270, 0x0, 0x0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3, &(0x7f00000009c0), {[{{@uncond, 0x0, 0x200, 0x270, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0xe4, 0xec85, 0x100000000000, 0x400, 0x0, 0x1, [@empty, @empty, @empty, @dev={0xfe, 0x80, [], 0x10}, @local, @loopback, @remote, @dev={0xfe, 0x80, [], 0x16}, @mcast1, @local, @ipv4={[], [], @remote}, @ipv4={[], [], @remote}, @mcast1, @mcast1, @empty, @local], 0xf}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0xd631, 0x2, 0x1, 0x0, "83c3a7ca36bbc8b3f486fa7adbac43b24984eee36f209772296ae429be789cb9341632f014d1860676e3910467e562e325aec742c05d571ceeea29ab3761a815"}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0x7606, 0x10001, 0xfffffffffffffffb, 0x1, 0x8, 0xfffffffffffffd93, 0x400]}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) io_setup(0x7a42, &(0x7f0000000f00)=0x0) io_submit(r3, 0x1, &(0x7f0000000fc0)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x6, 0x45f, r1, &(0x7f0000000f40)="cfd80d2b500385d397c0c6de19f9ef7e04367523c11ee7f0b7350cafcff3fbc26612d02eec080ee6504eb52e4af32d53", 0x30, 0x9, 0x0, 0x0, r2}]) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000001040)={&(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000001080)={0x401, 0x3, 0x200, 0x2, [], [], [], 0x7fff, 0x80000000, 0x3, 0x9, "15975a6bca0388f22db8d57e061ba472"}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000011c0)) setsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f00000012c0)="feefa8730fd5c720171ee79319cb1a6997e71756efaecafa10f2e2e9bc579cd18986625e422714f605aaef541a9b9948bcd4a5442fb071db7d1ab0863c26f6e56e98ef3ed401690bfe6853402dd6346a236f5a37bef998203cb201c3d4cfdb23fbfc3f1036165f5699cf62ff2763a9684eafc04bf92704a70abf1264a76d3aa99016a783b2b633af02f6c4d2b6e26ac21416fbb2e4c13f36dd556714745742e4aaa97efbfee1b2716008d19a81d309ace10d5034f8604a02c548a41957da424ebe9fb1", 0xc3) accept$packet(r1, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0x278, 0x278, 0x0, 0x0, 0x130, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000001440), {[{{@ipv6={@remote, @local, [0x0, 0xffffffff, 0xff, 0xffffffff], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'ip_vti0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x3b, 0xfff, 0x3, 0x9}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x0, 0x7c, 0x7}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7b315eb9fd758eafc469538956503bfdf0701fef6b67089186cbe18f7e9c"}}, {{@ipv6={@remote, @local, [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth1\x00', 'eql\x00', {0xff}, {0xff}, 0x87, 0xfffffffffffffffd, 0x5, 0x15}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x800, 0x3, 0xd6, 0x34, 0x2}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x5, 0x24c, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={[], [], @broadcast}, @empty, [0xff, 0xffffff00, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'bcsf0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x5, 0x6, 0x36}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@inet=@ecn={0x28, 'ecn\x00', 0x0, {0x20, 0x10, 0x100000001, 0xc0}}, @common=@mh={0x28, 'mh\x00', 0x0, {0xfcfb, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x80000000, 0x1f, 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) getresgid(&(0x7f0000001b40), &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_mount_image$hfs(&(0x7f0000001980)='hfs\x00', &(0x7f00000019c0)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000001b00)=[{&(0x7f0000001a00)="99ab48d8692c09f0ac26b0a4ae842409386b99c57867cfb673ac3c2c2093af820defdb7655ae5c5de21f", 0x2a, 0xa1cb}, {&(0x7f0000001a40)="f41d26d7e381beae5444f8860ad554f662d11270a339b5472c9b2e7026fa1eff5c0f50a945f77fb2e4ddb352c97f2a97e094b8e72980e0a1cacace6d95e9449941fd1f31a8f233a7aa61f411736f1ce921a1f7a58a75fd3cb7e482ef54c72d71b7c5f2758229b9ce2285f44497014ca5645e8398dd40940b369f52c740fa8b8552afe8d5912d24", 0x87, 0x3}], 0x4000, &(0x7f0000001c00)={[{@codepage={'codepage', 0x3d, 'cp949'}}, {@file_umask={'file_umask', 0x3d, 0x8}}, {@gid={'gid', 0x3d, r4}}], [{@subj_type={'subj_type', 0x3d, "297573657227294015286367726f7570215d2d70726f636b657972696e67"}}, {@subj_type={'subj_type', 0x3d, 'vmnet0[wlan0'}}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat', 0x3d, 'wlan1mime_type\'$procwlan0\'user#!lo)'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-]'}}]}) [ 209.170398] IPVS: ftp: loaded support on port[0] = 21 04:37:27 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001340)='/dev/zero\x00', 0x941, 0x0) getpeername$packet(r0, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000013c0)=0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001400)={r0, r0, 0xf, 0x2}, 0x10) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x9) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000001440)={0xe, 0x7, 0x7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001500)={0x0, 0x0}, &(0x7f0000001540)=0xc) mount$overlay(0x0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='overlay\x00', 0x2004, &(0x7f0000001580)={[{@metacopy_on='metacopy=on'}, {@metacopy_off='metacopy=off'}], [{@smackfsdef={'smackfsdef', 0x3d, 'locpusetselinux^ppp1selinux'}}, {@subj_role={'subj_role', 0x3d, '/dev/zero\x00'}}, {@dont_appraise='dont_appraise'}, {@context={'context', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@fowner_eq={'fowner', 0x3d, r1}}]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001640)='/dev/null\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000001680)={0x12a9, 0x5, 0x0, [{0x1, 0x2, 0x3, 0x7, 0x3, 0x4, 0x1f2}, {0x1, 0xffff, 0x7, 0x37, 0x7, 0x84e, 0x708}, {0x0, 0x80000001, 0x30, 0x7, 0x9, 0x76f, 0x2}, {0x101, 0x4, 0xff, 0x3, 0x72d, 0xfffffffffffffffa, 0x1}, {0x3, 0x0, 0x1c, 0x636e, 0x3ff, 0x7, 0x7}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001800)={0x0, 0x1f, 0x20}, &(0x7f0000001840)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001880)={r3}, &(0x7f00000018c0)=0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='/dev/zero\x00', r2}, 0x10) r5 = accept4$llc(r0, &(0x7f0000001980)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000019c0)=0x10, 0x0) r6 = accept4$unix(r2, &(0x7f0000001a00)=@abs, &(0x7f0000001a80)=0x6e, 0x80800) r7 = openat$cgroup(r0, &(0x7f0000001ac0)='syz0\x00', 0x200002, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000001b00)=0x5) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001b40)={r6}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/zero\x00', 0x200, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000001bc0)={0x6e1, 0x1088}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c80)={0x9, &(0x7f0000001c00)=[{0x6, 0x100000000, 0x9, 0xfe}, {0x3, 0x7, 0x10001, 0x5}, {0x8, 0xe9fb, 0x70e, 0x3}, {0x0, 0x8, 0x2e, 0x3}, {0x40b, 0x6, 0xa9, 0x2}, {0xff, 0x4, 0x7, 0x7}, {0x8000, 0x800, 0x9, 0x1}, {0x3, 0x6, 0x943b, 0xfffffffffffff8c1}, {0x0, 0x8, 0xfffffffffffffff9, 0x5}]}, 0x10) epoll_wait(r0, &(0x7f0000001cc0)=[{}, {}, {}], 0x3, 0x3f7e000) fchdir(r4) chroot(&(0x7f0000001d00)='./file0\x00') r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001d40)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TIOCEXCL(r4, 0x540c) io_setup(0x6, &(0x7f0000001d80)=0x0) io_submit(r10, 0x8, &(0x7f0000002540)=[&(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x2, 0x9, r9, &(0x7f0000001dc0)="25096a24392c89fcd22dc6173c91b64171bccbdc364c1f8e3a61a2febb36531c058b0665cc576403ca82ba6cf6ff8a65388519162ef2e3b4b3023bb549b640d978fba064092327a585d149a9d43d60617042fe757bbdb1449b80d5151f6d1ea82c1ad260e7c27f94d5bc0eef4429a1aac5589f253b4a9d8cb74431680305124e5310c4789b5bdadc0c222f1ca5c4d1862d57ebefe8d0a8e5cc7f5d7eb1e6594ff4b4bfb65516e9477dd167e5e0094b6a7742f2df05a170eb8bc6a1b394550e7da50082fe3742937121478b432eddd331ba436a902a3a21dab269c22ca80453", 0xdf, 0xf285, 0x0, 0x3, r8}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000001f00)="b8f5a8e9205f04572927c7208a535fb2ed50b131a1df3e9005669f50f38a07e1e3c86fc3e34bf33610e86f5cec0c0e9e7a98d2642107f7a3c23f3eb3", 0x3c, 0x7, 0x0, 0x0, r2}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0xe, 0x8, r5, &(0x7f0000001f80)="8cb68bc3b0d4b396a1a59652768741d5938806a1d238efc258d9c7e4467fe634c1b64408de88d72869bb3770f4ec2bce71ae2edaa08fd917c3b614b0cb81e05efdff0bf63e1fb482340b55a56f35bfd25b61cd3cc13bc40a01771f9308b24aec01140b74c202656a37cc392812cb7904f26e18ecef275fcfc3a4250de0d40d2268f486fc56fdcf1fa27d155f46dcaa9e086389", 0x93, 0x9, 0x0, 0x3, r0}, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x5, 0x80, r5, &(0x7f0000002080)="5991ff8fd90c330b5749487f3bb323a545798df15beb7224e7bf41ee3011ecf64fa127b8eeac81d18392e112f668c72335b88172cf25a4f4430ef37bba9e141d587c07de67fd293e5546be85edbf90503679ca874df9ac8a4e160d38b0b7d488352b3a", 0x63, 0x20000000000000, 0x0, 0x0, r8}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000002140)="bbf3e9249dd7305f579d6ced433498e9e50d225a469f42fcec0403c465d34e0f8ed5ce7a127b6de4be6d1b1ebad046482fbd5626b509d1f798f8627120ff453e1b148f7afa3cf728", 0x48, 0x890, 0x0, 0x3}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0xf, 0x101, r8, &(0x7f0000002200)="1d94db86e372c2b5d0fc03e3dd5663e6f03aaba5c342449cc95a083b0b43e7b033c5fed4c01bec3c4b2f8b277154f9091512a80cf9419b0d931ecbec11b14495bdd89bf6edc47e966da5690b5046bf38bb98e3cd9c7a32df4da068b62f5434826d0097366809775a24acb3498a39aa3d22de0650888479eb38f57959699f9950f51220e0f857052730bbf7f81825c29efe8619ad88f754f32f15b7e2f613d735f3e353f7b0f3094b8086b3b8adbd2783d2808c0a", 0xb4, 0x1, 0x0, 0x3, r8}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x1, 0x7f8f, r5, &(0x7f0000002300)="4ede954514affc43aa1d6726f3ed8e04c3d20df8b91afe2d32364d1873796828decb8e93545f9357677317c1bfd577b91003f472d29a228594a129f1bd2b7109592f31a1194013bc6cd81d9b5220914f3c28880066a6abe7d26310b23c0f6800f0752766b4b7fe819ba09ac9eb1c6fae161409669c55f30d5bf4626fa9d8bec894a416d9f3c3", 0x86, 0x3, 0x0, 0x2, r0}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x7, 0x8589, r9, &(0x7f0000002400)="590b1571a2ca7c658343ecde3d13781dd447332d8da1bc40dc0081ff0a1784313e8740e2e861c7e3c95ec848e3bd2935a392826a45fe0b96ecaee28fda51379778b083b8e27ea86b91742c450949123f03687b5a251575f23c21caddfe950a6504640768efda93088737e147c9a8d4fcad49c8865838d544fc855ed99c8f50ad8e282092b76e6f1c8223f3b811b536140e9c65e9e57c5093a704c2e9dab625cfed5cd56a8488028ff921673a89d86a1558cfd7d079eb1e830f088494a1e7a45f334ca4c7a03a048a9df87b285225f0113fd2b9d38fc8f9733968591d908dd667c45ecf42250187729dad24", 0xeb, 0x2, 0x0, 0x1e3637f462f4a7c2, r8}]) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002580)=@assoc_value, &(0x7f00000025c0)=0x8) [ 209.565147] IPVS: ftp: loaded support on port[0] = 21 04:37:27 executing program 4: r0 = mq_open(&(0x7f0000000000)="b800", 0x0, 0x9a, &(0x7f0000000040)={0xff, 0x0, 0x8, 0x9, 0x3ff, 0x3f, 0x4, 0x5}) flock(r0, 0x8) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x81, 0x6, 0x4, 0x6, 0xe, 0x0, 0x98, 0x1000, 0x7164, 0x5}, 0xb) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x8000, 0x1, [0x3ff]}, &(0x7f0000000140)=0xa) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r3, 0x4}, &(0x7f00000001c0)=0x8) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x3) r6 = memfd_create(&(0x7f0000000280)="b800", 0x3) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x1}, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000300)={0xf1, 0x40, 0x1, "c63c6153635e771df5c5a072bd981e7efce180b2c6b33a09d826078a6414a2cd069abf788baf9c6a9111c81fc6e91df4399450f402e952d07ccf060e00a16b19ebb5dc3bdd6a739c0b111859c81d83612ad674f916a08ed746c80727e415748ccab9a8a7ef19bbf36a9e80051f2493cad979ac6f5a4626a285e12ccef03d04cc50b508d3c2a6d03de6e564bd686c705023e5e334b078b5b6b52ddda7414462162c7fba1547d17baeafbaa0d423ae58cb22e83f9115aee455643dfba6a507312ae56bf1ef264521eaf9b126d9b772be2012fc4d3eed21e2608a621e71fdfcbaeb9a01344a7da87afbc316ab17326cf9467c"}) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8910, &(0x7f0000000400)=@req) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0xc14d, @mcast2, 0x1000}, 0x1c) setuid(r5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={r3, 0xd04, 0x8}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000540)={r9, 0x9f5c}, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000600)={r4, 0x9}, 0x8) write(r2, &(0x7f0000000640)="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", 0xff) ioctl$int_in(r7, 0x5421, &(0x7f0000000740)=0x2) syz_mount_image$f2fs(&(0x7f0000000780)='f2fs\x00', &(0x7f00000007c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000000c80)=[{&(0x7f0000000800)="b59e9c27de30f986d6cc5eefa6f1bc873f4cca20637fbb856ea2016feaf04dcaec8e28517dec29a1d7d02b1c1de77e8c6884b63baea66252", 0x38, 0xa344}, {&(0x7f0000000840)="7d0ea5fffea6954f0055afa4551d6b36d2b0193bc909bbac12d7f4fb49e3ad801233acf8669536b899eff444cee68a14aeb909758e5eff1d67f5d2190a59692675d9f6c8434494bd52aa08805714c145434175e61caa4319c53b165f6f8569d15119bc012d77a4120568bf1edb3ed639f5b38e8243c7f79c5197e65a355d01ce754bff31d4e5bb97d3583ffa3023a02ff6b385accb40ebfb3f4a1675251f99d1", 0xa0, 0x1ff}, {&(0x7f0000000900)="8b521611f71f", 0x6, 0x3}, {&(0x7f0000000940)="98d03099b03a7f35ab0c0a1625b2bca643091fa91328c1bf556a7094c382089255e49f709b6f48d4adcbc285f4bd1318e41ec6a0929e401524c9339b31e5b9a94ac1eee63cae45239c9f6a8d7c468ef6aeacfbc9ba209caf5c7d7ddc3c854f743895f8d97c9474140de6466f22d80e071d5a83bcf7a85bb1c0cc7a3ea2ef2b7373498b1ec4b9d183b13e4a3ca83328a5e9497205505ab392e8402725a7dc8fbc904fbfe18877baf2a5", 0xa9, 0x3}, {&(0x7f0000000a00)="6dec614bb42474b33eb86aa35490ac570aa2929e77c50725527b1ba76075353b4891eace053bc0de77ffa122e231ad0481e1b257008accdf6f92538775e8420f6687862fe5aff40cae951919d53dc5594919c4a82cca77796a949497656d9742", 0x60, 0x2}, {&(0x7f0000000a80)="247e7ca224ca24e91c8597c3f905ee96cac28f5fcaacc788137e5364fc051e2457f74fefae3bc95f49a08feb6838f466cd307136eb338bf918516f75bf8864e90e775d3e04de0ad650fa9302337f58bcc38d8c7704b208e43e1a29518019c85f94788da1ccddc4d97ef10da84ea885d1ac2eacf51b16731b48905ac7188749700d3158a19d14ac15d8311aea57a4f8fb30a08e3f", 0x94, 0xe91}, {&(0x7f0000000b40)="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", 0xff, 0xffffffff00000001}, {&(0x7f0000000c40)="b163240a1a70a97308bb73e92ec665c5e8e57bbb1ddf538a136452", 0x1b, 0x6b}], 0x10, &(0x7f0000000d40)={[{@usrjquota={'usrjquota', 0x3d, "b800"}}, {@extent_cache='extent_cache'}, {@lfs_mode='mode=lfs'}, {@four_active_logs='active_logs=4'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x35, 0x67, 0x32, 0x35, 0x77, 0x0, 0x33], 0x2d, [0x77, 0x3d, 0x3d, 0x38], 0x2d, [0x38, 0x61, 0x61, 0x62], 0x2d, [0x31, 0x37, 0x37, 0x77], 0x2d, [0x7d, 0x35, 0x77, 0x40469b7f647cb3d6, 0x32, 0x3d, 0x31, 0x62]}}}, {@pcr={'pcr', 0x3d, 0x2c}}, {@euid_gt={'euid>', r5}}, {@uid_lt={'uid<', r5}}]}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000e00)=0x9) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) socketpair(0xa, 0xf, 0xfffffffffffffffa, &(0x7f0000000ec0)) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/vhci\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000f40)={r4, @in6={{0xa, 0x4e22, 0x6, @loopback, 0x400}}, 0x81, 0x100000000, 0xf2, 0x0, 0x4}, &(0x7f0000001000)=0x98) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000001040)={'filter\x00', 0x4}, 0x68) [ 209.947009] IPVS: ftp: loaded support on port[0] = 21 [ 209.948859] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.963600] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.972711] device bridge_slave_0 entered promiscuous mode [ 210.042759] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.049197] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.056991] device bridge_slave_1 entered promiscuous mode [ 210.159222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 210.206781] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.234482] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.254855] device bridge_slave_0 entered promiscuous mode [ 210.270615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 04:37:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xa, 0x0, 0xffffffffffffcec0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20000, 0x0) write$P9_RFSYNC(r1, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) recvfrom$inet6(r1, &(0x7f0000000140)=""/7, 0x7, 0x1, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @ipv4={[], [], @multicast2}, 0xf5}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x1, 0x4, 0x400, 0x8, 0x7f}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x2df8}, &(0x7f0000000300)=0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) sync_file_range(r0, 0xd04, 0x1ff, 0x1) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0xf4f) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={r3, 0xbf, 0x0, 0x3, 0x3ff, 0x8}, &(0x7f0000000400)=0x14) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xb) truncate(&(0x7f0000000440)='./file0\x00', 0x7f) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000480)={r3, 0x4000000000000000}, 0x8) r5 = semget(0x2, 0x0, 0x20) semctl$IPC_INFO(r5, 0x0, 0x3, &(0x7f00000004c0)=""/174) close(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000840)=0xe8) recvfrom$packet(r1, &(0x7f0000000580)=""/94, 0x5e, 0x10000, &(0x7f0000000880)={0x11, 0x2, r6, 0x1, 0x9, 0x6, @remote}, 0x14) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000008c0)={0x800}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000900)) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_genetlink_get_family_id$fou(&(0x7f0000000940)='fou\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='trusted.overlay.opaque\x00', &(0x7f0000000a00)='y\x00', 0x2, 0x1) fchmod(r1, 0x80) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000a40)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000a80)=0xff, 0x8) [ 210.348821] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.362047] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.382042] device bridge_slave_1 entered promiscuous mode [ 210.489284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 210.558676] IPVS: ftp: loaded support on port[0] = 21 [ 210.605423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 210.618559] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.721014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.865775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 210.877185] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.899606] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.906819] device bridge_slave_0 entered promiscuous mode [ 210.914308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.930207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.939071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 210.972208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.004324] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.020142] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.027309] device bridge_slave_1 entered promiscuous mode [ 211.039442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.127574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.217592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 211.311188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.329890] team0: Port device team_slave_0 added [ 211.356146] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.368401] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.377740] device bridge_slave_0 entered promiscuous mode [ 211.450714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.458858] team0: Port device team_slave_1 added [ 211.477700] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.485150] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.494019] device bridge_slave_1 entered promiscuous mode [ 211.525382] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.580172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 211.587030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.597126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.623778] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.649857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.658994] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.673215] team0: Port device team_slave_0 added [ 211.689877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.696738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.712391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.731748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 211.768637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 211.780886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.797826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 211.846629] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.855130] team0: Port device team_slave_1 added [ 211.860949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.874776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.884947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.901949] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.946891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.966075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.974877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.988580] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.995235] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.002281] device bridge_slave_0 entered promiscuous mode [ 212.011442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.041093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.052396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.108581] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.129710] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.136905] device bridge_slave_1 entered promiscuous mode [ 212.165810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 212.174547] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.193008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.210467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.237362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.280811] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.290649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.310083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.317700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.340390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.358388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.370159] team0: Port device team_slave_0 added [ 212.385826] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.395210] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.411185] device bridge_slave_0 entered promiscuous mode [ 212.427301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 212.453557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.480483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.499746] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.507035] team0: Port device team_slave_1 added [ 212.542786] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.560067] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.567302] device bridge_slave_1 entered promiscuous mode [ 212.611743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.623472] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.653407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.676748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.697742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.723449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 212.745557] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.764989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.776581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.802078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.812165] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.819441] team0: Port device team_slave_0 added [ 212.841277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.855656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.874756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.893380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 212.914003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.931577] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.950241] team0: Port device team_slave_1 added [ 212.997633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 213.005302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.017229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 213.037745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.048891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.082006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.120732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.161382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.234458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.260052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.275045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.295981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.308439] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 213.317188] team0: Port device team_slave_0 added [ 213.332540] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.338921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.345609] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.351988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.367718] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 213.374302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 213.397751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.413045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.431966] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 213.439248] team0: Port device team_slave_1 added [ 213.560747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.589955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.688932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.696597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.715858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.739723] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.746100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.752758] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.759110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.766550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 213.794152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.810604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.825034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.899841] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 213.912017] team0: Port device team_slave_0 added [ 213.923320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 213.938417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.947939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.040097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.054038] team0: Port device team_slave_1 added [ 214.160612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.230201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.271094] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.277490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.284166] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.290549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.307344] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.316913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.336380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.350329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.440531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.447663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.460199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.482647] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.489044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.495707] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.502086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.510602] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.611057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.618193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.644121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.232202] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.238605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.245300] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.251688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.269299] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 215.592362] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.598760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.605429] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.611807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.625521] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 215.640122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.653232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.272049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.670304] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.879812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.053228] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 218.059376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.067828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.248091] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.301312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.371554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.449085] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.653453] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 218.666661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.680670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.700215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.745093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.857389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.987399] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.004030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.012630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.054395] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.116255] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.130632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.137610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.190861] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.335183] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.527313] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.533839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.542603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.561459] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.669911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.883823] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.070621] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.479250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.489994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.504066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.841069] 8021q: adding VLAN 0 to HW filter on device team0 04:37:38 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000000)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)=""/180, 0x34000}], 0x1, &(0x7f0000000400)=""/213, 0xd5}}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) 04:37:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 221.177227] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:37:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000800)) [ 221.311114] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 221.369604] EXT4-fs (loop0): group descriptors corrupted! 04:37:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffffef7f12b685d5941b0000fa03ff3b1a45cd202e602ec519a0fd6102ad0b6ced7971b0e49fc831cebf38b7da34e4538444e412c0e21e3730ba8d45074b7d1792ced134b8901862f76887add7fc1200000000f91f65b62ecf46ba42"], 0x62}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x400000000000306, 0x200002, &(0x7f0000000c40)={0x77359400}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004f80)='/dev/rtc0\x00', 0x2, 0x0) getpeername$packet(r1, &(0x7f0000004fc0), &(0x7f0000005000)=0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004ec0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004cc0)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f00000050c0)=""/113, 0x71}], 0x4, &(0x7f0000000400)=""/23, 0x17, 0x800}, 0xffffffff}, {{&(0x7f0000000440)=@un=@abs, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/117, 0x75}, {&(0x7f0000000540)=""/18, 0x12}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x3, &(0x7f00000005c0)=""/163, 0xa3, 0x6839}, 0xffffffff}, {{&(0x7f0000000680)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/131, 0x83}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/193, 0xc1}], 0x3, &(0x7f0000000a00)=""/11, 0xb, 0x80000000}, 0x8001}, {{&(0x7f0000000a40)=@nfc_llcp, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000ac0)=""/248, 0xf8}, {&(0x7f0000000bc0)=""/27, 0x1b}, {&(0x7f0000001c80)=""/239, 0xef}, {&(0x7f0000000c00)}], 0x4, &(0x7f0000001dc0)=""/65, 0x41, 0x5}}, {{&(0x7f0000001e40), 0x80, &(0x7f0000003040)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/101, 0x65}, {&(0x7f0000002f40)=""/215, 0xd7}], 0x3, &(0x7f0000003080)=""/200, 0xc8, 0x38f987c6}, 0xfff}, {{&(0x7f0000003180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004500)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/137, 0x89}, {&(0x7f00000042c0)=""/222, 0xde}, {&(0x7f00000043c0)=""/44, 0x2c}, {&(0x7f0000004400)=""/5, 0x5}, {&(0x7f0000004440)=""/157, 0x9d}], 0x6, &(0x7f0000004580)=""/200, 0xc8, 0x8}, 0xbf45}, {{&(0x7f0000004680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004700)=""/222, 0xde}], 0x1, &(0x7f0000004840)=""/152, 0x98}}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004900)=""/173, 0xad}, {&(0x7f00000049c0)=""/149, 0x95}, {&(0x7f0000004a80)=""/209, 0xd1}], 0x3, &(0x7f0000004bc0)=""/238, 0xee, 0x931}, 0x8}], 0x8, 0x10000, &(0x7f0000004f00)={r3, r4+10000000}) pipe2(&(0x7f0000004f40), 0xfffffffffffffffd) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000c00)={r5, @multicast2, @multicast2}, 0xc) clock_gettime(0x7, &(0x7f0000005080)) [ 221.460166] hrtimer: interrupt took 23700 ns [ 221.547419] kvm: emulating exchange as write 04:37:39 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x140) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x401}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB], @ANYRESHEX, @ANYRES64]], &(0x7f0000000380)=0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:37:39 executing program 0: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000000)={0x800000, 0xfffffffffff7fffd}) ioprio_set$pid(0x2, 0x0, 0x0) 04:37:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00jq']) [ 221.708866] *** Guest State *** [ 221.744242] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 221.744250] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure 04:37:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @local}}) dup3(r0, r1, 0x0) 04:37:39 executing program 1: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000280), &(0x7f0000000300)=""/153}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f00000000c0)="904becde7dc47fd9e3661de972b932c4b4f57c787ac4a036e123899e46cbcff2229e8e309e98970fb73ae0f128d954731a05704ceedc63495910367de777bb18425d9583aac3909afbbc5cd79267227032b926e9a92b3e54e377051da9676ec8d216b126b75dff7b0498c950b1fe73a77809b06c22844c0a6a0022fb1f330c6112234df67ae1d9e5a4bb3b8ff8b11663dcdef48ee63e260e923100a10344f922b823c138e642447c168ddbdd8e62a1f0aa31d9668fbc7b5cae7d5fccaf", &(0x7f0000000240)=""/160}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x100000000) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = accept4(r3, 0x0, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000580)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={0x0, 0x0, 0xde3}, 0xc) [ 221.800954] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 221.822223] CR3 = 0x0000000000000000 [ 221.832718] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 221.880623] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 221.896411] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 221.932757] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 221.955101] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 221.963478] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 221.971978] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 04:37:39 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="eed41cdee98d85b195e0438a502545427688587f5fbd8d43bef1adbf584bb93cee419e808a5f9c87b746ef0b132d57652dcfd42aa58cc08eb6abf218d40bb723181e8e98dc22404a5fc13255e1e44aec1e"]]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 221.993256] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.024266] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.052817] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 222.077714] *** Guest State *** [ 222.082188] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 222.095181] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 222.110487] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 222.121180] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 222.131965] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 222.150249] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 222.156823] CR3 = 0x0000000000000000 [ 222.162698] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 222.168831] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 222.180914] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 222.199744] Interruptibility = 00000000 ActivityState = 00000000 [ 222.207283] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 222.218552] *** Host State *** [ 222.230210] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 222.239968] RIP = 0xffffffff81212b2e RSP = 0xffff880186437350 [ 222.243087] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.254779] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.260731] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 222.273856] FSBase=00007f6118170700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 222.284131] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.285995] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 222.296938] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.306600] CR0=0000000080050033 CR3=00000001c310c000 CR4=00000000001426f0 [ 222.314320] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.324342] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 222.331137] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 222.331166] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 222.331180] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 222.347745] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 222.363433] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 222.369944] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 222.383565] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.391942] *** Control State *** [ 222.395571] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 222.407521] Interruptibility = 00000000 ActivityState = 00000000 [ 222.407633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.422100] *** Host State *** [ 222.423777] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 222.428786] RIP = 0xffffffff81212b2e RSP = 0xffff88018627f350 [ 222.438801] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 222.443900] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.452432] FSBase=00007f2002962700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 222.453087] EntryControls=0000d1ff ExitControls=002fefff [ 222.463418] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 222.471175] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 222.475348] CR0=0000000080050033 CR3=00000001c5823000 CR4=00000000001426f0 [ 222.486435] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 222.490095] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 222.493336] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 222.501401] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.506295] *** Control State *** [ 222.517469] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 222.517989] VMEntry: intr_info=800000cf errcode=00000000 ilen=00000000 [ 222.531426] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.538969] EntryControls=0000d1ff ExitControls=002fefff [ 222.544689] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 222.550043] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 222.558321] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.565543] reason=80000021 qualification=0000000000000000 [ 222.565550] IDTVectoring: info=00000000 errcode=00000000 [ 222.565556] TSC Offset = 0xffffff8754435b43 [ 222.565567] TPR Threshold = 0x00 [ 222.573559] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 222.588529] VMEntry: intr_info=800000a4 errcode=00000000 ilen=00000000 [ 222.600060] EPT pointer = 0x00000001c606601e [ 222.604625] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 222.615310] reason=80000021 qualification=0000000000000000 [ 222.623932] IDTVectoring: info=00000000 errcode=00000000 [ 222.629713] TSC Offset = 0xffffff8720f6441f [ 222.635121] TPR Threshold = 0x00 [ 222.641000] EPT pointer = 0x00000001c8eda01e [ 222.654426] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.670181] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 04:37:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000ac0)={&(0x7f0000000b40), 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x5, 0x1}]}}}]}, 0x36e}}, 0x0) [ 222.722731] *** Guest State *** [ 222.726051] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 222.760207] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 222.769076] CR3 = 0x0000000000000000 [ 222.769086] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 222.769098] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 222.769120] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 222.787481] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 222.799933] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 222.807577] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.816526] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.832221] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.843992] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.862130] Unknown ioctl 21531 [ 222.865926] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 222.877642] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 222.878451] Unknown ioctl 1074025828 [ 222.896504] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 222.901164] Unknown ioctl 44801 [ 222.907305] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 222.909428] Unknown ioctl 1074025833 [ 222.920375] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 222.928428] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 222.930561] Unknown ioctl 21531 [ 222.937568] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 222.938993] Unknown ioctl 1074025828 [ 222.945811] Interruptibility = 00000000 ActivityState = 00000000 [ 222.950018] Unknown ioctl 44801 [ 222.956117] *** Host State *** [ 222.959260] Unknown ioctl 1074025833 [ 222.962315] RIP = 0xffffffff81212b2e RSP = 0xffff88018a96f350 04:37:40 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400), 0x0, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"000000000000000000e9dc00", 0x200082}) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') 04:37:40 executing program 2: r0 = socket$kcm(0xa, 0x40122000000003, 0x11) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0xfd7c) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)="f4001100002b2c25e994efd18498d6623abaa68754a3ffffff8002000000000000000000000000003a00000000000000c00195c1e2d4f3", 0x37}], 0x1}, 0x0) 04:37:40 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={r1}, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept$alg(r0, 0x0, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000001080)=""/4096) sendmsg$alg(r2, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) 04:37:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f00000002c0)=0x14) 04:37:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x7fffffff}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r2, r3}, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept$alg(r0, 0x0, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000001080)=""/4096) sendmsg$alg(r4, &(0x7f00000004c0)={0x8000000000000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) [ 222.972390] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 222.979067] FSBase=00007f2002940700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 04:37:40 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002000010000000000000000000a0000000000cea90000000000000000"], 0x1}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 04:37:40 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000003c0)={0x1, 0x0, [{0x7ff}]}) [ 223.042885] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 223.060669] CR0=0000000080050033 CR3=00000001c5823000 CR4=00000000001426e0 [ 223.089425] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 223.133027] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 223.155238] *** Control State *** [ 223.169824] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 04:37:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f00000000c0)={"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"}) [ 223.203927] EntryControls=0000d1ff ExitControls=002fefff [ 223.222929] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 223.270718] VMEntry: intr_info=800000a4 errcode=00000000 ilen=00000000 [ 223.308755] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 223.346980] reason=80000021 qualification=0000000000000000 [ 223.385530] IDTVectoring: info=00000000 errcode=00000000 [ 223.416503] TSC Offset = 0xffffff8720f6441f 04:37:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}}, 0xfe38) [ 223.438912] TPR Threshold = 0x00 04:37:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="6bae12ae00b880008ec8f30f2353660f6fea670f0fcfb6ba4200ec64f40f06ba420066b8df1301dc66efbad10466b8ca00000066ef", 0x35}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) shmat(r3, &(0x7f000001d000/0x1000)=nil, 0x4000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x3f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:37:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 223.470323] EPT pointer = 0x00000001c8eda01e 04:37:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x8, 0x8, 0x5, 0x4, 0x9, 0x81, 0x4, 0x0, 0x2, 0xf9}) msgget$private(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 223.535538] vhci_hcd: invalid port number 0 04:37:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) 04:37:41 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000200)="2f646576bd062f6e756c6c623001bae20811b3cb04f949592fa0f6b6c0f9b4bb1563323248c938472c73e8a6ca2008e3d1fb02d7c59c4cea1a1faf14e3230421a506762c97000000000000000000000000000000") [ 223.597356] *** Guest State *** [ 223.613979] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 04:37:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 223.643647] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 223.649350] hfsplus: unable to parse mount options [ 223.672010] hfsplus: unable to parse mount options [ 223.688816] CR3 = 0x0000000000000000 [ 223.696424] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 223.705850] RSP = 0x0000000000000f80 RIP = 0x0000000000000045 [ 223.714489] EXT4-fs (loop2): group descriptors corrupted! [ 223.721204] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 223.731893] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 223.749360] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 223.784753] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 223.795315] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 223.797137] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 223.822135] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 223.849602] SS: sel=0x0000, attr=0x00085, limit=0x00000000, base=0x0000000000000000 [ 223.864861] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 223.873246] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 223.885586] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 04:37:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@ipv4}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, 0xe8) 04:37:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r2, &(0x7f00000004c0)={@val, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}, @gre}}, 0x66) close(r1) 04:37:41 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x7) 04:37:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x8, 0x8, 0x5, 0x4, 0x9, 0x81, 0x4, 0x0, 0x2, 0xf9}) msgget$private(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 223.900112] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 223.908472] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 223.925885] GDTR: limit=0x00000000, base=0x0000000000000000 [ 223.946217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.946389] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 223.953215] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 223.959366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.968187] IDTR: limit=0x00000000, base=0x0000000000000000 04:37:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 04:37:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 224.004822] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 224.013649] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 224.020388] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 224.033485] Interruptibility = 00000000 ActivityState = 00000000 [ 224.042701] *** Host State *** [ 224.064957] RIP = 0xffffffff81212b2e RSP = 0xffff880183fcf350 [ 224.085788] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 224.127718] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 224.130805] FSBase=00007f74471ef700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 224.159745] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 224.165983] CR0=0000000080050033 CR3=00000001b911c000 CR4=00000000001426e0 [ 224.176886] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 224.189630] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 224.204107] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 224.217890] EXT4-fs (loop2): group descriptors corrupted! [ 224.228543] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 224.237797] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 224.244548] *** Control State *** [ 224.248197] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 224.260164] EntryControls=0000d1ff ExitControls=002fefff [ 224.268597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.275326] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 224.284100] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 224.308202] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 224.325086] reason=80000021 qualification=0000000000000000 [ 224.342640] IDTVectoring: info=00000000 errcode=00000000 [ 224.366694] TSC Offset = 0xffffff865292e815 [ 224.383558] EPT pointer = 0x00000001c506001e [ 224.388977] *** Guest State *** [ 224.392605] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 224.402859] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 224.402871] CR3 = 0x0000000000000000 [ 224.415476] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 224.415487] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 224.415502] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 224.415518] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 224.427924] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 224.427944] SS: sel=0x0000, attr=0x00085, limit=0x00000000, base=0x0000000000000000 [ 224.427959] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 224.442810] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 224.467884] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 224.467899] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 224.467921] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 224.484534] IDTR: limit=0x00000000, base=0x0000000000000000 [ 224.504288] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 224.517824] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 224.524751] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 224.532368] Interruptibility = 00000000 ActivityState = 00000000 [ 224.538600] *** Host State *** [ 224.542395] RIP = 0xffffffff81212b2e RSP = 0xffff880183fcf350 [ 224.548368] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 224.555008] FSBase=00007f74471ef700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 224.562847] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 224.568731] CR0=0000000080050033 CR3=00000001b911c000 CR4=00000000001426f0 [ 224.575782] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 224.582487] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 224.588543] *** Control State *** [ 224.592041] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 224.598709] EntryControls=0000d1ff ExitControls=002fefff [ 224.604211] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 224.611168] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 224.617819] VMExit: intr_info=00000000 errcode=00000000 ilen=00000005 [ 224.624450] reason=80000021 qualification=0000000000000000 04:37:42 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x80c0) 04:37:42 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x4000000) 04:37:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r3, &(0x7f00000004c0)={@val, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}, @gre}}, 0x66) dup2(r2, r3) close(r1) 04:37:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x8, 0x8, 0x5, 0x4, 0x9, 0x81, 0x4, 0x0, 0x2, 0xf9}) msgget$private(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:37:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x541b, &(0x7f0000000040)) [ 224.632136] IDTVectoring: info=00000000 errcode=00000000 [ 224.639061] TSC Offset = 0xffffff865292e815 [ 224.644648] EPT pointer = 0x00000001c506001e 04:37:42 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8) [ 224.688495] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk 04:37:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:37:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 224.789067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:37:42 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400), 0x0, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"000000000000000000e9dc00", 0x200082}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/220, 0xdc, 0x1, 0x3, 0x4, 0x800, 0x10001}, 0x120) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') [ 224.829579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.868767] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 04:37:42 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[]) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x7ffff000}], 0x1, 0x0) [ 224.894223] EXT4-fs (loop2): group descriptors corrupted! 04:37:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x8, 0x8, 0x5, 0x4, 0x9, 0x81, 0x4, 0x0, 0x2, 0xf9}) msgget$private(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:37:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 224.997429] ptrace attach of "/root/syz-executor3"[5864] was attempted by "/root/syz-executor3"[7602] [ 225.017233] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 04:37:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) [ 225.096072] EXT4-fs (loop0): group descriptors corrupted! [ 225.127266] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 225.162722] EXT4-fs (loop2): group descriptors corrupted! [ 225.486602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:37:43 executing program 4: mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000700)='+'}) 04:37:43 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) dup3(r0, r1, 0x0) 04:37:43 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x400000085, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x0) 04:37:43 executing program 3: syz_emit_ethernet(0xff58, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 225.709751] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 225.719019] EXT4-fs (loop0): group descriptors corrupted! 04:37:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:37:43 executing program 5: [ 225.791102] binder: 7639:7644 ioctl c0306201 20000140 returned -11 04:37:43 executing program 1: 04:37:43 executing program 3: 04:37:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x8, 0x8, 0x5, 0x0, 0x9, 0x81}) msgget$private(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a}], 0x0, &(0x7f0000000040)) 04:37:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$RTC_WIE_ON(r3, 0x700f) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1, r0}) pipe2(&(0x7f00000001c0), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f0000000540)=0xe8) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 04:37:43 executing program 1: prctl$setname(0xf, &(0x7f0000a9aff2)="6c6f2c70726f635c4750572af493") r0 = msgget$private(0x0, 0x10) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/71) [ 225.961389] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 04:37:43 executing program 3: 04:37:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:43 executing program 3: [ 226.084985] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 04:37:43 executing program 1: [ 226.131569] EXT4-fs (loop0): group descriptors corrupted! [ 226.231335] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 04:37:44 executing program 0: 04:37:44 executing program 3: 04:37:44 executing program 1: 04:37:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 226.348660] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 226.456293] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 226.473497] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 226.543099] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 226.561480] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 226.582939] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000 [ 226.602874] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 226.643773] kvm [7667]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000 [ 226.813701] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 04:37:44 executing program 2: 04:37:44 executing program 1: 04:37:44 executing program 3: 04:37:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:44 executing program 0: 04:37:44 executing program 5: 04:37:44 executing program 1: 04:37:44 executing program 3: 04:37:44 executing program 5: 04:37:44 executing program 0: [ 226.936663] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 04:37:44 executing program 1: 04:37:44 executing program 5: 04:37:44 executing program 2: 04:37:44 executing program 0: 04:37:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[]) 04:37:44 executing program 3: 04:37:44 executing program 1: 04:37:44 executing program 0: 04:37:44 executing program 2: 04:37:44 executing program 5: 04:37:45 executing program 1: 04:37:45 executing program 3: 04:37:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[]) 04:37:45 executing program 2: 04:37:45 executing program 5: 04:37:45 executing program 0: 04:37:45 executing program 3: 04:37:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[]) 04:37:45 executing program 1: 04:37:45 executing program 2: 04:37:45 executing program 5: 04:37:45 executing program 3: 04:37:45 executing program 0: 04:37:45 executing program 1: 04:37:45 executing program 3: 04:37:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB]) 04:37:45 executing program 5: 04:37:45 executing program 0: 04:37:45 executing program 1: 04:37:45 executing program 2: 04:37:45 executing program 3: 04:37:45 executing program 2: 04:37:45 executing program 0: 04:37:45 executing program 3: 04:37:45 executing program 5: 04:37:45 executing program 1: 04:37:45 executing program 1: 04:37:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB]) 04:37:45 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.', 0x2}, &(0x7f0000000280)='syz', 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) 04:37:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 04:37:45 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000280)="d2acc8c4c66900ae51cafe755bf0772f79d98101b89e9823acc7a33cfb3240e6ba6e4cf22b5705d2cbc7b4947b367afa7033170986c7ac72d254e1ca43e82eb54832f90e803a7d25245e8b6b2ba39d564c8bd67571e05a89890740694fc720f20d9b2622fd2f7994b3cd49888e843002a84affb1233d4ff3055f49738ee6c141aa77cb12bb8313c573c2d95206d4844c4646f10e4c1352a7f0b757f5c6343efe1521") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], &(0x7f0000000380)=0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:37:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:45 executing program 3: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{}, 'port0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000040)) [ 227.875761] vhci_hcd: invalid port number 0 04:37:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB]) 04:37:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000004540)=[{{&(0x7f00000007c0)=@rc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000840)=""/115, 0x73}], 0x1, &(0x7f0000001ec0)=""/253, 0xfd}}], 0x1, 0x0, &(0x7f0000004640)={0x77359400}) 04:37:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 227.916507] *** Guest State *** [ 227.927793] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 227.952895] print_req_error: I/O error, dev loop3, sector 0 [ 227.959125] print_req_error: I/O error, dev loop3, sector 1024 04:37:45 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@dev, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "2f6189", 0x14, 0x0, 0x0, @loopback, @loopback, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000440)) [ 227.993474] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 228.040233] vhci_hcd: invalid port number 0 [ 228.045429] CR3 = 0x0000000000000000 [ 228.064014] RSP = 0x0000000000000000 RIP = 0x0000000000000000 04:37:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='da']) 04:37:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:37:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x4000000000001, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 04:37:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000) [ 228.090035] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 228.101016] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 228.107710] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 228.116853] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 228.195097] vhci_hcd: invalid port number 0 [ 228.253567] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 228.339759] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 228.364554] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 228.372767] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 228.381252] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 228.392940] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 228.401513] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 228.409637] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 228.417675] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 228.424214] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 228.431850] Interruptibility = 00000000 ActivityState = 00000000 [ 228.438077] *** Host State *** [ 228.441307] RIP = 0xffffffff81212b2e RSP = 0xffff88017d8ff350 [ 228.447293] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 228.453785] FSBase=00007f74471ef700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 228.461616] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 228.467736] CR0=0000000080050033 CR3=00000001c8911000 CR4=00000000001426e0 [ 228.476008] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 228.482740] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 228.488797] *** Control State *** [ 228.492298] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 228.498959] EntryControls=0000d1ff ExitControls=002fefff [ 228.504455] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 228.512562] VMEntry: intr_info=80000015 errcode=00000000 ilen=00000000 [ 228.519469] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 228.526610] reason=80000021 qualification=0000000000000000 [ 228.532958] IDTVectoring: info=00000000 errcode=00000000 [ 228.538387] TSC Offset = 0xffffff8400f28698 04:37:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000680)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 04:37:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000) 04:37:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x1, &(0x7f0000000000), &(0x7f00000000c0)='syzkaller\x00', 0x9e2f, 0xffcc, &(0x7f00000003c0)=""/135}, 0x48) 04:37:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x74, &(0x7f00000000c0), &(0x7f00000002c0)=0x14) 04:37:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) perf_event_open(&(0x7f0000000a40)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0)) tkill(0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 228.542717] TPR Threshold = 0x00 [ 228.546081] EPT pointer = 0x00000001d7c2a01e 04:37:46 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xfffffffffffffffe, 0x3, @remote, 0x2}, 0x23f) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/240, &(0x7f0000000480)=0xf0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in=@rand_addr, 0x4e21, 0xffff, 0x4e21, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, r2}, {0x4, 0xffffffffffffffff, 0x0, 0x9e3, 0x6a, 0x4, 0x22, 0xe0}, {0x91, 0x0, 0x3, 0x61}, 0x80, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}, {{@in=@remote}, 0x2, @in=@broadcast, 0x3506, 0x1, 0x3, 0x0, 0x81d3}}, 0xe8) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 228.614399] vhci_hcd: invalid port number 0 04:37:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000040)) 04:37:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cf1ee8000090780000"], &(0x7f00000002c0)) 04:37:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@ipv4}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, 0xe8) 04:37:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 228.843957] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 04:37:46 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) [ 229.000011] vhci_hcd: invalid port number 0 04:37:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:37:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:47 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 229.476375] vhci_hcd: invalid port number 0 [ 229.576023] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 229.597437] EXT4-fs (loop0): group descriptors corrupted! [ 229.662401] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 229.671713] EXT4-fs (loop0): group descriptors corrupted! 04:37:47 executing program 4: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300), &(0x7f0000000200)) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', &(0x7f0000000640), &(0x7f0000000440)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000280)) symlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1/../file0\x00') r1 = dup(0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000440), 0x4) ioctl(r1, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 04:37:47 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) 04:37:47 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) clock_nanosleep(0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0) socket$inet6(0xa, 0x0, 0x0) 04:37:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 229.802449] vhci_hcd: invalid port number 0 04:37:47 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7}, 0xff8f) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x40400) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000080)={0x18}, 0x18) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x1000200000000}) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT], 0xfefd) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)) 04:37:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) [ 229.915613] vhci_hcd: invalid port number 0 [ 229.932492] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 229.960187] EXT4-fs (loop0): group descriptors corrupted! 04:37:47 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006780)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000012c0)}], 0x500, 0x0) [ 230.011319] vhci_hcd: invalid port number 0 04:37:48 executing program 3: socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) tgkill(0x0, r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x204006, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b00)=[{&(0x7f0000000a40)="84b8254e54465320202020", 0xb}], 0x0, &(0x7f0000000d80)=ANY=[]) 04:37:48 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:37:48 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, &(0x7f0000000180)) 04:37:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0xd803}) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/117, 0x75}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000480)}}, &(0x7f0000044000)) dup2(r0, r2) dup2(r3, r1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x15) 04:37:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) 04:37:48 executing program 1: socket$inet6(0xa, 0x0, 0x80000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000050000000000000000000000000000000000000000"]) gettid() setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702e6370752f73797a3102", 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x0, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB="0096c25b059690ddd4000800"]) [ 230.787991] vhci_hcd: invalid port number 0 [ 230.795475] __ntfs_error: 3 callbacks suppressed [ 230.795486] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 230.813636] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. 04:37:48 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 230.852589] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 230.859704] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 230.869200] EXT4-fs (loop0): group descriptors corrupted! 04:37:48 executing program 4: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 230.923273] 9pnet: Insufficient options for proto=fd [ 230.937850] vhci_hcd: invalid port number 0 04:37:48 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:37:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:37:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x8905, &(0x7f0000000040)) 04:37:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000280)) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006780)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000012c0)}], 0x500, 0x0) [ 231.151996] block nbd4: Attempted send on invalid socket [ 231.157494] print_req_error: I/O error, dev nbd4, sector 2 [ 231.163296] hfsplus: unable to find HFS+ superblock [ 231.176589] vhci_hcd: invalid port number 0 [ 231.186599] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 04:37:49 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 231.200370] block nbd4: Attempted send on invalid socket [ 231.205865] print_req_error: I/O error, dev nbd4, sector 2 [ 231.212434] EXT4-fs (loop3): group descriptors corrupted! [ 231.212727] hfsplus: unable to find HFS+ superblock 04:37:49 executing program 4: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:49 executing program 1: socket$inet6(0xa, 0x0, 0x80000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000050000000000000000000000000000000000000000"]) gettid() setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702e6370752f73797a3102", 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x0, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB="0096c25b059690ddd4000800"]) [ 231.424410] block nbd4: Attempted send on invalid socket [ 231.430249] print_req_error: I/O error, dev nbd4, sector 2 [ 231.436024] hfsplus: unable to find HFS+ superblock [ 231.443863] vhci_hcd: invalid port number 0 04:37:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) 04:37:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x0, 0x1000}, 0xfffffffffffffc26) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180), 0x6344) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f0000000440)=0x10) 04:37:49 executing program 4: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:49 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x2c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{}, [@alu={0x4}]}, &(0x7f0000001500)='GPL\x00', 0x4, 0x2b7, &(0x7f0000002f19)=""/231}, 0x85) 04:37:49 executing program 4: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:49 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 231.586736] block nbd4: Attempted send on invalid socket [ 231.592320] print_req_error: I/O error, dev nbd4, sector 2 [ 231.598067] hfsplus: unable to find HFS+ superblock [ 231.598696] vhci_hcd: invalid port number 0 04:37:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x8000000000003, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1, &(0x7f0000000000)}, 0x0) 04:37:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="59f103f69e02f58dc063ccc0f05aa52a22475a5d22cc2c0123e8f19d9fe06f7baf18123100353f74df"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 04:37:49 executing program 0: semget$private(0x0, 0x0, 0x2000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x60000, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140)="0000000234a3a0382d686f883e1c11ba5b85f27e", 0x14, 0x0) fchown(r0, 0x0, 0x0) [ 231.708136] vhci_hcd: invalid port number 0 04:37:49 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 231.760584] block nbd4: Attempted send on invalid socket [ 231.766111] print_req_error: I/O error, dev nbd4, sector 2 [ 231.778332] hfsplus: unable to find HFS+ superblock [ 231.834629] vhci_hcd: invalid port number 0 04:37:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x368) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @random="c11daf5bc425"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) [ 231.894041] device veth0_to_bond entered promiscuous mode [ 231.900372] device veth1_to_bridge entered promiscuous mode [ 231.908133] device veth1_to_bridge left promiscuous mode [ 231.913816] device veth0_to_bond left promiscuous mode 04:37:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x101000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)) r1 = socket(0x11, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x89060000]}}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 04:37:50 executing program 4: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) 04:37:50 executing program 0: semget$private(0x0, 0x0, 0x2000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x60000, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140)="0000000234a3a0382d686f883e1c11ba5b85f27e", 0x14, 0x0) fchown(r0, 0x0, 0x0) 04:37:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xfffffdef) 04:37:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:50 executing program 4: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 232.533393] block nbd4: Attempted send on invalid socket [ 232.538892] print_req_error: I/O error, dev nbd4, sector 2 [ 232.545108] vhci_hcd: invalid port number 0 [ 232.548519] hfsplus: unable to find HFS+ superblock 04:37:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:50 executing program 0: 04:37:50 executing program 1: [ 232.680621] vhci_hcd: invalid port number 0 04:37:50 executing program 0: 04:37:50 executing program 4: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 232.822868] block nbd4: Attempted send on invalid socket [ 232.828567] print_req_error: I/O error, dev nbd4, sector 2 [ 232.834449] hfsplus: unable to find HFS+ superblock 04:37:50 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34048}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000320029080000000000000000020000001800000014000100ffffffe5000000000000000000000001"], 0x1}}, 0x0) 04:37:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 233.051431] vhci_hcd: invalid port number 0 04:37:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) memfd_create(&(0x7f0000000100)='}\x00', 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:51 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080048000028000000000000900000000000000000000000000000000000000000000000000000000000"], &(0x7f0000000040)) 04:37:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000001200)=""/4096, 0x85}) 04:37:51 executing program 4: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd'}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:51 executing program 3: 04:37:51 executing program 3: 04:37:51 executing program 4: [ 233.433515] vhci_hcd: invalid port number 0 04:37:51 executing program 1: 04:37:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:51 executing program 3: 04:37:51 executing program 0: 04:37:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) memfd_create(&(0x7f0000000100)='}\x00', 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:51 executing program 4: [ 233.545995] vhci_hcd: invalid port number 0 04:37:51 executing program 3: 04:37:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:51 executing program 1: 04:37:51 executing program 4: 04:37:51 executing program 0: 04:37:51 executing program 3: [ 233.691647] vhci_hcd: invalid port number 0 04:37:51 executing program 1: 04:37:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) memfd_create(&(0x7f0000000100)='}\x00', 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:51 executing program 4: 04:37:51 executing program 0: 04:37:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:51 executing program 3: 04:37:51 executing program 1: 04:37:51 executing program 4: 04:37:51 executing program 3: 04:37:51 executing program 1: 04:37:51 executing program 0: 04:37:51 executing program 4: [ 233.935343] vhci_hcd: invalid port number 0 04:37:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:51 executing program 3: 04:37:51 executing program 1: 04:37:51 executing program 4: 04:37:51 executing program 0: 04:37:51 executing program 3: [ 234.076653] vhci_hcd: invalid port number 0 04:37:51 executing program 1: 04:37:51 executing program 4: 04:37:51 executing program 1: 04:37:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:51 executing program 3: 04:37:52 executing program 1: 04:37:52 executing program 0: 04:37:52 executing program 4: 04:37:52 executing program 3: 04:37:52 executing program 0: [ 234.288174] vhci_hcd: invalid port number 0 04:37:52 executing program 1: 04:37:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:52 executing program 0: 04:37:52 executing program 4: 04:37:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:52 executing program 3: 04:37:52 executing program 4: [ 234.414608] vhci_hcd: invalid port number 0 04:37:52 executing program 1: 04:37:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:52 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000041c0)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@rights={0x20, 0x1, 0x1, [r1, r0, r1]}], 0x20}], 0x1, 0x80c0) 04:37:52 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f00000000c0)=""/121, 0x79}], 0x1, 0x0) 04:37:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:52 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000a9cff8)) epoll_create(0xaa) 04:37:52 executing program 1: socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x802, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000050000000000000000"]) gettid() setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702e6370752f73797a3102", 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x0, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB="0096c25b059690ddd4000800"]) [ 234.543703] ptrace attach of "/root/syz-executor0"[5803] was attempted by "/root/syz-executor0"[8409] [ 234.576876] vhci_hcd: invalid port number 0 04:37:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 234.631482] ptrace attach of "/root/syz-executor0"[5803] was attempted by "/root/syz-executor0"[8423] 04:37:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='f'], 0x1) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 04:37:52 executing program 3 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 234.674793] vhci_hcd: invalid port number 0 04:37:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:52 executing program 4 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 234.812604] FAULT_INJECTION: forcing a failure. [ 234.812604] name failslab, interval 1, probability 0, space 0, times 1 [ 234.832945] CPU: 1 PID: 8438 Comm: syz-executor3 Not tainted 4.19.0-rc7+ #55 [ 234.840179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.840185] Call Trace: [ 234.840213] dump_stack+0x1c4/0x2b4 [ 234.840234] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.840254] ? get_pid_task+0xd6/0x1a0 [ 234.840278] should_fail.cold.4+0xa/0x17 [ 234.840300] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 234.840324] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 234.861043] ? find_vpid+0xf0/0xf0 [ 234.861068] ? __f_unlock_pos+0x19/0x20 [ 234.868990] ? lock_downgrade+0x900/0x900 [ 234.869009] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 234.869024] ? proc_fail_nth_write+0x9e/0x210 [ 234.869040] ? proc_cwd_link+0x1d0/0x1d0 [ 234.879927] ? kasan_check_read+0x11/0x20 [ 234.879945] ? do_raw_spin_unlock+0xa7/0x2f0 [ 234.879966] ? fs_reclaim_acquire+0x20/0x20 [ 234.879985] ? lock_downgrade+0x900/0x900 [ 234.887478] ? ___might_sleep+0x1ed/0x300 [ 234.887496] ? check_preemption_disabled+0x48/0x200 [ 234.887512] ? arch_local_save_flags+0x40/0x40 [ 234.887532] ? fsnotify_first_mark+0x350/0x350 [ 234.897192] ? __fsnotify_parent+0xcc/0x420 [ 234.897210] ? fsnotify+0x12f0/0x12f0 [ 234.897228] __should_failslab+0x124/0x180 [ 234.897245] should_failslab+0x9/0x14 [ 234.905780] __kmalloc_track_caller+0x2d0/0x750 [ 234.905797] ? strncpy_from_user+0x510/0x510 [ 234.905814] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 234.905831] ? strndup_user+0x77/0xd0 [ 234.914366] memdup_user+0x2c/0xa0 [ 234.914381] strndup_user+0x77/0xd0 [ 234.914396] ksys_mount+0x3c/0x140 [ 234.914413] __x64_sys_mount+0xbe/0x150 [ 234.922881] do_syscall_64+0x1b9/0x820 [ 234.922898] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 234.922915] ? syscall_return_slowpath+0x5e0/0x5e0 [ 234.922937] ? trace_hardirqs_off_thunk+0x1a/0x1c 04:37:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 234.922957] ? trace_hardirqs_on_caller+0x310/0x310 [ 234.941234] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 234.941252] ? prepare_exit_to_usermode+0x291/0x3b0 [ 234.941271] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.949380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.949392] RIP: 0033:0x457519 [ 234.949410] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.966469] RSP: 002b:00007f2002961c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.966485] RAX: ffffffffffffffda RBX: 00007f2002961c90 RCX: 0000000000457519 [ 234.966494] RDX: 00000000200001c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 234.966503] RBP: 000000000072bf00 R08: 0000000020000240 R09: 0000000000000000 [ 234.966512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f20029626d4 [ 234.966520] R13: 00000000004c284e R14: 00000000004d3c18 R15: 0000000000000003 [ 234.985578] FAULT_INJECTION: forcing a failure. 04:37:52 executing program 4 (fault-call:2 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 234.985578] name failslab, interval 1, probability 0, space 0, times 1 [ 235.019990] CPU: 1 PID: 8448 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #55 [ 235.030831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.030838] Call Trace: [ 235.030864] dump_stack+0x1c4/0x2b4 [ 235.030888] ? dump_stack_print_info.cold.2+0x52/0x52 [ 235.030906] ? lock_downgrade+0x900/0x900 [ 235.030938] should_fail.cold.4+0xa/0x17 [ 235.030960] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 235.030977] ? __f_unlock_pos+0x19/0x20 [ 235.030993] ? lock_downgrade+0x900/0x900 [ 235.031013] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 235.031030] ? proc_fail_nth_write+0x9e/0x210 [ 235.031044] ? proc_cwd_link+0x1d0/0x1d0 [ 235.031061] ? kasan_check_read+0x11/0x20 [ 235.031079] ? do_raw_spin_unlock+0xa7/0x2f0 [ 235.031102] ? fs_reclaim_acquire+0x20/0x20 [ 235.031119] ? lock_downgrade+0x900/0x900 [ 235.031137] ? wait_for_completion+0x8a0/0x8a0 [ 235.031168] ? ___might_sleep+0x1ed/0x300 [ 235.031187] ? fsnotify_first_mark+0x350/0x350 [ 235.031206] ? arch_local_save_flags+0x40/0x40 [ 235.031222] ? fsnotify+0x12f0/0x12f0 [ 235.031239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.031258] __should_failslab+0x124/0x180 [ 235.031272] should_failslab+0x9/0x14 [ 235.031287] __kmalloc+0x2d4/0x760 [ 235.031300] ? strncpy_from_user+0x510/0x510 [ 235.031313] ? fput+0x130/0x1a0 [ 235.031328] ? __x64_sys_memfd_create+0x142/0x4f0 [ 235.031346] __x64_sys_memfd_create+0x142/0x4f0 [ 235.031360] ? memfd_fcntl+0x1230/0x1230 [ 235.031382] do_syscall_64+0x1b9/0x820 04:37:53 executing program 3 (fault-call:2 fault-nth:1): mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 235.031398] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 235.031415] ? syscall_return_slowpath+0x5e0/0x5e0 [ 235.031430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.031447] ? trace_hardirqs_on_caller+0x310/0x310 [ 235.031463] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 235.031479] ? prepare_exit_to_usermode+0x291/0x3b0 [ 235.031499] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.058771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.058783] RIP: 0033:0x457519 [ 235.058799] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.058806] RSP: 002b:00007fb075c5fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 235.058820] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000457519 [ 235.058828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc74a [ 235.058836] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 235.058844] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007fb075c606d4 04:37:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="800000000002000000000000000000006c00000000000000010000000100000000400000e9407c2700000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x80}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2a3b5710a9ad1733021dcbd7b700"]) [ 235.058853] R13: 00000000004c49d1 R14: 00000000004d7d28 R15: 0000000000000003 04:37:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="2b00000000001b207f5c5eeb0800030000580000000000889078ac1804aaac1414aa342065580000000000000800000086dd080085be00100000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000fda4459b67d47a8bb14f67f12d5e4bae103482627282ad3606c89c19790310c55dfaf5df18e23f7e39d494cfb32722a812263f458fc2754a2f1eda5ef0677b3580278466f3cd3f55d1d3b925a1c041512ab517a849d895fc09a3bc8ca4e375f1b87abcb6b20e2aec88a2109307a4ae2d2387b6eaccc03ec65e"], &(0x7f0000000000)={0x1, 0x1}) 04:37:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2e2fd736c69c3000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup\x00', 0x0, &(0x7f0000000140)='\b') [ 235.548728] vhci_hcd: invalid port number 0 [ 235.555968] FAULT_INJECTION: forcing a failure. [ 235.555968] name failslab, interval 1, probability 0, space 0, times 0 [ 235.567808] FAULT_INJECTION: forcing a failure. [ 235.567808] name failslab, interval 1, probability 0, space 0, times 0 [ 235.575517] CPU: 0 PID: 8463 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #55 [ 235.586205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.595552] Call Trace: [ 235.598145] dump_stack+0x1c4/0x2b4 [ 235.601790] ? dump_stack_print_info.cold.2+0x52/0x52 [ 235.606993] should_fail.cold.4+0xa/0x17 [ 235.611070] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 235.616188] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 235.621209] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 235.625976] ? is_bpf_text_address+0xac/0x170 [ 235.630474] ? lock_downgrade+0x900/0x900 [ 235.634634] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 235.640441] ? kasan_check_read+0x11/0x20 [ 235.644600] ? fs_reclaim_acquire+0x20/0x20 [ 235.648927] ? lock_downgrade+0x900/0x900 [ 235.653082] ? ___might_sleep+0x1ed/0x300 [ 235.657237] ? expand_files.part.8+0x571/0x9a0 [ 235.661827] ? arch_local_save_flags+0x40/0x40 [ 235.666423] ? iterate_fd+0x4b0/0x4b0 [ 235.670230] ? __save_stack_trace+0x8d/0xf0 [ 235.674560] __should_failslab+0x124/0x180 [ 235.678800] should_failslab+0x9/0x14 [ 235.682610] kmem_cache_alloc+0x2be/0x730 [ 235.686767] ? shmem_destroy_callback+0xc0/0xc0 [ 235.691446] shmem_alloc_inode+0x1b/0x40 [ 235.695512] alloc_inode+0x63/0x190 [ 235.699141] new_inode_pseudo+0x71/0x1a0 [ 235.703211] ? prune_icache_sb+0x1c0/0x1c0 [ 235.707453] ? _raw_spin_unlock+0x2c/0x50 [ 235.711610] new_inode+0x1c/0x40 [ 235.714982] shmem_get_inode+0xf1/0x920 [ 235.718983] ? shmem_encode_fh+0x340/0x340 [ 235.723238] ? lock_downgrade+0x900/0x900 [ 235.727389] ? lock_release+0x970/0x970 [ 235.731372] ? arch_local_save_flags+0x40/0x40 [ 235.735959] ? usercopy_warn+0x110/0x110 [ 235.740040] __shmem_file_setup.part.45+0x83/0x2a0 [ 235.744978] shmem_file_setup+0x65/0x90 [ 235.748961] __x64_sys_memfd_create+0x2af/0x4f0 [ 235.753635] ? memfd_fcntl+0x1230/0x1230 [ 235.757712] do_syscall_64+0x1b9/0x820 [ 235.761604] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 235.766974] ? syscall_return_slowpath+0x5e0/0x5e0 [ 235.771908] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.776759] ? trace_hardirqs_on_caller+0x310/0x310 [ 235.781779] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 235.786798] ? prepare_exit_to_usermode+0x291/0x3b0 [ 235.791821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.796672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.801859] RIP: 0033:0x457519 [ 235.805084] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.824015] RSP: 002b:00007fb075c5fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 235.831767] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000457519 [ 235.839042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc74a [ 235.846315] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 235.853588] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007fb075c606d4 [ 235.860876] R13: 00000000004c49d1 R14: 00000000004d7d28 R15: 0000000000000003 [ 235.868448] CPU: 1 PID: 8460 Comm: syz-executor3 Not tainted 4.19.0-rc7+ #55 [ 235.875659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.885021] Call Trace: [ 235.887630] dump_stack+0x1c4/0x2b4 [ 235.891292] ? dump_stack_print_info.cold.2+0x52/0x52 [ 235.896508] ? __kernel_text_address+0xd/0x40 [ 235.901026] ? unwind_get_return_address+0x61/0xa0 [ 235.905979] should_fail.cold.4+0xa/0x17 [ 235.910070] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 235.915218] ? save_stack+0xa9/0xd0 [ 235.918863] ? save_stack+0x43/0xd0 [ 235.922587] ? kasan_kmalloc+0xc7/0xe0 [ 235.926489] ? __kmalloc_track_caller+0x14a/0x750 [ 235.931343] ? memdup_user+0x2c/0xa0 [ 235.935068] ? strndup_user+0x77/0xd0 [ 235.938879] ? ksys_mount+0x3c/0x140 [ 235.942608] ? do_syscall_64+0x1b9/0x820 [ 235.946686] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.952065] ? proc_fail_nth_write+0x9e/0x210 [ 235.956569] ? proc_cwd_link+0x1d0/0x1d0 [ 235.960645] ? kasan_check_read+0x11/0x20 [ 235.964807] ? do_raw_spin_unlock+0xa7/0x2f0 [ 235.969240] ? fs_reclaim_acquire+0x20/0x20 [ 235.973581] ? lock_downgrade+0x900/0x900 [ 235.977752] ? ___might_sleep+0x1ed/0x300 [ 235.981917] ? arch_local_save_flags+0x40/0x40 [ 235.986522] ? lock_release+0x970/0x970 [ 235.990511] ? arch_local_save_flags+0x40/0x40 [ 235.995129] __should_failslab+0x124/0x180 [ 235.999400] should_failslab+0x9/0x14 [ 236.003343] __kmalloc_track_caller+0x2d0/0x750 [ 236.008031] ? strncpy_from_user+0x510/0x510 [ 236.012543] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.018090] ? strndup_user+0x77/0xd0 [ 236.021908] memdup_user+0x2c/0xa0 [ 236.025471] strndup_user+0x77/0xd0 [ 236.029114] ksys_mount+0x73/0x140 [ 236.032673] __x64_sys_mount+0xbe/0x150 [ 236.036668] do_syscall_64+0x1b9/0x820 [ 236.040569] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 236.045954] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.050900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.055764] ? trace_hardirqs_on_caller+0x310/0x310 [ 236.060814] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.065940] ? prepare_exit_to_usermode+0x291/0x3b0 [ 236.070978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.075844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.081045] RIP: 0033:0x457519 04:37:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 236.084255] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.103190] RSP: 002b:00007f2002961c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.110977] RAX: ffffffffffffffda RBX: 00007f2002961c90 RCX: 0000000000457519 [ 236.118269] RDX: 00000000200001c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 236.125550] RBP: 000000000072bf00 R08: 0000000020000240 R09: 0000000000000000 [ 236.132829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f20029626d4 [ 236.140108] R13: 00000000004c284e R14: 00000000004d3c18 R15: 0000000000000003 04:37:53 executing program 4 (fault-call:2 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:53 executing program 3 (fault-call:2 fault-nth:2): mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 236.177819] vhci_hcd: invalid port number 0 04:37:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffffffffff9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r2, 0x38dd5a1d, 0x1, [0x2]}, &(0x7f0000000140)=0xa) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_cmd={0x12, 0x0, 0x707000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}) 04:37:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) writev(r0, &(0x7f0000000080), 0x0) [ 236.252953] FAULT_INJECTION: forcing a failure. [ 236.252953] name failslab, interval 1, probability 0, space 0, times 0 [ 236.279306] FAULT_INJECTION: forcing a failure. [ 236.279306] name failslab, interval 1, probability 0, space 0, times 0 [ 236.298726] CPU: 0 PID: 8484 Comm: syz-executor3 Not tainted 4.19.0-rc7+ #55 [ 236.305947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.305954] Call Trace: [ 236.305980] dump_stack+0x1c4/0x2b4 [ 236.306010] ? dump_stack_print_info.cold.2+0x52/0x52 [ 236.326769] ? __kernel_text_address+0xd/0x40 [ 236.331379] ? unwind_get_return_address+0x61/0xa0 [ 236.336333] should_fail.cold.4+0xa/0x17 [ 236.340431] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 236.345556] ? save_stack+0xa9/0xd0 [ 236.349217] ? kasan_kmalloc+0xc7/0xe0 04:37:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 236.353117] ? __kmalloc_track_caller+0x14a/0x750 [ 236.353129] ? memdup_user+0x2c/0xa0 [ 236.353141] ? strndup_user+0x77/0xd0 [ 236.353182] ? ksys_mount+0x73/0x140 [ 236.369270] ? __x64_sys_mount+0xbe/0x150 [ 236.373451] ? do_syscall_64+0x1b9/0x820 [ 236.378020] ? proc_fail_nth_write+0x9e/0x210 [ 236.382533] ? proc_cwd_link+0x1d0/0x1d0 [ 236.386695] ? kasan_check_read+0x11/0x20 [ 236.390863] ? do_raw_spin_unlock+0xa7/0x2f0 [ 236.395296] ? fs_reclaim_acquire+0x20/0x20 [ 236.399637] ? lock_downgrade+0x900/0x900 04:37:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 236.403804] ? ___might_sleep+0x1ed/0x300 [ 236.407974] ? arch_local_save_flags+0x40/0x40 [ 236.412573] ? lock_release+0x970/0x970 [ 236.416566] ? arch_local_save_flags+0x40/0x40 [ 236.421189] ? usercopy_warn+0x110/0x110 [ 236.421209] __should_failslab+0x124/0x180 [ 236.421226] should_failslab+0x9/0x14 [ 236.429538] kmem_cache_alloc_trace+0x2d7/0x750 [ 236.429555] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.429569] ? _copy_from_user+0xdf/0x150 [ 236.429589] copy_mount_options+0x5f/0x380 [ 236.452109] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.457664] ksys_mount+0xd0/0x140 [ 236.461259] __x64_sys_mount+0xbe/0x150 [ 236.465253] do_syscall_64+0x1b9/0x820 [ 236.469186] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 236.474574] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.479515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.484377] ? trace_hardirqs_on_caller+0x310/0x310 [ 236.489577] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.494610] ? prepare_exit_to_usermode+0x291/0x3b0 04:37:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000100)='/dev/kvm\x00', 0x9, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1049002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup3(r1, r1, 0x80000) unlinkat(r3, &(0x7f0000000180)='./file0\x00', 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66b8d7008ee0420f0866b82c000f00d8c401a56a4700c4017c296e8126640f01d1400f09c74424008a000000c744240207000000ff2c240fc75b4c64263e0f009b04800000", 0x45}], 0x1, 0x8, &(0x7f0000000000), 0x0) 04:37:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d2effc)=0x81, 0x4) clone(0x2000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x40000000000003, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000180), 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)) [ 236.499647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.504513] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.509829] RIP: 0033:0x457519 [ 236.513037] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.531972] RSP: 002b:00007f2002961c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.531987] RAX: ffffffffffffffda RBX: 00007f2002961c90 RCX: 0000000000457519 [ 236.531996] RDX: 00000000200001c0 RSI: 0000000020000140 RDI: 0000000020000180 [ 236.532004] RBP: 000000000072bf00 R08: 0000000020000240 R09: 0000000000000000 [ 236.532013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f20029626d4 [ 236.532027] R13: 00000000004c284e R14: 00000000004d3c18 R15: 0000000000000003 [ 236.576117] CPU: 1 PID: 8483 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #55 [ 236.583352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.592722] Call Trace: [ 236.595334] dump_stack+0x1c4/0x2b4 [ 236.598988] ? dump_stack_print_info.cold.2+0x52/0x52 [ 236.604213] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 236.608987] ? modules_open+0xa0/0xa0 [ 236.609007] should_fail.cold.4+0xa/0x17 [ 236.609027] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 236.622023] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 236.627839] ? kasan_check_read+0x11/0x20 [ 236.627857] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 236.627875] ? rcu_bh_qs+0xc0/0xc0 [ 236.640863] ? unwind_dump+0x190/0x190 [ 236.644782] ? is_bpf_text_address+0xd3/0x170 [ 236.647994] block nbd3: Attempted send on invalid socket [ 236.649296] ? kernel_text_address+0x79/0xf0 [ 236.649312] ? __kernel_text_address+0xd/0x40 [ 236.649331] ? unwind_get_return_address+0x61/0xa0 [ 236.654812] print_req_error: I/O error, dev nbd3, sector 2 [ 236.659218] ? __save_stack_trace+0x8d/0xf0 [ 236.664895] hfsplus: unable to find HFS+ superblock [ 236.668655] ? ___might_sleep+0x1ed/0x300 [ 236.668676] ? arch_local_save_flags+0x40/0x40 [ 236.678618] ? save_stack+0x43/0xd0 [ 236.678630] ? kasan_kmalloc+0xc7/0xe0 [ 236.678647] ? kasan_slab_alloc+0x12/0x20 [ 236.704071] ? kmem_cache_alloc+0x12e/0x730 [ 236.708419] ? shmem_alloc_inode+0x1b/0x40 [ 236.712676] __should_failslab+0x124/0x180 [ 236.716939] should_failslab+0x9/0x14 [ 236.720763] kmem_cache_alloc+0x2be/0x730 [ 236.724949] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 236.729986] ? map_id_range_down+0x1ee/0x430 [ 236.734419] new_inode_smack+0x20/0xb0 [ 236.738332] smack_inode_alloc_security+0x92/0x100 [ 236.743288] security_inode_alloc+0x73/0xd0 [ 236.747629] inode_init_always+0x68f/0xd80 [ 236.751888] ? __address_space_init_once+0x240/0x240 [ 236.757009] ? mem_cgroup_charge_statistics+0x780/0x780 [ 236.762391] ? kasan_unpoison_shadow+0x35/0x50 [ 236.766996] ? kasan_kmalloc+0xc7/0xe0 [ 236.770897] ? kasan_slab_alloc+0x12/0x20 [ 236.775066] ? kmem_cache_alloc+0x306/0x730 [ 236.779399] ? shmem_alloc_inode+0x1b/0x40 [ 236.783644] ? shmem_destroy_callback+0xc0/0xc0 [ 236.788324] alloc_inode+0x80/0x190 [ 236.791960] new_inode_pseudo+0x71/0x1a0 [ 236.796029] ? prune_icache_sb+0x1c0/0x1c0 [ 236.800276] ? _raw_spin_unlock+0x2c/0x50 [ 236.804438] new_inode+0x1c/0x40 [ 236.807815] shmem_get_inode+0xf1/0x920 [ 236.811801] ? shmem_encode_fh+0x340/0x340 [ 236.816049] ? lock_downgrade+0x900/0x900 [ 236.820222] ? lock_release+0x970/0x970 [ 236.824227] ? arch_local_save_flags+0x40/0x40 [ 236.828816] ? usercopy_warn+0x110/0x110 [ 236.832894] __shmem_file_setup.part.45+0x83/0x2a0 [ 236.837842] shmem_file_setup+0x65/0x90 [ 236.841826] __x64_sys_memfd_create+0x2af/0x4f0 [ 236.846502] ? memfd_fcntl+0x1230/0x1230 [ 236.850580] do_syscall_64+0x1b9/0x820 [ 236.854478] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 236.859854] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.864790] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.869644] ? trace_hardirqs_on_caller+0x310/0x310 [ 236.874670] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.879700] ? prepare_exit_to_usermode+0x291/0x3b0 [ 236.884728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.889586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.894783] RIP: 0033:0x457519 [ 236.897985] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.916891] RSP: 002b:00007fb075c5fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 236.924711] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000457519 [ 236.931985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc74a [ 236.939260] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 236.946534] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007fb075c606d4 04:37:54 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 236.953808] R13: 00000000004c49d1 R14: 00000000004d7d28 R15: 0000000000000003 04:37:54 executing program 4 (fault-call:2 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:54 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'//ev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:54 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x5a, "a3aa0d075425dacbf720d8b45c389ac8c2c685d127ff3c3e2bc51151facbcc1e0397288d70a2612253dba9bd4d6627d0a4e4e8306cfb03cd4e094efce8684d88c2ea406209c62f7b401fd48922e1ffe2fd011625005aed6bdd8a"}, &(0x7f0000000200)=0x62) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000380)={r5, 0x6, 0x30}, 0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, r4}, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000003c0)=0x5, 0x8) listen(r3, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r6, &(0x7f00000012c0)=ANY=[], 0x0) r7 = accept4(r3, 0x0, &(0x7f0000000040), 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="8a8e2d18603b5d0f4dec0600777d538c4ab1"], 0x1}}, 0x80) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) dup3(r1, r7, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x14) fallocate(r0, 0x0, 0x0, 0x10000) r8 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) fcntl$addseals(r8, 0x409, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2, @ipv4={[], [], @local}}], 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000480), 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x3, 0x20, 0xffffffff}) fallocate(0xffffffffffffffff, 0x0, 0x85, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) 04:37:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x3, 0x70, 0x0, 0x9, 0xfffffffffffff1cd, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, @perf_bp={&(0x7f0000000040)}}) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='user\x00', r1) r2 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)='z\vq', 0x3, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r2, r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000280)=""/130) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0xa1d, 0xfffffffffffffd29) 04:37:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 237.141077] FAULT_INJECTION: forcing a failure. [ 237.141077] name failslab, interval 1, probability 0, space 0, times 0 [ 237.181748] CPU: 1 PID: 8543 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #55 [ 237.188981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.198348] Call Trace: [ 237.200968] dump_stack+0x1c4/0x2b4 [ 237.204623] ? dump_stack_print_info.cold.2+0x52/0x52 [ 237.209929] ? mark_held_locks+0x130/0x130 [ 237.214216] ? alloc_inode+0x80/0x190 [ 237.218038] should_fail.cold.4+0xa/0x17 [ 237.222120] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 237.227244] ? __kernel_text_address+0xd/0x40 [ 237.231758] ? unwind_get_return_address+0x61/0xa0 [ 237.236709] ? __save_stack_trace+0x8d/0xf0 [ 237.241057] ? __lockdep_init_map+0x105/0x590 [ 237.245571] ? lockdep_init_map+0x9/0x10 [ 237.249648] ? debug_mutex_init+0x2d/0x60 [ 237.253810] ? __mutex_init+0x1f7/0x290 [ 237.257807] ? trace_hardirqs_on+0xbd/0x310 [ 237.262146] ? __lockdep_init_map+0x105/0x590 [ 237.266686] ? fs_reclaim_acquire+0x20/0x20 [ 237.271024] ? lock_downgrade+0x900/0x900 [ 237.275213] ? ___might_sleep+0x1ed/0x300 [ 237.279378] ? arch_local_save_flags+0x40/0x40 [ 237.283986] __should_failslab+0x124/0x180 [ 237.288239] should_failslab+0x9/0x14 [ 237.292060] kmem_cache_alloc+0x2be/0x730 [ 237.296384] ? mpol_shared_policy_init+0x235/0x650 [ 237.301327] ? current_time+0x72/0x1b0 [ 237.305232] __d_alloc+0xc8/0xcc0 [ 237.308701] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 237.313736] ? ktime_get_coarse_real_ts64+0x243/0x3b0 [ 237.319032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.324585] ? timespec64_trunc+0xea/0x180 [ 237.328836] ? inode_init_owner+0x340/0x340 [ 237.333206] ? _raw_spin_unlock+0x2c/0x50 [ 237.337376] ? current_time+0x131/0x1b0 [ 237.341368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.346934] ? check_preemption_disabled+0x48/0x200 [ 237.351974] ? __lockdep_init_map+0x105/0x590 [ 237.356493] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 237.362047] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 237.367615] d_alloc_pseudo+0x1d/0x30 [ 237.371433] alloc_file_pseudo+0x158/0x3f0 [ 237.375684] ? alloc_file+0x4d0/0x4d0 [ 237.379507] ? usercopy_warn+0x110/0x110 [ 237.383594] ? kasan_check_write+0x14/0x20 [ 237.387825] EXT4-fs warning (device sda1): ext4_group_add:1637: No reserved GDT blocks, can't resize [ 237.397129] __shmem_file_setup.part.45+0x110/0x2a0 [ 237.397148] shmem_file_setup+0x65/0x90 [ 237.397187] __x64_sys_memfd_create+0x2af/0x4f0 [ 237.397202] ? memfd_fcntl+0x1230/0x1230 [ 237.397225] do_syscall_64+0x1b9/0x820 [ 237.397247] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 237.424372] ? syscall_return_slowpath+0x5e0/0x5e0 [ 237.429329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.434284] ? trace_hardirqs_on_caller+0x310/0x310 [ 237.439338] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 237.444379] ? prepare_exit_to_usermode+0x291/0x3b0 [ 237.449420] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.454406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.459611] RIP: 0033:0x457519 [ 237.462823] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.481736] RSP: 002b:00007fb075c5fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 237.489458] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000457519 04:37:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:55 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/%ev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 237.496750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc74a [ 237.504038] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 237.511857] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007fb075c606d4 [ 237.519234] R13: 00000000004c49d1 R14: 00000000004d7d28 R15: 0000000000000003 04:37:55 executing program 4 (fault-call:2 fault-nth:4): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="ed2e7453a4e023a4730f30bdf6e8f92a0000b9c9cfa87250f9badc0a", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d0000000000"], 0x3}}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x19, 0x10, 0x10, 0xa, 0x1, 0x5, 0x1, 0x164, 0xffffffffffffffff}) 04:37:55 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x5a, "a3aa0d075425dacbf720d8b45c389ac8c2c685d127ff3c3e2bc51151facbcc1e0397288d70a2612253dba9bd4d6627d0a4e4e8306cfb03cd4e094efce8684d88c2ea406209c62f7b401fd48922e1ffe2fd011625005aed6bdd8a"}, &(0x7f0000000200)=0x62) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000380)={r5, 0x6, 0x30}, 0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, r4}, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000003c0)=0x5, 0x8) listen(r3, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r6, &(0x7f00000012c0)=ANY=[], 0x0) r7 = accept4(r3, 0x0, &(0x7f0000000040), 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="8a8e2d18603b5d0f4dec0600777d538c4ab1"], 0x1}}, 0x80) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) dup3(r1, r7, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x14) fallocate(r0, 0x0, 0x0, 0x10000) r8 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) fcntl$addseals(r8, 0x409, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2, @ipv4={[], [], @local}}], 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000480), 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x3, 0x20, 0xffffffff}) fallocate(0xffffffffffffffff, 0x0, 0x85, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) 04:37:55 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/.ev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:55 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/d%v/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 237.685860] FAULT_INJECTION: forcing a failure. [ 237.685860] name failslab, interval 1, probability 0, space 0, times 0 04:37:55 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x0, 0xfffffffffffffffa}, 0xfffffffffffffc1e) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = inotify_init1(0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x4000000080000005) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000880)=""/221) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r5 = dup2(r2, r4) ioctl$KDENABIO(r5, 0x4b36) r6 = syz_open_procfs(0x0, &(0x7f0000000080)="00000000003a13fc2dcbcb52") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001280)={{{@in6=@dev, @in6}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000033c0)=0xe8) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000540)=""/122, 0x7a}], 0x1) r7 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000084, 0xf0ff7f) fcntl$getflags(r7, 0x3) r8 = mmap$binder(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x1000004, 0x22010, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000480)={0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x154, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0e630c4003000000030000000000000012634840030000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYPTR=&(0x7f0000000340)=ANY=[], @ANYBLOB="060000000000000009631040b5f7f9fa08c5fee9b2ffd63485a7668de2efdbc8cd8a80c3a2a6368e2a281894", @ANYRES64=r8, @ANYBLOB="02000000000000000c630000066304400100000001634040000000000000000001000000000000000000000010000000000000000000000020000000000000001000000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="8561646600000000070000000000000004000000000000003600000000000000"], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="01634040030000000000000000000000000000000000000011000000000000000000000020000000000000001800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="85616466000000000a0000000000000004000000000000000000000000000000"], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="12634840010000000000000004000000000000000000000011000000000000000000000018000000000000001000000000000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="852a6a7700010000", @ANYRES64=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="01040000000000000c630000"], 0x8d, 0x0, &(0x7f00000005c0)="6af757bc1ab0ec10cc691e60813d3b91bd24b2a84bedb2125ae704062d81c918304df1b6de82479ed8eea6eb48ba4ad5f8bf2eabeffd8199ac55ddadbbf4af72e02c6ab7822e042b23e13b517440f4b594905b6e0f0770052226aeb07802003eb786849fba79c6e1409edd79142b4a673ff96713b006a45413ece4ae32359f10d500fc009c3982f08c7b5529aa"}) [ 237.738378] CPU: 0 PID: 8580 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #55 [ 237.745701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.755414] Call Trace: [ 237.758036] dump_stack+0x1c4/0x2b4 [ 237.761761] ? dump_stack_print_info.cold.2+0x52/0x52 [ 237.766981] should_fail.cold.4+0xa/0x17 [ 237.771152] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 237.776308] ? smack_d_instantiate+0x136/0xea0 [ 237.780912] ? kasan_kmalloc+0xc7/0xe0 [ 237.784822] ? kasan_slab_alloc+0x12/0x20 [ 237.789000] ? __d_alloc+0xc8/0xcc0 [ 237.792651] ? alloc_file_pseudo+0x158/0x3f0 [ 237.797082] ? mark_held_locks+0x130/0x130 [ 237.801336] ? percpu_ref_put_many+0x11c/0x260 [ 237.805940] ? lock_downgrade+0x900/0x900 [ 237.810112] ? smack_d_instantiate+0x330/0xea0 [ 237.814731] ? lock_downgrade+0x900/0x900 [ 237.818903] ? fs_reclaim_acquire+0x20/0x20 [ 237.823242] ? lock_downgrade+0x900/0x900 [ 237.827410] ? ___might_sleep+0x1ed/0x300 [ 237.831586] ? arch_local_save_flags+0x40/0x40 [ 237.836208] ? lock_downgrade+0x900/0x900 [ 237.840376] __should_failslab+0x124/0x180 [ 237.844629] should_failslab+0x9/0x14 [ 237.848454] kmem_cache_alloc+0x2be/0x730 [ 237.852614] ? kasan_check_write+0x14/0x20 [ 237.856866] ? do_raw_spin_lock+0xc1/0x200 [ 237.861121] __alloc_file+0xa8/0x470 [ 237.864848] ? file_free_rcu+0xd0/0xd0 [ 237.868751] ? d_instantiate+0x79/0xa0 [ 237.872654] ? lock_downgrade+0x900/0x900 [ 237.876828] ? kasan_check_read+0x11/0x20 [ 237.880997] ? do_raw_spin_unlock+0xa7/0x2f0 [ 237.885428] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 237.890028] alloc_empty_file+0x72/0x170 [ 237.894104] alloc_file+0x5e/0x4d0 [ 237.897655] ? _raw_spin_unlock+0x2c/0x50 [ 237.901822] alloc_file_pseudo+0x261/0x3f0 [ 237.906074] ? alloc_file+0x4d0/0x4d0 [ 237.909896] ? usercopy_warn+0x110/0x110 [ 237.913979] ? kasan_check_write+0x14/0x20 [ 237.918237] __shmem_file_setup.part.45+0x110/0x2a0 [ 237.923273] shmem_file_setup+0x65/0x90 [ 237.927269] __x64_sys_memfd_create+0x2af/0x4f0 [ 237.931956] ? memfd_fcntl+0x1230/0x1230 04:37:55 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/%bd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 237.936041] do_syscall_64+0x1b9/0x820 [ 237.939947] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 237.945330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 237.950279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.955151] ? trace_hardirqs_on_caller+0x310/0x310 [ 237.960223] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 237.965268] ? prepare_exit_to_usermode+0x291/0x3b0 [ 237.970306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.975197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.980401] RIP: 0033:0x457519 [ 237.983621] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.002712] RSP: 002b:00007fb075c5fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 238.010450] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000457519 [ 238.017734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc74a [ 238.025024] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 238.032313] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007fb075c606d4 04:37:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) [ 238.039599] R13: 00000000004c49d1 R14: 00000000004d7d28 R15: 0000000000000003 [ 238.080618] EXT4-fs warning (device sda1): ext4_group_add:1637: No reserved GDT blocks, can't resize [ 238.098908] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 04:37:56 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/.bd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes256, 0x1, "7b87ec15bb31573f"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000002, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0) fstat(r0, &(0x7f0000000180)) io_setup(0x8001, &(0x7f0000000000)) 04:37:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) 04:37:56 executing program 4 (fault-call:2 fault-nth:5): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:56 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x22, &(0x7f0000000040)={@empty, @rand_addr=0x9}, 0xc) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x20900) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) dup2(r0, r1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffdd5) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f000000a000)={0x2, 0x4e20, @multicast1}, 0x10) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:56 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev//bd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 238.382598] FAULT_INJECTION: forcing a failure. [ 238.382598] name failslab, interval 1, probability 0, space 0, times 0 [ 238.395755] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 238.417126] CPU: 1 PID: 8613 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #55 [ 238.424387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.433752] Call Trace: [ 238.433780] dump_stack+0x1c4/0x2b4 [ 238.433810] ? dump_stack_print_info.cold.2+0x52/0x52 [ 238.445302] ? smk_access_entry+0x310/0x310 [ 238.449654] should_fail.cold.4+0xa/0x17 [ 238.449672] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 238.449696] ? shmem_setattr+0x50e/0xda0 [ 238.458867] ? lock_downgrade+0x900/0x900 [ 238.458887] ? current_time+0x72/0x1b0 [ 238.470992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.476552] ? timespec64_trunc+0xea/0x180 [ 238.480803] ? inode_init_owner+0x340/0x340 [ 238.480820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.480836] ? fsnotify+0xaae/0x12f0 [ 238.480856] ? fs_reclaim_acquire+0x20/0x20 [ 238.490743] ? lock_downgrade+0x900/0x900 [ 238.490763] ? ___might_sleep+0x1ed/0x300 [ 238.490783] ? arch_local_save_flags+0x40/0x40 [ 238.511705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.517280] __should_failslab+0x124/0x180 [ 238.521532] should_failslab+0x9/0x14 [ 238.525360] kmem_cache_alloc+0x2be/0x730 [ 238.529624] ? do_sys_ftruncate+0x428/0x550 [ 238.533974] ? lock_downgrade+0x900/0x900 [ 238.538143] getname_flags+0xd0/0x5a0 [ 238.541981] getname+0x19/0x20 [ 238.545219] do_sys_open+0x383/0x700 [ 238.548957] ? filp_open+0x80/0x80 [ 238.552517] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 238.552532] ? do_sys_ftruncate+0x449/0x550 [ 238.552553] __x64_sys_open+0x7e/0xc0 [ 238.562334] do_syscall_64+0x1b9/0x820 [ 238.562350] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 238.562369] ? syscall_return_slowpath+0x5e0/0x5e0 [ 238.580376] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.585413] ? trace_hardirqs_on_caller+0x310/0x310 [ 238.590443] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 238.595470] ? prepare_exit_to_usermode+0x291/0x3b0 [ 238.600500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.605482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.610714] RIP: 0033:0x411171 [ 238.613918] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 04:37:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x204001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1e}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1f) 04:37:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xffffffffffffbfff) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x400000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r2}) 04:37:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) 04:37:56 executing program 4 (fault-call:2 fault-nth:6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 238.632886] RSP: 002b:00007fb075c5fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 238.640611] RAX: ffffffffffffffda RBX: 00000000200000d0 RCX: 0000000000411171 [ 238.647884] RDX: 00007fb075c5fafa RSI: 0000000000000002 RDI: 00007fb075c5faf0 [ 238.655184] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 238.662462] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 238.669910] R13: 0000000000000000 R14: 00000000004d7d28 R15: 0000000000000003 04:37:56 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/n%d', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 238.732902] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 04:37:56 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 238.773648] irq bypass consumer (token 0000000024e717f7) registration fails: -16 04:37:56 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in=@broadcast}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000580)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000001640)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001800)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000001840)={0x10001, 0x0, &(0x7f0000fff000/0x1000)=nil}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)={{}, {}, [{}], {0x4, 0x6}, [], {}, {0x20, 0x5}}, 0x2c, 0x2) creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_OPEN(r0, &(0x7f0000000200)={0x20, 0xfffffffffffffff5, 0x6, {0x0, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000640)=""/4096) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) [ 238.814265] FAULT_INJECTION: forcing a failure. [ 238.814265] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 238.843656] CPU: 1 PID: 8658 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #55 [ 238.850882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.860252] Call Trace: [ 238.862868] dump_stack+0x1c4/0x2b4 [ 238.866527] ? dump_stack_print_info.cold.2+0x52/0x52 [ 238.871746] should_fail.cold.4+0xa/0x17 [ 238.875831] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 238.875847] ? proc_tid_base_lookup+0x29/0x30 [ 238.875870] ? lock_acquire+0x1ed/0x520 [ 238.885471] ? usbdev_do_ioctl+0x28d/0x3b50 [ 238.885491] ? lock_release+0x970/0x970 [ 238.885510] ? fs_reclaim_acquire+0x20/0x20 [ 238.902107] ? lock_downgrade+0x900/0x900 [ 238.902130] ? ___might_sleep+0x1ed/0x300 [ 238.910427] ? lock_release+0x970/0x970 [ 238.910445] ? arch_local_save_flags+0x40/0x40 [ 238.910462] ? __mutex_lock+0x85e/0x1700 [ 238.910482] ? __might_sleep+0x95/0x190 [ 238.910504] __alloc_pages_nodemask+0x34b/0xde0 [ 238.931763] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 238.936809] ? __might_fault+0x12b/0x1e0 [ 238.940897] ? lock_downgrade+0x900/0x900 [ 238.945078] ? lock_release+0x970/0x970 [ 238.946582] FAULT_INJECTION: forcing a failure. [ 238.946582] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 238.949277] ? arch_local_save_flags+0x40/0x40 [ 238.965646] ? smack_log+0x423/0x590 [ 238.969377] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 238.974406] ? usbfs_increase_memory_usage+0xf7/0x1d0 [ 238.979607] ? usbfs_decrease_memory_usage+0x30/0x30 [ 238.984722] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 238.990372] alloc_pages_current+0x10c/0x210 [ 238.994791] ? check_ctrlrecip+0xa9/0x320 [ 238.998960] __get_free_pages+0xc/0x40 [ 239.002860] proc_control+0x227/0xef0 [ 239.006672] ? mark_held_locks+0x130/0x130 [ 239.010919] ? proc_bulk+0xa70/0xa70 [ 239.014784] usbdev_do_ioctl+0x1eb8/0x3b50 [ 239.019035] ? processcompl_compat+0x680/0x680 [ 239.023723] ? mark_held_locks+0x130/0x130 [ 239.027971] ? dput.part.26+0x26d/0x790 [ 239.031960] ? shrink_dcache_sb+0x350/0x350 [ 239.036297] ? lock_acquire+0x1ed/0x520 [ 239.040281] ? __fdget_pos+0x1bb/0x200 [ 239.044203] ? lock_release+0x970/0x970 [ 239.048212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.053763] ? _parse_integer+0x134/0x180 [ 239.057933] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 239.063486] ? _kstrtoull+0x188/0x250 [ 239.067302] ? _parse_integer+0x180/0x180 [ 239.071553] ? lock_release+0x970/0x970 [ 239.075543] ? arch_local_save_flags+0x40/0x40 [ 239.080135] ? usercopy_warn+0x110/0x110 [ 239.084242] ? __fget+0x4aa/0x740 [ 239.087707] ? lock_downgrade+0x900/0x900 [ 239.091875] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 239.097685] ? smk_access+0x53b/0x700 [ 239.101502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.107050] ? smack_log+0x423/0x590 [ 239.110779] ? smk_access_entry+0x310/0x310 [ 239.115113] ? __fget+0x4d1/0x740 [ 239.118581] ? smk_tskacc+0x3dd/0x520 [ 239.122403] usbdev_ioctl+0x25/0x30 [ 239.126135] ? usbdev_compat_ioctl+0x30/0x30 [ 239.130578] do_vfs_ioctl+0x1de/0x1720 [ 239.134475] ? fsnotify_first_mark+0x350/0x350 [ 239.139068] ? __fsnotify_parent+0xcc/0x420 [ 239.143406] ? ioctl_preallocate+0x300/0x300 [ 239.147866] ? smk_curacc+0x7f/0xa0 [ 239.151506] ? smack_file_ioctl+0x210/0x3c0 [ 239.155839] ? fget_raw+0x20/0x20 [ 239.159303] ? smack_file_lock+0x2e0/0x2e0 [ 239.163550] ? fput+0x130/0x1a0 [ 239.166846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.172392] ? security_file_ioctl+0x94/0xc0 [ 239.176817] ksys_ioctl+0xa9/0xd0 [ 239.180372] __x64_sys_ioctl+0x73/0xb0 [ 239.184273] do_syscall_64+0x1b9/0x820 [ 239.188194] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 239.193571] ? syscall_return_slowpath+0x5e0/0x5e0 [ 239.198517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.203374] ? trace_hardirqs_on_caller+0x310/0x310 [ 239.208401] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 239.213435] ? prepare_exit_to_usermode+0x291/0x3b0 [ 239.218904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.223770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.228973] RIP: 0033:0x457519 [ 239.232201] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 239.251115] RSP: 002b:00007f611816fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.258839] RAX: ffffffffffffffda RBX: 00007f611816fc90 RCX: 0000000000457519 [ 239.266255] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 239.273533] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 239.280863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61181706d4 [ 239.288182] R13: 00000000004bf65f R14: 00000000004cf538 R15: 0000000000000005 [ 239.295483] CPU: 0 PID: 8663 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #55 [ 239.302690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.312144] Call Trace: [ 239.314767] dump_stack+0x1c4/0x2b4 [ 239.318405] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.323618] should_fail.cold.4+0xa/0x17 [ 239.327695] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.332921] ? kasan_slab_alloc+0x12/0x20 [ 239.337081] ? kmem_cache_alloc+0x12e/0x730 [ 239.341409] ? alloc_empty_file+0x72/0x170 [ 239.345658] ? mark_held_locks+0x130/0x130 [ 239.349903] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.355280] ? mark_held_locks+0x130/0x130 [ 239.359522] ? smk_access+0x53b/0x700 [ 239.363336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.368878] ? smack_log+0x423/0x590 [ 239.372607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.378157] ? should_fail+0x22d/0xd01 [ 239.382080] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.387219] __alloc_pages_nodemask+0x34b/0xde0 [ 239.391898] ? current_time+0x72/0x1b0 [ 239.395799] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 239.400822] ? inode_init_owner+0x340/0x340 [ 239.405154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.410732] ? fs_reclaim_acquire+0x20/0x20 [ 239.415066] ? lock_downgrade+0x900/0x900 [ 239.419231] ? ___might_sleep+0x1ed/0x300 [ 239.423393] ? trace_hardirqs_off+0xb8/0x310 [ 239.427818] cache_grow_begin+0x91/0x8c0 [ 239.431890] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.437443] ? check_preemption_disabled+0x48/0x200 [ 239.442473] kmem_cache_alloc+0x665/0x730 [ 239.446631] ? do_sys_ftruncate+0x428/0x550 [ 239.450968] getname_flags+0xd0/0x5a0 [ 239.454780] getname+0x19/0x20 [ 239.457984] do_sys_open+0x383/0x700 [ 239.461712] ? filp_open+0x80/0x80 [ 239.465266] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 239.470726] ? do_sys_ftruncate+0x449/0x550 [ 239.475060] __x64_sys_open+0x7e/0xc0 [ 239.478873] do_syscall_64+0x1b9/0x820 [ 239.482769] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 239.488142] ? syscall_return_slowpath+0x5e0/0x5e0 [ 239.493100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.497954] ? trace_hardirqs_on_caller+0x310/0x310 [ 239.503008] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 239.508333] ? prepare_exit_to_usermode+0x291/0x3b0 [ 239.513365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.518241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.523442] RIP: 0033:0x411171 [ 239.526649] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 239.545553] RSP: 002b:00007fb075c5fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 239.553269] RAX: ffffffffffffffda RBX: 00000000200000d0 RCX: 0000000000411171 [ 239.560632] RDX: 00007fb075c5fafa RSI: 0000000000000002 RDI: 00007fb075c5faf0 [ 239.567909] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 239.575202] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 239.582478] R13: 0000000000000000 R14: 00000000004d7d28 R15: 0000000000000003 [ 239.607270] EXT4-fs: 12 callbacks suppressed 04:37:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:57 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nb%', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:57 executing program 1: syz_mount_image$vfat(&(0x7f00000005c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x160a, 0x1, &(0x7f0000000000)=[{&(0x7f0000000180)="eb58906d0200000000000000020120000200008000f8", 0x16}], 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0076e0920aa676ce6b765720db471beb9b3625372d39cc37d3aac3fd22f4ab4bba84a7f127289aaea5a21e990e58979155f54fcaef5c36449e4288ece52a"]) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x7) 04:37:57 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nb.', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 239.607360] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 239.621509] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting 04:37:57 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:57 executing program 1: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nb%', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 239.669600] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 239.728396] FAULT_INJECTION: forcing a failure. [ 239.728396] name failslab, interval 1, probability 0, space 0, times 0 [ 239.753915] CPU: 1 PID: 8687 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #55 [ 239.761143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.770538] Call Trace: [ 239.773155] dump_stack+0x1c4/0x2b4 [ 239.776836] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.782057] should_fail.cold.4+0xa/0x17 [ 239.786143] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.791304] ? lock_downgrade+0x900/0x900 [ 239.795479] ? ___might_sleep+0x1ed/0x300 [ 239.799644] ? lock_release+0x970/0x970 [ 239.803637] ? arch_local_save_flags+0x40/0x40 [ 239.808246] ? __mutex_lock+0x85e/0x1700 [ 239.812329] ? proc_control+0x831/0xef0 [ 239.816345] ? lock_downgrade+0x900/0x900 [ 239.820510] ? __might_sleep+0x95/0x190 [ 239.824505] ? __alloc_pages_nodemask+0x6e4/0xde0 [ 239.829367] ? ___might_sleep+0x1ed/0x300 [ 239.833533] ? arch_local_save_flags+0x40/0x40 [ 239.838139] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 239.843225] __should_failslab+0x124/0x180 [ 239.847480] should_failslab+0x9/0x14 [ 239.851307] kmem_cache_alloc_trace+0x2d7/0x750 [ 239.855993] ? lock_release+0x970/0x970 [ 239.859991] ? arch_local_save_flags+0x40/0x40 [ 239.864594] ? smack_log+0x423/0x590 [ 239.868334] usb_control_msg+0xc4/0x4e0 [ 239.872331] ? usb_start_wait_urb+0x370/0x370 04:37:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:57 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nb/', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 239.876848] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 239.882409] proc_control+0x99b/0xef0 [ 239.886247] ? proc_bulk+0xa70/0xa70 [ 239.889988] usbdev_do_ioctl+0x1eb8/0x3b50 [ 239.894243] ? processcompl_compat+0x680/0x680 [ 239.898847] ? mark_held_locks+0x130/0x130 [ 239.903107] ? dput.part.26+0x26d/0x790 [ 239.907100] ? shrink_dcache_sb+0x350/0x350 [ 239.911444] ? lock_acquire+0x1ed/0x520 [ 239.915430] ? __fdget_pos+0x1bb/0x200 [ 239.919376] ? lock_release+0x970/0x970 [ 239.923452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.928986] ? _parse_integer+0x134/0x180 [ 239.933131] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 239.938666] ? _kstrtoull+0x188/0x250 [ 239.942462] ? _parse_integer+0x180/0x180 [ 239.946739] ? lock_release+0x970/0x970 [ 239.950709] ? arch_local_save_flags+0x40/0x40 [ 239.955599] ? usercopy_warn+0x110/0x110 [ 239.959661] ? __fget+0x4aa/0x740 [ 239.963112] ? lock_downgrade+0x900/0x900 [ 239.967263] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 239.973055] ? smk_access+0x53b/0x700 [ 239.977186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.982765] ? smack_log+0x423/0x590 [ 239.986551] ? smk_access_entry+0x310/0x310 [ 239.990880] ? __fget+0x4d1/0x740 [ 239.994333] ? smk_tskacc+0x3dd/0x520 [ 239.998132] usbdev_ioctl+0x25/0x30 [ 240.001876] ? usbdev_compat_ioctl+0x30/0x30 [ 240.006284] do_vfs_ioctl+0x1de/0x1720 [ 240.010189] ? fsnotify_first_mark+0x350/0x350 [ 240.014905] ? __fsnotify_parent+0xcc/0x420 [ 240.019231] ? ioctl_preallocate+0x300/0x300 [ 240.023639] ? smk_curacc+0x7f/0xa0 [ 240.027268] ? smack_file_ioctl+0x210/0x3c0 [ 240.031627] ? fget_raw+0x20/0x20 [ 240.035077] ? smack_file_lock+0x2e0/0x2e0 [ 240.039308] ? fput+0x130/0x1a0 [ 240.042588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.048267] ? security_file_ioctl+0x94/0xc0 [ 240.052740] ksys_ioctl+0xa9/0xd0 [ 240.056218] __x64_sys_ioctl+0x73/0xb0 [ 240.060252] do_syscall_64+0x1b9/0x820 [ 240.064152] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 240.069544] ? syscall_return_slowpath+0x5e0/0x5e0 [ 240.074565] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.079416] ? trace_hardirqs_on_caller+0x310/0x310 [ 240.084528] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 240.089846] ? prepare_exit_to_usermode+0x291/0x3b0 [ 240.094865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.099758] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.104946] RIP: 0033:0x457519 [ 240.108137] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:37:57 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000001480)) r2 = perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000343ff8)='./file1\x00', &(0x7f0000000140)='nfs\x00', 0x0, &(0x7f000000a000)) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="a390370e1da8e2c3046b3baf", 0xc}], 0x1) keyctl$join(0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="fccad574a1820000020097d460f74a9a35b53371535494daf978618414a51a0e00cd069e8b207661aa328e74a12d329ad89c2c24e6084f3224c0d974f2addb0f86dac6e843d5d4b9aa7322d926a2a597cad8ec1ec0580b0dfa91b03594517611ab9860ebd9005a33a26ea0638af465044fec6cb967907c7f4af38a5cbcf8a56d0e0051be246bd707818172f18ad177cedc0ffebdd0cbf017e86a77891b"], &(0x7f0000000300)=0x8) fcntl$addseals(r2, 0x409, 0x8) r3 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x10101) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev, 'dummy0\x00'}}) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="2fad78f78f3ce8bb8a3ce4029bb1c5"], 0x4, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xb9) connect(r4, &(0x7f0000000040)=@un=@abs, 0x80) r5 = socket$inet6(0xa, 0xfffffffffffffffe, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000f00)={0x0, 0x6}, 0x2) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=@routing, 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000002c0)={'ip6_vti0\x00', {0x2, 0x4e24}}) sendmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x7, 0x7ff, "2a48a10db315f89ced9098b805970587352f879e95afafa3a67cfd97e20e20b4bafc6798d08db6ce0991989560742d54c8efddb41d70fa11369263b8f04e8b", 0x1e}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="7a8e89", 0x3}, {&(0x7f00000005c0)="13c5bd6497979af722bf24cc8ab8a08146d45de293757f39d5d23a02ff57", 0x1e}, {&(0x7f0000000600)="9d32616fe33077d24ecce805555f6099815e6ebab8a417b78ebc1ab650a0ffd0821a994d41bc0f0c1f347077ea4efe864f6036d6b819b70984e265e284de69c875147b7aae0f67b577078af6161c53c965550912a9ea1855bb1c6ff75424e0b497ece44a7be2588a1013b0c7d55276f0ca74f2e18dc33f7c1d708ea7d039af27889b6326ad7be84bda08c7d210f65f2ebb872f640dce1aeccc578a7d12aebd8c60d6cb36ccaa5f081e6248a6348b", 0xae}, {&(0x7f00000006c0)="d8d598ff35abcde1fe9fcb86fa14d07f60a9506d8566910dd0f5beecd02df5a5bdea0e4c33769922a81eea478d08b36b6b901806999745e22f905762c74a98bef20ddb5a88bfb8d6a17bb5c368c069dfc906017d5cac805f3f15b824547416233fb55c3da20e0fa6afc4339f8a14930bd4b30395b21d793ca26135c5506d066e0d3b0fafecee9d80c162a312c2eb2aaa35698609dcd9907d769041f20ab830b1b8", 0xa1}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x260, 0x1}}, {{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="3bf27e6906800515af6165f676e944db4a9d11aef4784e9f7a1e5e9f4380ebf9c307821be2e08f04c49f6d5b5de6952b069041867dada56f1301859e4e1eb3b50b7279a68b8e082048346e49358c0adad93333b8860c0d357f3489ea68bbb56cb3336e7c613844c2406e6a5a87e941566b0626ef7bcab158cd9dc80abe4e175017e192bc4cc981942c8eef101fa80f940e2486082df37dd33e0d839b4f155917caa5c7e628bfbb18f56e85ab7e779b6c9b81ae8d", 0xb4}, {&(0x7f0000000b80)="a51552d3c7d887a6c0ce6024234792a1efdb088c6b1e1458c33db4f23ec6b5472e2e32212d69034ae1328561ebb1470bf7a362d8bd82ae7427d212f168f1142999ebf87dac45b8bd107def5c17595acb9246525905e62c3afb174e1a4be8b1acd76b260465876464bb79a17e77682bd3582420251d254c502a53fcc6b1176f0a003223b25ec0279df3fad3", 0x8b}, {&(0x7f0000000c40)="670211fccd07fb8cd1a9ed4b2544a02917afccdc0f1d7698d2ef813e7209088b5efbdc26386f091ae044599a15fe5088ad40888eeb5cd125f9f2bb33524a47b679b8d6c312447be208eaf3809bddebf8018f296d311e9dcf5211d0723fea54b337986c60a31cafee5e8b4239be9077357f6fca9be06a8cdc4cc2d048dd48292c3d676f000000000000000000000000000000", 0x92}, {&(0x7f0000000d00)="bb19c5338319e41a9a9c97949e4378c07c09cd3078778a739d7d20a15fdf482684675c732a974ca3c0f1c45a740fe929fb8d2f4ab5a69a0c7ea3530a1dde7e268bf441457517912fbe81ba766c7e5885d146ee2ce6ea06cafaf4913fdb6b050afbf02c195a8e76ea4434cb0299b532c225d613101cff863227b59478e2d4f419c8007d3286e4dfc98f4a202f2d5e2d4206945fddae391e5021fd81dafe76fb84d7b38a0519a15284ab7a114a70d3e895df5c05766f5f2a5685cd3553af9b8f71fb1f44ada8c6a5cbf1d34581d81ff8808db06f12c4cdb3cf9572040ec5a8a1bb09058a087e83a6ae67", 0xe9}, {&(0x7f0000000e00)="5baccf0d7737d7a0e2ad3fe47ff3ff31c89738a8754a2b6413e82a700575f6befb9ca3ecf9dbc2d5c7913e6a23c88f1467dd50fb5bcb1f2748421c525ac63ddbb9544dcdd203def8dfc619fa30f9f04f008a61bcf1d414d60b8307bf2fc635f4faf9e60a92aa089908b2cb836d843601a59ab179b33a49390e197068", 0x7c}], 0x5, &(0x7f0000000f00), 0x0, 0x20000000}, 0x5b2}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001180)="08802dd48700d8d23b92d4e5da8cc89a4034a7e5e0c5a1e8150675d2f3325a50b1d9ad9ec2a31a9c59734f1bebe4b02ef20d0612b4c42a5aada8bd3a82a20cb736c6490eb1afd53854c42d214991dae6908de792771b01b6d99a289d3e30604ebb", 0x61}], 0x1, &(0x7f00000014c0)=[{0x80, 0x88, 0xfffffffffffffffa, "671e0843341a2918bd09db867d15b74aeed33e87db9840b1c50c697c01f003b8b9a1e7462e57d976ab3a1000bb8050d4b0ad3822cdb3de429b82088c1bba1685689c1aae83e364d591413a323ef07833cded6461c60aa8e5454e6fe6e2b8b1c50452723d54dade153793a995ae68"}, {0x100, 0x10f, 0x1f, "23ff62408f8815b15e295b52fc837f60852cee7dcf68708128e15b1a017aa7e3586c68c2aa55fae6b72a6b733c444f8ee1005a8165b906228fe7e945d46770a7e2f8f1a1e29ba5afcf3024347c83c83c4b48e174b4e871671fa017e0ca1e9301058b0b3b4825dd349ce3bb1662507828f01fab89d9a9e74156bf7f7c3193d43197165e2a8848b4cab2503bdd9884355be0248165223ddd0478fbf86a5358c7aee045360624ddbe81589807cb0e9c5671b7ae5e93859ddef10c36586bf55c5977412401ec50db9d28c7909cf2f2cc1e8c3b91b82249a2cbbf6fb376371a30058171c865e386ed24f9d0"}, {0x100, 0x11d, 0x6, "93f75676fba88d9f81c005dd0267544b6f8ba34960e5439b66dff39d41142d125b103aabca1422fdfaaf884c4b6c00122fd75739cf9f377f37d30af96b59c7b12a3c9d602857a9bee8fc0dcd0ab8341613eadf2bb57144333fd0bc0aeb1e6ea472769fa288a1c2e503447ce745f3caae69b66b007d14b0c84f21a69e10b0a4a232aa2e5e62716abbee358b0bfcd5f9385273e91ce83c9f441e19a9daa7690a9085d9f98d775013dff834dea8abfb0f6516512feb0b8ab0bc94ad056f6c1bc8d812db1485cb6649b7a046f11b9fd8f8ef6e6c2d6cd89fad736cac36f3a0df63314d9f96b9b94e25f08f"}], 0x280, 0x1}, 0x6}], 0x3, 0x0) msgget(0x1, 0x0) syz_emit_ethernet(0x1, &(0x7f000000a000)=ANY=[@ANYBLOB="ff4bc31a631b00c000006d1da88cb8777725e8e3f69078ac149078"], 0x0) [ 240.127037] RSP: 002b:00007f611816fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.134743] RAX: ffffffffffffffda RBX: 00007f611816fc90 RCX: 0000000000457519 [ 240.142005] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 240.149275] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 240.156638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61181706d4 [ 240.163908] R13: 00000000004bf65f R14: 00000000004cf538 R15: 0000000000000005 04:37:57 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000000011) readv(r0, &(0x7f0000000380)=[{&(0x7f0000001280)=""/230, 0xe6}], 0x1) rt_sigpending(&(0x7f0000000300), 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000400)={0x4, [0x0, 0x6, 0x8, 0x3]}, &(0x7f0000000440)=0xc) timer_create(0x7, &(0x7f0000000080)={0x0, 0x3c, 0x2, @thr={&(0x7f0000000100)="0dbcacf9f5ef924c2d52d45a7d1da84a97855bff794d282e3f7de232e630a9c2e1d920010049be85adec197b625251fe6792834b22e90d2f20fb8cff774e757e761125c4aacf02b017f15fe63474a81561b1fc00add3b3928b6e9d8ab5c4569a978a147e1e2bdf89769564d96987a9d497b133b5acc430f71e67135ece17d05f789f09df6e3b1b1eb2c23be24c09fe6eeb997f944ea24a53b7a26aedfcc407d5ef78626d47676328ed0484ee1b88456700a6f60941f53e57cd4719b3c4bebb7efb28b3ff033b89d32978f4", &(0x7f0000000000)="bae0b4a61d1d1f9d593b62878c084e03d71f54899db5dbe7953b081b2504fbd3fc"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = dup2(r0, r0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x77359400}, {r3, r4+30000000}}, &(0x7f00000002c0)) [ 240.261801] FAULT_INJECTION: forcing a failure. [ 240.261801] name failslab, interval 1, probability 0, space 0, times 0 [ 240.283708] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 240.302203] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 240.305439] autofs4:pid:8720:autofs_fill_super: called with bogus options [ 240.321555] CPU: 0 PID: 8714 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #55 [ 240.328843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.338217] Call Trace: [ 240.340829] dump_stack+0x1c4/0x2b4 [ 240.344490] ? dump_stack_print_info.cold.2+0x52/0x52 [ 240.349707] ? kernel_text_address+0x79/0xf0 [ 240.354146] should_fail.cold.4+0xa/0x17 [ 240.358254] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 240.363377] ? save_stack+0xa9/0xd0 [ 240.363391] ? save_stack+0x43/0xd0 [ 240.363407] ? kmem_cache_alloc_trace+0x152/0x750 [ 240.363429] ? usb_control_msg+0xc4/0x4e0 [ 240.363449] ? proc_control+0x99b/0xef0 [ 240.369779] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 240.370718] ? usbdev_do_ioctl+0x1eb8/0x3b50 [ 240.370733] ? usbdev_ioctl+0x25/0x30 [ 240.370754] ? do_vfs_ioctl+0x1de/0x1720 [ 240.394893] ? ksys_ioctl+0xa9/0xd0 [ 240.394908] ? __x64_sys_ioctl+0x73/0xb0 [ 240.394923] ? do_syscall_64+0x1b9/0x820 [ 240.394939] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.394960] ? ___might_sleep+0x1ed/0x300 [ 240.402822] ? lock_release+0x970/0x970 [ 240.402839] ? arch_local_save_flags+0x40/0x40 [ 240.402856] ? __mutex_lock+0x85e/0x1700 [ 240.402874] ? proc_control+0x831/0xef0 [ 240.402888] ? lock_downgrade+0x900/0x900 [ 240.402907] ? __might_sleep+0x95/0x190 [ 240.410602] ? ___might_sleep+0x1ed/0x300 [ 240.410620] ? arch_local_save_flags+0x40/0x40 [ 240.410634] ? ___might_sleep+0x1ed/0x300 [ 240.410650] ? trace_hardirqs_on+0xbd/0x310 [ 240.410666] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 240.410685] __should_failslab+0x124/0x180 [ 240.420110] should_failslab+0x9/0x14 [ 240.420126] __kmalloc+0x2d4/0x760 [ 240.420143] ? kmem_cache_alloc_trace+0x31f/0x750 [ 240.420159] ? usb_alloc_urb+0x24/0x50 [ 240.420198] ? arch_local_save_flags+0x40/0x40 [ 240.420217] usb_alloc_urb+0x24/0x50 [ 240.428689] usb_control_msg+0x1dd/0x4e0 [ 240.428708] ? usb_start_wait_urb+0x370/0x370 [ 240.428724] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 240.428744] proc_control+0x99b/0xef0 [ 240.437399] ? proc_bulk+0xa70/0xa70 [ 240.437429] usbdev_do_ioctl+0x1eb8/0x3b50 [ 240.437448] ? processcompl_compat+0x680/0x680 [ 240.445796] ? mark_held_locks+0x130/0x130 [ 240.445815] ? dput.part.26+0x26d/0x790 [ 240.445833] ? shrink_dcache_sb+0x350/0x350 [ 240.445851] ? lock_acquire+0x1ed/0x520 [ 240.453972] ? __fdget_pos+0x1bb/0x200 [ 240.453991] ? lock_release+0x970/0x970 [ 240.454008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 04:37:58 executing program 5: recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:58 executing program 5: recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 240.454023] ? _parse_integer+0x134/0x180 [ 240.454042] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 240.472092] ? _kstrtoull+0x188/0x250 [ 240.472108] ? _parse_integer+0x180/0x180 [ 240.472127] ? lock_release+0x970/0x970 [ 240.480259] ? arch_local_save_flags+0x40/0x40 [ 240.480281] ? usercopy_warn+0x110/0x110 [ 240.480309] ? __fget+0x4aa/0x740 [ 240.480331] ? lock_downgrade+0x900/0x900 [ 240.492623] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 240.492638] ? smk_access+0x53b/0x700 04:37:58 executing program 5: recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 240.492658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.539683] ? smack_log+0x423/0x590 [ 240.539700] ? smk_access_entry+0x310/0x310 [ 240.539714] ? __fget+0x4d1/0x740 [ 240.539730] ? smk_tskacc+0x3dd/0x520 [ 240.539754] usbdev_ioctl+0x25/0x30 [ 240.539770] ? usbdev_compat_ioctl+0x30/0x30 [ 240.539785] do_vfs_ioctl+0x1de/0x1720 [ 240.539801] ? fsnotify_first_mark+0x350/0x350 [ 240.539814] ? __fsnotify_parent+0xcc/0x420 [ 240.539833] ? ioctl_preallocate+0x300/0x300 [ 240.552074] ? smk_curacc+0x7f/0xa0 04:37:58 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xaae6ffff00000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 240.552094] ? smack_file_ioctl+0x210/0x3c0 [ 240.552106] ? fget_raw+0x20/0x20 [ 240.552122] ? smack_file_lock+0x2e0/0x2e0 [ 240.552138] ? fput+0x130/0x1a0 [ 240.552158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.552203] ? security_file_ioctl+0x94/0xc0 [ 240.623462] ksys_ioctl+0xa9/0xd0 [ 240.623482] __x64_sys_ioctl+0x73/0xb0 [ 240.623500] do_syscall_64+0x1b9/0x820 [ 240.623521] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 240.630781] ? syscall_return_slowpath+0x5e0/0x5e0 [ 240.630794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.630810] ? trace_hardirqs_on_caller+0x310/0x310 [ 240.630825] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 240.630840] ? prepare_exit_to_usermode+0x291/0x3b0 [ 240.630858] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.630878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.630889] RIP: 0033:0x457519 [ 240.630903] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:37:58 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 240.630910] RSP: 002b:00007f611816fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.630923] RAX: ffffffffffffffda RBX: 00007f611816fc90 RCX: 0000000000457519 [ 240.630932] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 240.630940] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 240.630948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61181706d4 [ 240.630956] R13: 00000000004bf65f R14: 00000000004cf538 R15: 0000000000000005 [ 240.759013] autofs4:pid:8740:autofs_fill_super: called with bogus options 04:37:58 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 240.818517] block nbd3: Attempted send on invalid socket [ 240.824468] print_req_error: I/O error, dev nbd3, sector 2 [ 240.830358] hfsplus: unable to find HFS+ superblock 04:37:58 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x400000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='\nxt2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:58 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:58 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000001480)) r2 = perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000343ff8)='./file1\x00', &(0x7f0000000140)='nfs\x00', 0x0, &(0x7f000000a000)) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="a390370e1da8e2c3046b3baf", 0xc}], 0x1) keyctl$join(0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="fccad574a1820000020097d460f74a9a35b53371535494daf978618414a51a0e00cd069e8b207661aa328e74a12d329ad89c2c24e6084f3224c0d974f2addb0f86dac6e843d5d4b9aa7322d926a2a597cad8ec1ec0580b0dfa91b03594517611ab9860ebd9005a33a26ea0638af465044fec6cb967907c7f4af38a5cbcf8a56d0e0051be246bd707818172f18ad177cedc0ffebdd0cbf017e86a77891b"], &(0x7f0000000300)=0x8) fcntl$addseals(r2, 0x409, 0x8) r3 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x10101) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev, 'dummy0\x00'}}) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="2fad78f78f3ce8bb8a3ce4029bb1c5"], 0x4, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xb9) connect(r4, &(0x7f0000000040)=@un=@abs, 0x80) r5 = socket$inet6(0xa, 0xfffffffffffffffe, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000f00)={0x0, 0x6}, 0x2) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=@routing, 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000002c0)={'ip6_vti0\x00', {0x2, 0x4e24}}) sendmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x7, 0x7ff, "2a48a10db315f89ced9098b805970587352f879e95afafa3a67cfd97e20e20b4bafc6798d08db6ce0991989560742d54c8efddb41d70fa11369263b8f04e8b", 0x1e}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="7a8e89", 0x3}, {&(0x7f00000005c0)="13c5bd6497979af722bf24cc8ab8a08146d45de293757f39d5d23a02ff57", 0x1e}, {&(0x7f0000000600)="9d32616fe33077d24ecce805555f6099815e6ebab8a417b78ebc1ab650a0ffd0821a994d41bc0f0c1f347077ea4efe864f6036d6b819b70984e265e284de69c875147b7aae0f67b577078af6161c53c965550912a9ea1855bb1c6ff75424e0b497ece44a7be2588a1013b0c7d55276f0ca74f2e18dc33f7c1d708ea7d039af27889b6326ad7be84bda08c7d210f65f2ebb872f640dce1aeccc578a7d12aebd8c60d6cb36ccaa5f081e6248a6348b", 0xae}, {&(0x7f00000006c0)="d8d598ff35abcde1fe9fcb86fa14d07f60a9506d8566910dd0f5beecd02df5a5bdea0e4c33769922a81eea478d08b36b6b901806999745e22f905762c74a98bef20ddb5a88bfb8d6a17bb5c368c069dfc906017d5cac805f3f15b824547416233fb55c3da20e0fa6afc4339f8a14930bd4b30395b21d793ca26135c5506d066e0d3b0fafecee9d80c162a312c2eb2aaa35698609dcd9907d769041f20ab830b1b8", 0xa1}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="f8000000000000001901000006000000f53fe726ad151fa37bc88b4f6de608ffbc40a071ec3f7d1d51f9ed9b0716cc310f6e963782f2334be7aa5424f20f19c1c4819f577873256b4cb43bf2f0324999110f8ec32be9bf9914d449442b0ad86ffda9f81a465bb24df45293c9df33467f8e4aa068d4fa8542bf22018c8db584459266cf3f754183c167754f1ae2026b1cb5809f62642a4649230655123909052db85155781fa610a38628de9a35275ce9fc7a1f5d88bc8afe2f3cb66d838ad57722bcd0779a94b84b653d18f5a08ae6791c63f3d75c25574fd8a1735fa012bec1c13cb0ff169a58d1f120f3cb2cd7a7e36400000000000000100000000000000001000000f6000000c8000000000000001b01000005000000accb8076e7ea33b956631228cc7fab2bd15577a2ff90ee7b769d56e066ba365b0984a506be8608cf3e5a39bf2efb8d2a702e5e12f165cab75ececc0d3b0cea546c8dba0676ed838a39951ad226838c20c3bbc6e8074f9c62776498d5d5d3d7efcff0b83b802fb8239595dc64c23e0bd604654490b486bc7058be934961bec4bedc938f345def346c1b01326623bc6c0c427d17ecf2f8cb4a7007cfc772f86135ef5ee08f4bb7c2ba192720aeec5070aca58b000000000000200000000000000003010000e04700003a55390984ea48a21c7ac808191fdd7370000000000000008d010000ff070000cde8fb499149e8a0c6752ca840171c34ef17d45083228e9ef17b2325d0aeff5b695fe54f3d020f8304fde88a8e8f463bb1c312ebe0389a3b5f49dc95186f666f8dbbd2811aaa4289a582864b50597519d7af97ace6dacb0ff300000000000000"], 0x260, 0x1}}, {{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="3bf27e6906800515af6165f676e944db4a9d11aef4784e9f7a1e5e9f4380ebf9c307821be2e08f04c49f6d5b5de6952b069041867dada56f1301859e4e1eb3b50b7279a68b8e082048346e49358c0adad93333b8860c0d357f3489ea68bbb56cb3336e7c613844c2406e6a5a87e941566b0626ef7bcab158cd9dc80abe4e175017e192bc4cc981942c8eef101fa80f940e2486082df37dd33e0d839b4f155917caa5c7e628bfbb18f56e85ab7e779b6c9b81ae8d", 0xb4}, {&(0x7f0000000b80)="a51552d3c7d887a6c0ce6024234792a1efdb088c6b1e1458c33db4f23ec6b5472e2e32212d69034ae1328561ebb1470bf7a362d8bd82ae7427d212f168f1142999ebf87dac45b8bd107def5c17595acb9246525905e62c3afb174e1a4be8b1acd76b260465876464bb79a17e77682bd3582420251d254c502a53fcc6b1176f0a003223b25ec0279df3fad3", 0x8b}, {&(0x7f0000000c40)="670211fccd07fb8cd1a9ed4b2544a02917afccdc0f1d7698d2ef813e7209088b5efbdc26386f091ae044599a15fe5088ad40888eeb5cd125f9f2bb33524a47b679b8d6c312447be208eaf3809bddebf8018f296d311e9dcf5211d0723fea54b337986c60a31cafee5e8b4239be9077357f6fca9be06a8cdc4cc2d048dd48292c3d676f000000000000000000000000000000", 0x92}, {&(0x7f0000000d00)="bb19c5338319e41a9a9c97949e4378c07c09cd3078778a739d7d20a15fdf482684675c732a974ca3c0f1c45a740fe929fb8d2f4ab5a69a0c7ea3530a1dde7e268bf441457517912fbe81ba766c7e5885d146ee2ce6ea06cafaf4913fdb6b050afbf02c195a8e76ea4434cb0299b532c225d613101cff863227b59478e2d4f419c8007d3286e4dfc98f4a202f2d5e2d4206945fddae391e5021fd81dafe76fb84d7b38a0519a15284ab7a114a70d3e895df5c05766f5f2a5685cd3553af9b8f71fb1f44ada8c6a5cbf1d34581d81ff8808db06f12c4cdb3cf9572040ec5a8a1bb09058a087e83a6ae67", 0xe9}, {&(0x7f0000000e00)="5baccf0d7737d7a0e2ad3fe47ff3ff31c89738a8754a2b6413e82a700575f6befb9ca3ecf9dbc2d5c7913e6a23c88f1467dd50fb5bcb1f2748421c525ac63ddbb9544dcdd203def8dfc619fa30f9f04f008a61bcf1d414d60b8307bf2fc635f4faf9e60a92aa089908b2cb836d843601a59ab179b33a49390e197068", 0x7c}], 0x5, &(0x7f0000000f00), 0x0, 0x20000000}, 0x5b2}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001180)="08802dd48700d8d23b92d4e5da8cc89a4034a7e5e0c5a1e8150675d2f3325a50b1d9ad9ec2a31a9c59734f1bebe4b02ef20d0612b4c42a5aada8bd3a82a20cb736c6490eb1afd53854c42d214991dae6908de792771b01b6d99a289d3e30604ebb", 0x61}], 0x1, &(0x7f00000014c0)=[{0x80, 0x88, 0xfffffffffffffffa, "671e0843341a2918bd09db867d15b74aeed33e87db9840b1c50c697c01f003b8b9a1e7462e57d976ab3a1000bb8050d4b0ad3822cdb3de429b82088c1bba1685689c1aae83e364d591413a323ef07833cded6461c60aa8e5454e6fe6e2b8b1c50452723d54dade153793a995ae68"}, {0x100, 0x10f, 0x1f, "23ff62408f8815b15e295b52fc837f60852cee7dcf68708128e15b1a017aa7e3586c68c2aa55fae6b72a6b733c444f8ee1005a8165b906228fe7e945d46770a7e2f8f1a1e29ba5afcf3024347c83c83c4b48e174b4e871671fa017e0ca1e9301058b0b3b4825dd349ce3bb1662507828f01fab89d9a9e74156bf7f7c3193d43197165e2a8848b4cab2503bdd9884355be0248165223ddd0478fbf86a5358c7aee045360624ddbe81589807cb0e9c5671b7ae5e93859ddef10c36586bf55c5977412401ec50db9d28c7909cf2f2cc1e8c3b91b82249a2cbbf6fb376371a30058171c865e386ed24f9d0"}, {0x100, 0x11d, 0x6, "93f75676fba88d9f81c005dd0267544b6f8ba34960e5439b66dff39d41142d125b103aabca1422fdfaaf884c4b6c00122fd75739cf9f377f37d30af96b59c7b12a3c9d602857a9bee8fc0dcd0ab8341613eadf2bb57144333fd0bc0aeb1e6ea472769fa288a1c2e503447ce745f3caae69b66b007d14b0c84f21a69e10b0a4a232aa2e5e62716abbee358b0bfcd5f9385273e91ce83c9f441e19a9daa7690a9085d9f98d775013dff834dea8abfb0f6516512feb0b8ab0bc94ad056f6c1bc8d812db1485cb6649b7a046f11b9fd8f8ef6e6c2d6cd89fad736cac36f3a0df63314d9f96b9b94e25f08f"}], 0x280, 0x1}, 0x6}], 0x3, 0x0) msgget(0x1, 0x0) syz_emit_ethernet(0x1, &(0x7f000000a000)=ANY=[@ANYBLOB="ff4bc31a631b00c000006d1da88cb8777725e8e3f69078ac149078"], 0x0) 04:37:58 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000001480)) r2 = perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000343ff8)='./file1\x00', &(0x7f0000000140)='nfs\x00', 0x0, &(0x7f000000a000)) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="a390370e1da8e2c3046b3baf", 0xc}], 0x1) keyctl$join(0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="fccad574a1820000020097d460f74a9a35b53371535494daf978618414a51a0e00cd069e8b207661aa328e74a12d329ad89c2c24e6084f3224c0d974f2addb0f86dac6e843d5d4b9aa7322d926a2a597cad8ec1ec0580b0dfa91b03594517611ab9860ebd9005a33a26ea0638af465044fec6cb967907c7f4af38a5cbcf8a56d0e0051be246bd707818172f18ad177cedc0ffebdd0cbf017e86a77891b"], &(0x7f0000000300)=0x8) fcntl$addseals(r2, 0x409, 0x8) r3 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x10101) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev, 'dummy0\x00'}}) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="2fad78f78f3ce8bb8a3ce4029bb1c5"], 0x4, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xb9) connect(r4, &(0x7f0000000040)=@un=@abs, 0x80) r5 = socket$inet6(0xa, 0xfffffffffffffffe, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000f00)={0x0, 0x6}, 0x2) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=@routing, 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000002c0)={'ip6_vti0\x00', {0x2, 0x4e24}}) sendmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x7, 0x7ff, "2a48a10db315f89ced9098b805970587352f879e95afafa3a67cfd97e20e20b4bafc6798d08db6ce0991989560742d54c8efddb41d70fa11369263b8f04e8b", 0x1e}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="7a8e89", 0x3}, {&(0x7f00000005c0)="13c5bd6497979af722bf24cc8ab8a08146d45de293757f39d5d23a02ff57", 0x1e}, {&(0x7f0000000600)="9d32616fe33077d24ecce805555f6099815e6ebab8a417b78ebc1ab650a0ffd0821a994d41bc0f0c1f347077ea4efe864f6036d6b819b70984e265e284de69c875147b7aae0f67b577078af6161c53c965550912a9ea1855bb1c6ff75424e0b497ece44a7be2588a1013b0c7d55276f0ca74f2e18dc33f7c1d708ea7d039af27889b6326ad7be84bda08c7d210f65f2ebb872f640dce1aeccc578a7d12aebd8c60d6cb36ccaa5f081e6248a6348b", 0xae}, {&(0x7f00000006c0)="d8d598ff35abcde1fe9fcb86fa14d07f60a9506d8566910dd0f5beecd02df5a5bdea0e4c33769922a81eea478d08b36b6b901806999745e22f905762c74a98bef20ddb5a88bfb8d6a17bb5c368c069dfc906017d5cac805f3f15b824547416233fb55c3da20e0fa6afc4339f8a14930bd4b30395b21d793ca26135c5506d066e0d3b0fafecee9d80c162a312c2eb2aaa35698609dcd9907d769041f20ab830b1b8", 0xa1}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x260, 0x1}}, {{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="3bf27e6906800515af6165f676e944db4a9d11aef4784e9f7a1e5e9f4380ebf9c307821be2e08f04c49f6d5b5de6952b069041867dada56f1301859e4e1eb3b50b7279a68b8e082048346e49358c0adad93333b8860c0d357f3489ea68bbb56cb3336e7c613844c2406e6a5a87e941566b0626ef7bcab158cd9dc80abe4e175017e192bc4cc981942c8eef101fa80f940e2486082df37dd33e0d839b4f155917caa5c7e628bfbb18f56e85ab7e779b6c9b81ae8d", 0xb4}, {&(0x7f0000000b80)="a51552d3c7d887a6c0ce6024234792a1efdb088c6b1e1458c33db4f23ec6b5472e2e32212d69034ae1328561ebb1470bf7a362d8bd82ae7427d212f168f1142999ebf87dac45b8bd107def5c17595acb9246525905e62c3afb174e1a4be8b1acd76b260465876464bb79a17e77682bd3582420251d254c502a53fcc6b1176f0a003223b25ec0279df3fad3", 0x8b}, {&(0x7f0000000c40)="670211fccd07fb8cd1a9ed4b2544a02917afccdc0f1d7698d2ef813e7209088b5efbdc26386f091ae044599a15fe5088ad40888eeb5cd125f9f2bb33524a47b679b8d6c312447be208eaf3809bddebf8018f296d311e9dcf5211d0723fea54b337986c60a31cafee5e8b4239be9077357f6fca9be06a8cdc4cc2d048dd48292c3d676f000000000000000000000000000000", 0x92}, {&(0x7f0000000d00)="bb19c5338319e41a9a9c97949e4378c07c09cd3078778a739d7d20a15fdf482684675c732a974ca3c0f1c45a740fe929fb8d2f4ab5a69a0c7ea3530a1dde7e268bf441457517912fbe81ba766c7e5885d146ee2ce6ea06cafaf4913fdb6b050afbf02c195a8e76ea4434cb0299b532c225d613101cff863227b59478e2d4f419c8007d3286e4dfc98f4a202f2d5e2d4206945fddae391e5021fd81dafe76fb84d7b38a0519a15284ab7a114a70d3e895df5c05766f5f2a5685cd3553af9b8f71fb1f44ada8c6a5cbf1d34581d81ff8808db06f12c4cdb3cf9572040ec5a8a1bb09058a087e83a6ae67", 0xe9}, {&(0x7f0000000e00)="5baccf0d7737d7a0e2ad3fe47ff3ff31c89738a8754a2b6413e82a700575f6befb9ca3ecf9dbc2d5c7913e6a23c88f1467dd50fb5bcb1f2748421c525ac63ddbb9544dcdd203def8dfc619fa30f9f04f008a61bcf1d414d60b8307bf2fc635f4faf9e60a92aa089908b2cb836d843601a59ab179b33a49390e197068", 0x7c}], 0x5, &(0x7f0000000f00), 0x0, 0x20000000}, 0x5b2}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001180)="08802dd48700d8d23b92d4e5da8cc89a4034a7e5e0c5a1e8150675d2f3325a50b1d9ad9ec2a31a9c59734f1bebe4b02ef20d0612b4c42a5aada8bd3a82a20cb736c6490eb1afd53854c42d214991dae6908de792771b01b6d99a289d3e30604ebb", 0x61}], 0x1, &(0x7f00000014c0)=[{0x80, 0x88, 0xfffffffffffffffa, "671e0843341a2918bd09db867d15b74aeed33e87db9840b1c50c697c01f003b8b9a1e7462e57d976ab3a1000bb8050d4b0ad3822cdb3de429b82088c1bba1685689c1aae83e364d591413a323ef07833cded6461c60aa8e5454e6fe6e2b8b1c50452723d54dade153793a995ae68"}, {0x100, 0x10f, 0x1f, "23ff62408f8815b15e295b52fc837f60852cee7dcf68708128e15b1a017aa7e3586c68c2aa55fae6b72a6b733c444f8ee1005a8165b906228fe7e945d46770a7e2f8f1a1e29ba5afcf3024347c83c83c4b48e174b4e871671fa017e0ca1e9301058b0b3b4825dd349ce3bb1662507828f01fab89d9a9e74156bf7f7c3193d43197165e2a8848b4cab2503bdd9884355be0248165223ddd0478fbf86a5358c7aee045360624ddbe81589807cb0e9c5671b7ae5e93859ddef10c36586bf55c5977412401ec50db9d28c7909cf2f2cc1e8c3b91b82249a2cbbf6fb376371a30058171c865e386ed24f9d0"}, {0x100, 0x11d, 0x6, "93f75676fba88d9f81c005dd0267544b6f8ba34960e5439b66dff39d41142d125b103aabca1422fdfaaf884c4b6c00122fd75739cf9f377f37d30af96b59c7b12a3c9d602857a9bee8fc0dcd0ab8341613eadf2bb57144333fd0bc0aeb1e6ea472769fa288a1c2e503447ce745f3caae69b66b007d14b0c84f21a69e10b0a4a232aa2e5e62716abbee358b0bfcd5f9385273e91ce83c9f441e19a9daa7690a9085d9f98d775013dff834dea8abfb0f6516512feb0b8ab0bc94ad056f6c1bc8d812db1485cb6649b7a046f11b9fd8f8ef6e6c2d6cd89fad736cac36f3a0df63314d9f96b9b94e25f08f"}], 0x280, 0x1}, 0x6}], 0x3, 0x0) msgget(0x1, 0x0) syz_emit_ethernet(0x1, &(0x7f000000a000)=ANY=[@ANYBLOB="ff4bc31a631b00c000006d1da88cb8777725e8e3f69078ac149078"], 0x0) [ 240.973544] FAULT_INJECTION: forcing a failure. [ 240.973544] name failslab, interval 1, probability 0, space 0, times 0 [ 241.031365] block nbd3: Attempted send on invalid socket [ 241.036913] print_req_error: I/O error, dev nbd3, sector 2 [ 241.050030] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 241.053306] hfsplus: unable to find HFS+ superblock [ 241.067056] autofs4:pid:8785:autofs_fill_super: called with bogus options [ 241.080224] CPU: 1 PID: 8763 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #55 [ 241.087448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.096822] Call Trace: [ 241.099443] dump_stack+0x1c4/0x2b4 [ 241.103109] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.108325] ? modules_open+0xa0/0xa0 [ 241.112157] should_fail.cold.4+0xa/0x17 [ 241.116274] ? smack_d_instantiate+0x136/0xea0 [ 241.120882] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.126010] ? mark_held_locks+0x130/0x130 [ 241.130357] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 241.135397] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 241.140202] ? modules_open+0xa0/0xa0 [ 241.144026] ? usb_hcd_link_urb_to_ep+0x3e5/0x500 [ 241.144583] block nbd3: Attempted send on invalid socket [ 241.148978] ? lock_downgrade+0x900/0x900 [ 241.148998] ? fs_reclaim_acquire+0x20/0x20 [ 241.149013] ? lock_downgrade+0x900/0x900 [ 241.149033] ? ___might_sleep+0x1ed/0x300 [ 241.154595] print_req_error: I/O error, dev nbd3, sector 2 [ 241.158700] ? kasan_check_write+0x14/0x20 [ 241.158718] ? arch_local_save_flags+0x40/0x40 [ 241.158739] ? usb_hcd_submit_urb+0x460/0x20a0 [ 241.167760] hfsplus: unable to find HFS+ superblock [ 241.171407] ? _raw_spin_unlock+0x2c/0x50 [ 241.171426] __should_failslab+0x124/0x180 [ 241.171441] should_failslab+0x9/0x14 [ 241.171457] __kmalloc+0x2d4/0x760 [ 241.171476] ? kasan_check_write+0x14/0x20 [ 241.186706] autofs4:pid:8793:autofs_fill_super: called with bogus options [ 241.190660] ? do_raw_spin_lock+0xc1/0x200 [ 241.190677] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 241.190695] usb_hcd_submit_urb+0x6fc/0x20a0 [ 241.190715] ? usb_create_hcd+0x40/0x40 [ 241.239955] ? do_syscall_64+0x1b9/0x820 [ 241.244042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.249430] ? __x64_sys_ioctl+0x73/0xb0 [ 241.253513] ? do_syscall_64+0x1b9/0x820 [ 241.257685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.263303] ? ___might_sleep+0x1ed/0x300 [ 241.267471] ? lock_release+0x970/0x970 [ 241.271474] ? arch_local_save_flags+0x40/0x40 [ 241.276215] ? __mutex_lock+0x85e/0x1700 [ 241.280306] ? __lockdep_init_map+0x105/0x590 [ 241.284827] ? __lockdep_init_map+0x105/0x590 [ 241.289371] usb_submit_urb+0x893/0x14e0 [ 241.293882] usb_start_wait_urb+0x13d/0x370 [ 241.298234] ? sg_clean+0x240/0x240 [ 241.301894] usb_control_msg+0x332/0x4e0 [ 241.305989] ? usb_start_wait_urb+0x370/0x370 [ 241.310507] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 241.316069] proc_control+0x99b/0xef0 [ 241.316503] block nbd3: Attempted send on invalid socket [ 241.319894] ? proc_bulk+0xa70/0xa70 [ 241.319917] usbdev_do_ioctl+0x1eb8/0x3b50 [ 241.319944] ? processcompl_compat+0x680/0x680 [ 241.319965] ? mark_held_locks+0x130/0x130 [ 241.325538] print_req_error: I/O error, dev nbd3, sector 2 [ 241.329263] ? dput.part.26+0x26d/0x790 [ 241.339669] hfsplus: unable to find HFS+ superblock [ 241.342565] ? shrink_dcache_sb+0x350/0x350 [ 241.342586] ? lock_acquire+0x1ed/0x520 [ 241.342606] ? __fdget_pos+0x1bb/0x200 [ 241.369727] ? lock_release+0x970/0x970 [ 241.373730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.379289] ? _parse_integer+0x134/0x180 [ 241.383459] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 241.389021] ? _kstrtoull+0x188/0x250 [ 241.392847] ? _parse_integer+0x180/0x180 [ 241.397021] ? lock_release+0x970/0x970 [ 241.401018] ? arch_local_save_flags+0x40/0x40 [ 241.405638] ? usercopy_warn+0x110/0x110 [ 241.409737] ? __fget+0x4aa/0x740 [ 241.413233] ? lock_downgrade+0x900/0x900 [ 241.417411] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 241.423234] ? smk_access+0x53b/0x700 [ 241.427243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.432807] ? smack_log+0x423/0x590 [ 241.436551] ? smk_access_entry+0x310/0x310 [ 241.440896] ? __fget+0x4d1/0x740 [ 241.444471] ? smk_tskacc+0x3dd/0x520 [ 241.448303] usbdev_ioctl+0x25/0x30 [ 241.452088] ? usbdev_compat_ioctl+0x30/0x30 [ 241.456523] do_vfs_ioctl+0x1de/0x1720 [ 241.460439] ? fsnotify_first_mark+0x350/0x350 [ 241.465044] ? __fsnotify_parent+0xcc/0x420 [ 241.469394] ? ioctl_preallocate+0x300/0x300 [ 241.473825] ? smk_curacc+0x7f/0xa0 [ 241.475365] block nbd3: Attempted send on invalid socket [ 241.477476] ? smack_file_ioctl+0x210/0x3c0 [ 241.477491] ? fget_raw+0x20/0x20 [ 241.477507] ? smack_file_lock+0x2e0/0x2e0 [ 241.477525] ? fput+0x130/0x1a0 [ 241.483153] print_req_error: I/O error, dev nbd3, sector 2 [ 241.487459] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.491190] hfsplus: unable to find HFS+ superblock [ 241.495160] ? security_file_ioctl+0x94/0xc0 [ 241.495203] ksys_ioctl+0xa9/0xd0 [ 241.495220] __x64_sys_ioctl+0x73/0xb0 [ 241.495240] do_syscall_64+0x1b9/0x820 [ 241.523632] block nbd3: Attempted send on invalid socket [ 241.527157] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 241.527202] ? syscall_return_slowpath+0x5e0/0x5e0 [ 241.527216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.527236] ? trace_hardirqs_on_caller+0x310/0x310 [ 241.531152] print_req_error: I/O error, dev nbd3, sector 2 [ 241.536580] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 241.536602] ? prepare_exit_to_usermode+0x291/0x3b0 [ 241.542324] hfsplus: unable to find HFS+ superblock [ 241.547012] ? trace_hardirqs_off_thunk+0x1a/0x1c 04:37:58 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x200000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:59 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x2000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000004000000600", 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x17}, @in=@broadcast, 0x4e21, 0x0, 0x4e24, 0x8, 0xa, 0xa0, 0x80, 0x33, 0x0, r3}, {0x7fff, 0x5, 0x10000, 0x4, 0xfffffffffffffffe, 0x1, 0x52, 0x2}, {0x7f, 0x6, 0x9, 0x3}, 0x0, 0x6e6bc0, 0x0, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d6, 0x3c}, 0xa, @in=@local, 0x3501, 0x1, 0x3, 0x4, 0x1ff, 0x6, 0x4}}, 0xe8) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000040)={0x8, 0x7, 0xffffffffffffffff, 0x5, 0xfffffffffffffff7}) close(r0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) 04:37:59 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x1, 0x0, 0x7}, 0x7}}, 0x18) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x8000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000005c0)={r1}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000002940)={0x7fff}, &(0x7f0000002900)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000100)=0x9c) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e27, 0x2, 'fo\x00', 0x0, 0x8000000000006, 0xfffffffffffffffc}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r2, 0x1000, &(0x7f0000000300)="a3c59093244aca1ddcfe65de41c072fe711f982c0f8d87a7f9fe3de53ba84483f459a2f6ad8e289f2f578d624e936ae9dd189d2b539fef2b15980b4bb8a90f775ced7c61dbef17fb0904d908742a2294cad2d874ababb5ddc5fe18691dbd0f3f6db50235a42d1dae40f03089566d5fc24489e7d1fb5ec8e36858562ec812e882921df35a588f432061bc8fa77fb82dc3fb7b7b3d41568af305436ad9571ba1366f27bf5361305da3ff5a7a1f52c2565e1bcf86204723f5b99280227d98a0fe") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) write$binfmt_aout(r3, &(0x7f00000003c0)={{0xcc, 0x1, 0x8000, 0x33c, 0x59, 0x4, 0x121, 0xff}, "285c10f55843887ab1989907d3698066ad24d9241ecc72835b64a7cab782a0e705b308ff57388f2e9bf71ba29a43b7ffad2d6c4d9e45eab28214a1c065a4b914d9f1e8cf9f9218a969d2cb699c767e43043a795030068a634f5b9aff5c0eec026d51ea220f23a93622ee91691aac5bd453552a1ad9a009fc6763", [[]]}, 0x19a) write$cgroup_type(r4, &(0x7f00000000c0)='threaded\x00', 0xff4c) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000000001, 0x4011, r3, 0x80000000000002d) ioctl$VT_DISALLOCATE(r3, 0x5608) 04:37:59 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x300}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 241.547033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.547044] RIP: 0033:0x457519 [ 241.547065] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.592940] block nbd3: Attempted send on invalid socket [ 241.610221] RSP: 002b:00007f611816fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.610235] RAX: ffffffffffffffda RBX: 00007f611816fc90 RCX: 0000000000457519 [ 241.610242] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 241.610249] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 241.610257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61181706d4 [ 241.610265] R13: 00000000004bf65f R14: 00000000004cf538 R15: 0000000000000005 [ 241.633515] print_req_error: I/O error, dev nbd3, sector 2 [ 241.667399] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 241.669404] hfsplus: unable to find HFS+ superblock [ 241.676750] EXT4-fs (sda1): re-mounted. Opts: dax 04:37:59 executing program 2 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:37:59 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 241.726500] block nbd3: Attempted send on invalid socket [ 241.732209] print_req_error: I/O error, dev nbd3, sector 2 [ 241.732706] hfsplus: unable to find HFS+ superblock [ 241.766475] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk 04:37:59 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x9}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 241.980344] vhci_hcd: invalid port number 0 04:37:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='%xt2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:37:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:37:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={[], 0x21}, 'veth1_to_team\x00'}}, 0x1e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x10, &(0x7f00000004c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 04:37:59 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x3}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:37:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 04:38:00 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xffffff7f00000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:00 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa655845000030000000000000907886ddffffffffffff2100907800000000450000000000000000000000ac14c8bbe0000001f86aa77873cb42dc27742f00000000e0e97f50cc0aa653b007f79a7981c417935bc6cf000000000e36fb0e4d96316af12c4c7bee9fb7a6fc13aa1edfec838ad2c6368b170f"], &(0x7f0000ea3000)={0x0, 0x0, [0xfffffffffffffffd, 0x0, 0x811]}) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x101000) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) 04:38:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='fxt2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 242.375606] block nbd3: Attempted send on invalid socket [ 242.382118] print_req_error: I/O error, dev nbd3, sector 2 [ 242.391525] hfsplus: unable to find HFS+ superblock 04:38:00 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x4000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 242.419969] block nbd3: Attempted send on invalid socket [ 242.425508] print_req_error: I/O error, dev nbd3, sector 2 [ 242.431992] hfsplus: unable to find HFS+ superblock [ 242.452418] vhci_hcd: invalid port number 0 04:38:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185507, &(0x7f0000000000)={0xa3}) 04:38:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:00 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x84000) fcntl$getown(r0, 0x9) socketpair(0x400000000000026, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r1, 0xfff, 0x7) 04:38:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='e%t2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 242.548982] block nbd3: Attempted send on invalid socket [ 242.555683] print_req_error: I/O error, dev nbd3, sector 2 [ 242.569000] hfsplus: unable to find HFS+ superblock [ 242.625818] block nbd3: Attempted send on invalid socket [ 242.631394] print_req_error: I/O error, dev nbd3, sector 2 [ 242.638314] hfsplus: unable to find HFS+ superblock 04:38:00 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x0, 'fo\x00', 0x23}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x44) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="960f3491e589cde5a7003dc36d"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0xbb, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xfc, 0x0, 0x700, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe304}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x17542f00}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x620dc45ab8ea74b6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd5681e9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x29}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000001}, 0x804) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:38:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f0000000000)={0xa3}) 04:38:00 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xaae6ffff}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:00 executing program 5: socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:00 executing program 1: getegid() r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r0, 0x80000) accept4$nfc_llcp(r2, 0x0, &(0x7f0000000040), 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x84}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) r3 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000001640), &(0x7f0000001680)=0x4) 04:38:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='e,t2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:00 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x23000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0189436, &(0x7f0000000000)={0xa3}) 04:38:00 executing program 5: socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 242.954524] block nbd3: Attempted send on invalid socket [ 242.960098] print_req_error: I/O error, dev nbd3, sector 2 [ 242.965832] hfsplus: unable to find HFS+ superblock [ 242.992832] block nbd3: Attempted send on invalid socket [ 242.998373] print_req_error: I/O error, dev nbd3, sector 2 04:38:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018556c, &(0x7f0000000000)={0xa3}) 04:38:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='e|t2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 243.005484] hfsplus: unable to find HFS+ superblock 04:38:00 executing program 5: socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x1}) dup2(r1, r2) 04:38:00 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x2300}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:00 executing program 1: r0 = socket$packet(0x11, 0x10000000003, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x30) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140), 0x10) r1 = socket$inet(0x2, 0x800, 0x7) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x100000001, 0x4) 04:38:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x551f, &(0x7f0000000000)={0xa3}) 04:38:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x0, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 243.241840] block nbd3: Attempted send on invalid socket [ 243.247582] print_req_error: I/O error, dev nbd3, sector 2 [ 243.253724] hfsplus: unable to find HFS+ superblock [ 243.276674] block nbd3: Attempted send on invalid socket [ 243.282335] print_req_error: I/O error, dev nbd3, sector 2 04:38:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='e\nt2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0xa3}) 04:38:01 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xfffffff6}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 243.289262] hfsplus: unable to find HFS+ superblock 04:38:01 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xebffffff00000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='e|t2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105512, &(0x7f0000000000)={0xa3}) 04:38:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f00000000c0)="5710fef010b168867dac07196fe13a4a62d19856ad842b581bde0740dece0afe0aeb7a02694809f42bbe75c4f63a06d3acd963676c2209ecf430e7bcd1edd1358ca48d8fdb8443dc339849bbf7773f1f7645bd8126ecd3fcbe7761a43312299a6f080499458b56b305b65256752311701e745546b69a9c", 0x77) bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000080), 0x1f) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 04:38:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ex\n2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 243.514394] block nbd3: Attempted send on invalid socket [ 243.522821] hfsplus: unable to find HFS+ superblock 04:38:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x2, &(0x7f0000000000)={0xa3}) [ 243.558115] hfsplus: unable to find HFS+ superblock 04:38:02 executing program 1: socket$xdp(0x2c, 0x3, 0x0) 04:38:02 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xffffffff00000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:02 executing program 0: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xebffffff00000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045510, &(0x7f0000000000)={0xa3}) 04:38:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ex%2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x0, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 244.667212] hfsplus: unable to find HFS+ superblock [ 244.675633] hfsplus: unable to find HFS+ superblock [ 244.691012] EXT4-fs: 47 callbacks suppressed [ 244.691023] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 244.695505] hfsplus: unable to find HFS+ superblock 04:38:02 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xedc000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1b, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd}, 0x14) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x4) 04:38:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f00)=@broute={'broute\x00', 0x20, 0x3, 0xe38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0xe9e) syz_mount_image$gfs2(&(0x7f0000001040)='gfs2\x00', &(0x7f0000001080)='./file0\x00', 0xed9, 0x2, &(0x7f00000012c0)=[{&(0x7f00000010c0)="a49559d9f1afb84b1b900c0d70aa096627f3f57e6824d42a85c30a087f71668938a75271b01ee0e5b02ba0ceb37031b1bddca00332039ea9078f052431e562525e1d417f146957d88bb2bb206ab7acb421e544c8d5720101ee62d15163e311e557676601e02eecb56d084779805461157c9816fea4a0fb79efd3763df2b02f7e692b8c5c22c50271c14e1a8c20772eaedcbdc3af9a45d825ddcaff8261aa1d0c03641b2c404b04cee8a48a9bed786f4d303258a1768b3bfe418064aa6618bbbb486761f0f4c8f611c8909cf17985df55c6", 0xd1, 0x8001}, {&(0x7f00000011c0)="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", 0xfc, 0xfffffffffffffff9}], 0x101000, &(0x7f0000001300)={[{@norgrplvb='norgrplvb'}, {@ignore_local_fs='ignore_local_fs'}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_type={'obj_type', 0x3d, '/dev/dsp#\x00'}}, {@dont_hash='dont_hash'}]}) r1 = syz_open_dev$dspn(&(0x7f0000001380)='/dev/dsp#\x00', 0x800000000000003, 0x10000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000fc0)={{0xa, 0x4e22, 0x2, @empty, 0x2}, {0xa, 0x4e20, 0x6, @loopback, 0x1f}, 0xfff, [0x465, 0x1, 0x37, 0x3, 0x4597, 0xffffffffffffffff, 0x3, 0x9]}, 0x5c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000), 0x4) 04:38:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045503, &(0x7f0000000000)={0xa3}) [ 244.695688] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 244.730025] EXT4-fs (sda1): re-mounted. Opts: dax [ 244.788516] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 244.803227] hfsplus: unable to find HFS+ superblock [ 244.827017] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting 04:38:02 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x8000400141042, 0x0) mmap$xdp(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x10000003, 0x6111, 0xffffffffffffffff, 0x41001) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f7, &(0x7f0000000040)={'bcsf0\x00', @ifru_map={0x7f, 0x2, 0x2, 0x0, 0x0, 0x6}}) 04:38:02 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x20000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 244.833546] hfsplus: unable to find HFS+ superblock [ 244.844397] EXT4-fs (sda1): re-mounted. Opts: dax 04:38:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185574, &(0x7f0000000000)={0xa3}) 04:38:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741600", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 244.895601] hfsplus: unable to find HFS+ superblock 04:38:02 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x3000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:02 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x3}}}}}, &(0x7f0000000040)) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xfffffffffffffff9, 0x2100) sendmsg$unix(r1, &(0x7f0000002600)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000140)="eb016d0a3a3f95d862aaafaac5f8be9a8f3d2b5e069ff19a009eb1beea0ce9c4b01d257e04669d0313609abde1eaec0dbca926115b74fe01d79f9e5f54ae1a5136", 0x41}, {&(0x7f00000012c0)="361076186fe1e79639009b747704852b1131a4cfd4f175adfe843e513053b02325eddac9d6dd572ce7c5135fad10d58154756b3257b05ccb0ad778f2220825e8b8ed7514c1740589144e2fb0ad06b223235a093644ad5ff021c3ac2be539f009bf82ef0a81073112be463140c5944598ba3d8d438b46b32beb43afac88df6976ee99c685c2a458affccf3b2eb936b21da4750f57f4a6e69864d589748065ed0d009db931e8f9b920a2fd46b846cbc61e36b9df3e533317ee260342f709358f3f435ac233b23dbfc6da8c01e59ac8095ed7f11e98d6a84f88940657aa7a818a37fa6740200c7dcd31994fbeb8a5", 0xed}, {&(0x7f00000001c0)="bc6f4e42a9332cc79fc09637b8f24d0ee400b4372636762f3aa45932d8dbcf8340303ef5e286e436b183af48ac92000d15f4ebce32cfb6cb0485b98e553ff0fbf92570b4acaa07fea68b9f0e69b34d2e3b9183f9a0767c11ed006bf2c57793ee84455fc94284cbcf8ce5b48c96e7dc6ed5d6a830942a9bce76ed59e1168dbf214e83b731a1878656ff18", 0x8a}, {&(0x7f00000013c0)="f6c6741c068df1e07c2c123373", 0xd}, {&(0x7f0000001400)="a96c65be18aac4247d3e48889450d1adca5f865380b45c7f8297b9aea0f6611082ab61446bddb98efe8b50c24c291525cd5321ede19632b9eae65b", 0x3b}, {&(0x7f0000001440)='h', 0x1}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="209af6a43040f09addbb473f9ef3bc1483965a5c150074199fa1f19332455c", 0x1f}, {&(0x7f00000024c0)="fc32328115b957281350ecff9eb103b647120753e0bd835cb2320cd10b1056044f73407481bd77a624fd545274e35bfe7c96bb38426d174817ae5e3f0ac738eff3b2ab3bff05c22911021c0d60a4b45a6741bb5eb023ae7d20d68686198c4dbcee5e22ea241a5ab474e0492a2cea79d7a9abfd8cbd9648e715", 0x79}], 0xa, 0x0, 0x0, 0x24000000}, 0x0) [ 244.924498] hfsplus: unable to find HFS+ superblock 04:38:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0045878, &(0x7f0000000000)={0xa3}) [ 244.995441] hfsplus: unable to find HFS+ superblock [ 245.029140] hfsplus: unable to find HFS+ superblock [ 245.063391] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 245.111344] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 245.141855] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 245.165353] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk 04:38:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x0, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:03 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x7000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008551d, &(0x7f0000000000)={0xa3}) 04:38:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x80000) r0 = socket$kcm(0x2, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8982, &(0x7f0000000000)={r0}) 04:38:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x82) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000200)={0xe, 0x3, 0x8bc2, 0x3, 0x46, "36b25c8312ba3d5725eed5d74ad1f7a65455dceb9b885b248f4d60c4f156019ea2a35d384ad28d00539bd0a106e9acafaefccd54eccfc82334db9895730db687fe2b13dbc72f"}, 0x52) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'rose0\x00'}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1}, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) close(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x28000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000005c0)={0xf004, 0x12000}) 04:38:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741400", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5450, &(0x7f0000000000)={0xa3}) [ 245.508856] hfsplus: unable to find HFS+ superblock [ 245.535628] hfsplus: unable to find HFS+ superblock 04:38:03 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xf000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x20000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={r3, 0x71}, 0x8) 04:38:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:03 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xfffffffffffff000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004550d, &(0x7f0000000000)={0xa3}) [ 245.661610] hfsplus: unable to find HFS+ superblock [ 245.671380] hfsplus: unable to find HFS+ superblock [ 245.752689] hfsplus: unable to find HFS+ superblock [ 245.764067] cgroup: fork rejected by pids controller in /syz3 04:38:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:04 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x3f00000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045515, &(0x7f0000000000)={0xa3}) 04:38:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)="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") fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x5, 0x4) 04:38:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x82) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000200)={0xe, 0x3, 0x8bc2, 0x3, 0x46, "36b25c8312ba3d5725eed5d74ad1f7a65455dceb9b885b248f4d60c4f156019ea2a35d384ad28d00539bd0a106e9acafaefccd54eccfc82334db9895730db687fe2b13dbc72f"}, 0x52) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'rose0\x00'}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1}, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) close(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x28000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000005c0)={0xf004, 0x12000}) [ 246.368789] hfsplus: unable to find HFS+ superblock 04:38:04 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xffffffffa001c002, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x48}}, 0x0) 04:38:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='extC\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185568, &(0x7f0000000000)={0xa3}) 04:38:04 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x500000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:04 executing program 1: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180), &(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) creat(&(0x7f0000000600)='./file1\x00', 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000000440)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)=ANY=[]) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000400), &(0x7f0000000b40)) write$P9_RFSYNC(r3, &(0x7f0000000380)={0x7}, 0x7) 04:38:04 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x40000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 246.560375] hfsplus: unable to find HFS+ superblock [ 246.688721] print_req_error: 18 callbacks suppressed [ 246.688731] print_req_error: I/O error, dev nbd3, sector 2 [ 246.703681] hfsplus: unable to find HFS+ superblock 04:38:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0045878, &(0x7f0000000000)={0xa3}) 04:38:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext+\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:04 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xfeffffff00000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:04 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='ppp0&selfem0\x00') gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 04:38:04 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x7fb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:38:05 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x600000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 247.240847] nbd_handle_cmd: 18 callbacks suppressed [ 247.240862] block nbd3: Attempted send on invalid socket [ 247.251507] print_req_error: I/O error, dev nbd3, sector 2 [ 247.257519] hfsplus: unable to find HFS+ superblock 04:38:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8004551a, &(0x7f0000000000)={0xa3}) 04:38:05 executing program 1: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)) 04:38:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext!\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5452, &(0x7f0000000000)={0xa3}) 04:38:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 247.628012] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 247.641116] EXT4-fs (loop1): group descriptors corrupted! 04:38:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008551c, &(0x7f0000000000)={0xa3}) 04:38:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) close(0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e22, 0xb78, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x3, 0x3, 0x0, 0x80000001, 0xd9c1, 0x24]}, 0x5c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x57, 0x0, 0x20, {0x3}, {}, @ramp={0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffffffffffff1bb}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0xff12}}, 0x0) 04:38:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:38:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext*\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:05 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x2}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext\n\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 248.218793] netlink: 59 bytes leftover after parsing attributes in process `syz-executor0'. [ 248.237909] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 248.256945] EXT4-fs (loop1): group descriptors corrupted! 04:38:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000000)={0xa3}) [ 248.272824] IPVS: ftp: loaded support on port[0] = 21 04:38:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000006a88b2a968752cfe00ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 04:38:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext"\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x81, 0x4, 0x0, 0x2, 0xf9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c00000000000000010000000100", 0x1e, 0x400}], 0x0, &(0x7f0000000040)) [ 248.452661] netlink: 59 bytes leftover after parsing attributes in process `syz-executor0'. 04:38:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185504, &(0x7f0000000000)={0xa3}) [ 248.562344] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 04:38:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578740300", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 248.611612] EXT4-fs (loop1): group descriptors corrupted! [ 248.664292] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:38:06 executing program 1: mmap(&(0x7f00006ea000/0x200000)=nil, 0x200000, 0x200000d, 0x8d471, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c3d023c126285718070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x8032, 0xffffffffffffffff, 0x0) 04:38:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185506, &(0x7f0000000000)={0xa3}) 04:38:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741800", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 249.422953] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 249.830051] device bridge_slave_1 left promiscuous mode [ 249.835581] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.880286] device bridge_slave_0 left promiscuous mode [ 249.885851] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.753997] team0 (unregistering): Port device team_slave_1 removed [ 250.762846] team0 (unregistering): Port device team_slave_0 removed [ 250.772272] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 250.842145] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 250.902916] bond0 (unregistering): Released all slaves [ 251.062409] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.069768] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.077077] device bridge_slave_0 entered promiscuous mode [ 251.112983] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.120022] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.127236] device bridge_slave_1 entered promiscuous mode [ 251.162885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.198158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 251.302496] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 251.340360] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 251.495215] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 251.502909] team0: Port device team_slave_0 added [ 251.528243] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 251.535715] team0: Port device team_slave_1 added [ 251.571253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.608417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.635856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.659111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.871509] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.877856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.884487] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.890841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.598843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.666408] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 252.733830] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 252.740149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.747001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.815165] 8021q: adding VLAN 0 to HW filter on device team0 04:38:11 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x300000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5460, &(0x7f0000000000)={0xa3}) 04:38:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext\t\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r1, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000180)=0x80) 04:38:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x81, 0x4, 0x0, 0x2, 0xf9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c00000000000000010000000100", 0x1e, 0x400}], 0x0, &(0x7f0000000040)) 04:38:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:11 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xf6ffffff}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 253.266642] block nbd3: Attempted send on invalid socket [ 253.272343] print_req_error: I/O error, dev nbd3, sector 2 [ 253.280547] EXT4-fs: 68 callbacks suppressed [ 253.280558] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 253.296770] hfsplus: unable to find HFS+ superblock 04:38:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x9}, 0x2) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000a010000000000000000000095001a0000000000"], &(0x7f00000011c0)='syzkaller\x00', 0x5c0, 0x1000, &(0x7f0000002800)=""/4096}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000440)=r2, 0x4) 04:38:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004550c, &(0x7f0000000000)={0xa3}) [ 253.318077] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 253.338760] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 253.371037] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 253.404571] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 253.430894] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 253.460273] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue 04:38:11 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x9000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='extF\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:11 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xfeffff}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 253.639438] block nbd3: Attempted send on invalid socket [ 253.645046] print_req_error: I/O error, dev nbd3, sector 2 [ 253.660158] hfsplus: unable to find HFS+ superblock [ 253.716483] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk 04:38:11 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xc0ed0000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:11 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x80) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x80) fallocate(r0, 0x0, 0x0, 0x8000011) fallocate(r0, 0x8, 0x0, 0x10000) [ 253.760104] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 253.781600] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 253.877391] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk 04:38:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext6\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:11 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) [ 253.941640] block nbd3: Attempted send on invalid socket [ 253.947166] print_req_error: I/O error, dev nbd3, sector 2 [ 253.953218] hfsplus: unable to find HFS+ superblock [ 253.959404] block nbd3: Attempted send on invalid socket [ 253.964955] print_req_error: I/O error, dev nbd3, sector 2 [ 253.976833] hfsplus: unable to find HFS+ superblock 04:38:11 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000050000000000000000000000000000000000000000"]) gettid() setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x0, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB="0096c25b059690ddd4000800"]) 04:38:11 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xfffffffe}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 04:38:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext9\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8108551b, &(0x7f0000000000)={0xa3}) 04:38:12 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xf5ffffff00000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 254.162856] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:38:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdd9, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 254.382237] block nbd3: Attempted send on invalid socket [ 254.387772] print_req_error: I/O error, dev nbd3, sector 2 [ 254.396324] hfsplus: unable to find HFS+ superblock 04:38:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4020940d, &(0x7f0000000000)={0xa3}) 04:38:12 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xa00}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x0, 0x4}, 'port0\x00', 0x0, 0x0, 0x5, 0x0, 0x9, 0x81, 0x4, 0x0, 0x2, 0xf9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001", 0x1d, 0x400}], 0x0, &(0x7f0000000040)) [ 254.423514] block nbd3: Attempted send on invalid socket [ 254.429050] print_req_error: I/O error, dev nbd3, sector 2 [ 254.445221] hfsplus: unable to find HFS+ superblock 04:38:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='extX\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 254.641080] block nbd3: Attempted send on invalid socket [ 254.646598] print_req_error: I/O error, dev nbd3, sector 2 [ 254.653309] hfsplus: unable to find HFS+ superblock [ 254.679224] block nbd3: Attempted send on invalid socket [ 254.684892] print_req_error: I/O error, dev nbd3, sector 2 [ 254.695398] hfsplus: unable to find HFS+ superblock 04:38:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d8dbe9eff2fa87d18350e151c9c7877fe4fbce3411b0ccb6fa0dccea166b3d855f730c6c7c901c15f51688dd0f77433294420315c994695a08087df8c15354"}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000002680)=ANY=[]}, 0x0) 04:38:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185505, &(0x7f0000000000)={0xa3}) 04:38:12 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xedc0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 254.797520] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 04:38:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:12 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x5000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x40085511, &(0x7f0000000000)={0xa3}) 04:38:12 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 04:38:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741100", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045519, &(0x7f0000000000)={0xa3}) 04:38:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 255.006093] block nbd3: Attempted send on invalid socket [ 255.011658] print_req_error: I/O error, dev nbd3, sector 2 [ 255.018758] hfsplus: unable to find HFS+ superblock [ 255.493366] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 04:38:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c) 04:38:13 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xffff1f0000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741200", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r2, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) munmap(&(0x7f000058e000/0x3000)=nil, 0x3000) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'nr0\x00'}) 04:38:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000000)={0xa3}) [ 255.587093] block nbd3: Attempted send on invalid socket [ 255.592663] print_req_error: I/O error, dev nbd3, sector 2 [ 255.598414] hfsplus: unable to find HFS+ superblock [ 255.614246] hfsplus: unable to find HFS+ superblock 04:38:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000140)=[{{}, 0x1, 0x0, 0x200000000000002}], 0x18) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}], 0x10000) 04:38:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4008550c, &(0x7f0000000000)={0xa3}) 04:38:13 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xa00000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext\f\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 255.849863] hfsplus: unable to find HFS+ superblock 04:38:13 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xffffff8c}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 255.875246] hfsplus: unable to find HFS+ superblock 04:38:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741b00", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:13 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xfffffff5}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:13 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x100000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100", 0xf, 0x400}], 0x0, &(0x7f0000000040)) [ 256.049433] hfsplus: unable to find HFS+ superblock [ 256.080676] hfsplus: unable to find HFS+ superblock [ 256.136070] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 04:38:14 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x100000001, 0x1000}, {0x0, 0x0, 0x1800}], 0x2, &(0x7f0000000240)) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:38:14 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x4000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='extA\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004551e, &(0x7f0000000000)={0xa3}) 04:38:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018550a, &(0x7f0000000000)={0xa3}) [ 256.924886] hfsplus: unable to find HFS+ superblock 04:38:14 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x1fffff}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 256.970128] hfsplus: unable to find HFS+ superblock 04:38:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext5\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5514, &(0x7f0000000000)={0xa3}) 04:38:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="800000000002000019000000e60100", 0xf, 0x400}], 0x0, &(0x7f0000000040)) 04:38:14 executing program 0: 04:38:14 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xe00}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045505, &(0x7f0000000000)={0xa3}) 04:38:15 executing program 0: [ 257.214785] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor2' sets config #163 [ 257.224905] hfsplus: unable to find HFS+ superblock [ 257.251659] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 04:38:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x550b, &(0x7f0000000000)={0xa3}) 04:38:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741000", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 257.275829] hfsplus: unable to find HFS+ superblock 04:38:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x0) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:15 executing program 0: 04:38:15 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x1000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5421, &(0x7f0000000000)={0xa3}) 04:38:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext=\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 257.728287] hfsplus: unable to find HFS+ superblock [ 257.748490] hfsplus: unable to find HFS+ superblock 04:38:15 executing program 1: 04:38:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008550e, &(0x7f0000000000)={0xa3}) 04:38:15 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x2000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:15 executing program 0: 04:38:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741700", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x0) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:15 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xa000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:15 executing program 0: [ 257.983121] hfsplus: unable to find HFS+ superblock 04:38:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x40049409, &(0x7f0000000000)={0xa3}) 04:38:15 executing program 0: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/120) 04:38:15 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000003c0)={0x1, 0x0, [{0x0, 0x2}]}) [ 258.069302] hfsplus: unable to find HFS+ superblock 04:38:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x0) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578741900", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 258.125375] hfsplus: unable to find HFS+ superblock 04:38:15 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xe0000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105502, &(0x7f0000000000)={0xa3}) 04:38:16 executing program 0: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180), &(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000000440)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)=ANY=[]) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000400), &(0x7f0000000b40)) write$P9_RFSYNC(r3, &(0x7f0000000380)={0x7}, 0x7) 04:38:16 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xffffe6aa}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 258.230518] hfsplus: unable to find HFS+ superblock 04:38:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept(r0, 0x0, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x4) sendmmsg(r1, &(0x7f0000005840)=[{{&(0x7f0000002740)=@l2, 0x80, &(0x7f0000003900), 0x0, &(0x7f0000003940)}}], 0x1, 0x10) [ 258.301209] EXT4-fs: 74 callbacks suppressed [ 258.301220] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk 04:38:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185560, &(0x7f0000000000)={0xa3}) 04:38:16 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000880)={0x41, 0x3, 0x0, {0x0, 0x20, 0x0, ',securityppp1eth0-nodevGPLuser*%'}}, 0x41) 04:38:16 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x2000000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 258.368617] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting 04:38:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185502, &(0x7f0000000000)={0xa3}) [ 258.413863] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue 04:38:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext7\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:16 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000880)={0x41, 0x3, 0x0, {0x0, 0x20, 0x0, ',securityppp1eth0-nodevGPLuser*%'}}, 0x41) [ 258.468436] nbd_handle_cmd: 15 callbacks suppressed [ 258.468462] block nbd3: Attempted send on invalid socket [ 258.473569] print_req_error: 15 callbacks suppressed [ 258.473577] print_req_error: I/O error, dev nbd3, sector 2 [ 258.489685] hfsplus: unable to find HFS+ superblock 04:38:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc020660b, &(0x7f0000000000)={0xa3}) [ 258.518252] block nbd3: Attempted send on invalid socket [ 258.523882] print_req_error: I/O error, dev nbd3, sector 2 [ 258.529912] hfsplus: unable to find HFS+ superblock 04:38:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x40000000, @local}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4004) write$P9_RLERROR(r1, &(0x7f0000000200)={0x17, 0x7, 0x1, {0xe, 'eth1Neth1ppp0-'}}, 0x17) r2 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200000}]}, 0x1c}}, 0x8800) write(r2, &(0x7f0000000080)="a8", 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000003c0)) ftruncate(r2, 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) 04:38:16 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x4000000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rt_sigreturn() ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000380)={0xfffffffffffffff7}) 04:38:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5451, &(0x7f0000000000)={0xa3}) 04:38:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 258.611471] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 258.629877] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting [ 258.655114] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue 04:38:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000000)={0xa3}) 04:38:16 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x700000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001ac0)={"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"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setattr(r3, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2, 0x800, 0x4, 0x100, 0x7}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffffff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, [], 0x5}, {0x0, 0x9, 0x0, [], 0x1}]}}) [ 258.706200] block nbd3: Attempted send on invalid socket [ 258.711765] print_req_error: I/O error, dev nbd3, sector 2 [ 258.718008] hfsplus: unable to find HFS+ superblock [ 258.726677] block nbd3: Attempted send on invalid socket [ 258.732284] print_req_error: I/O error, dev nbd3, sector 2 [ 258.739199] hfsplus: unable to find HFS+ superblock [ 258.811307] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 258.814452] block nbd3: Attempted send on invalid socket [ 258.824847] print_req_error: I/O error, dev nbd3, sector 2 [ 258.832833] hfsplus: unable to find HFS+ superblock [ 258.852583] EXT4-fs (sda1): warning: refusing change of dax flag with busy inodes while remounting 04:38:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1068) read$FUSE(r0, &(0x7f0000001000), 0x1000) set_tid_address(&(0x7f0000000180)) write$FUSE_INTERRUPT(r0, &(0x7f00000002c0)={0x10, 0x0, 0x1}, 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) write$FUSE_ATTR(r0, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) 04:38:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8004550f, &(0x7f0000000000)={0xa3}) 04:38:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:16 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xffff1f00}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) r2 = getpgrp(0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x3d9a, @local, 0x6cffef7e}, @in6={0xa, 0x4e24, 0x100000001, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1f, @empty, 0x4}, @in6={0xa, 0x4e21, 0x6052, @dev={0xfe, 0x80, [], 0x14}, 0x81}, @in={0x2, 0x4e24}], 0x90) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioprio_get$pid(0x1, r2) [ 258.856300] block nbd3: Attempted send on invalid socket [ 258.867259] print_req_error: I/O error, dev nbd3, sector 2 [ 258.869656] EXT4-fs (sda1): re-mounted. Opts: dax,errors=continue [ 258.874301] hfsplus: unable to find HFS+ superblock [ 258.882528] Disabled LAPIC found during irq injection 04:38:16 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x40000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 258.943900] block nbd3: Attempted send on invalid socket [ 258.949395] print_req_error: I/O error, dev nbd3, sector 2 [ 258.957042] hfsplus: unable to find HFS+ superblock 04:38:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185503, &(0x7f0000000000)={0xa3}) 04:38:16 executing program 1: r0 = socket(0xa, 0x2, 0x1) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, {0x3ff, 0x7, 0xe9c4, 0x4, 0x502, 0x7ff}}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup3(r0, r0, 0x80000) write$P9_RLOCK(r3, &(0x7f00000001c0)={0x8, 0x35, 0x2, 0x2}, 0x8) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000200)=0x4) r4 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) getgroups(0x2, &(0x7f0000000580)=[0x0, 0xffffffffffffffff]) r7 = gettid() lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000800)=0xe8) getresgid(&(0x7f0000000840)=0x0, &(0x7f0000000880), &(0x7f00000008c0)) r13 = getpgid(0x0) r14 = getuid() fstat(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000000a80)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="27e3cca83bde9bd8ce4d06adf7f38d3d5b030f5d432641eef3e70d", 0x1b}], 0x2, &(0x7f0000000980)=[@rights={0x20, 0x1, 0x1, [r3, r3, r2]}, @rights={0x20, 0x1, 0x1, [r0, r3, r2]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0xf0, 0x10}, 0x8000) mount$bpf(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='bpf\x00', 0x2200080, &(0x7f0000000b40)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x7fffffff}}], [{@uid_eq={'uid', 0x3d, r5}}]}) ioctl$TIOCSTI(r3, 0x5412, 0x1) sched_getaffinity(r13, 0x8, &(0x7f0000000bc0)) write$cgroup_int(r3, &(0x7f0000000c00)=0x9, 0x12) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000c40)={0x1, 0x0, 0x2080, {0xd000, 0xf000, 0x2}, [], "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", "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"}) recvfrom$llc(r0, &(0x7f0000002cc0)=""/240, 0xf0, 0x40, &(0x7f0000002dc0)={0x1a, 0x0, 0x1ff, 0x8, 0xa7, 0x8000, @random="7ab5a4586711"}, 0x10) msgget$private(0x0, 0x40) 04:38:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 259.066068] EXT4-fs (sda1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk 04:38:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4008550d, &(0x7f0000000000)={0xa3}) 04:38:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 04:38:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='extD\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) [ 259.154257] block nbd3: Attempted send on invalid socket [ 259.159834] print_req_error: I/O error, dev nbd3, sector 2 [ 259.167601] hfsplus: unable to find HFS+ superblock 04:38:17 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xfeffffff}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/20, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000b40), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) [ 259.201158] block nbd3: Attempted send on invalid socket [ 259.206688] print_req_error: I/O error, dev nbd3, sector 2 [ 259.212550] hfsplus: unable to find HFS+ superblock 04:38:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80085504, &(0x7f0000000000)={0xa3}) 04:38:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) [ 259.301740] IPVS: length: 20 != 8 04:38:17 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x4000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578740200", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:17 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0x8000000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 259.415764] block nbd3: Attempted send on invalid socket [ 259.421650] print_req_error: I/O error, dev nbd3, sector 2 [ 259.437169] hfsplus: unable to find HFS+ superblock [ 259.445728] hfsplus: unable to find HFS+ superblock 04:38:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105500, &(0x7f0000000000)={0xa3}) 04:38:17 executing program 0: r0 = fanotify_init(0x48, 0x1400) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x0, 0x0, 0xffff, 0x12, 0x1000000000000, 0x0, 0x0, 0x2}}, 0x20) [ 259.497435] netlink: 'syz-executor1': attribute type 5 has an invalid length. [ 259.514305] IPVS: length: 20 != 8 [ 259.514483] netlink: 'syz-executor1': attribute type 5 has an invalid length. 04:38:17 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x400000000000) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, &(0x7f0000001040)="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") syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0xa0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESDEC]) setxattr$security_evm(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='security.evm\x00', &(0x7f0000000780)=@ng={0x4, 0x10, "3a44748a99e19d0f"}, 0xa, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x1f, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="f6b493c0857625c59e0dfedfcc20f3f9154d3edc637f", 0x16, 0x8000}, {&(0x7f0000000280)="6f4a308d8c3b0b7781a6ac59d387433bcade79a1d3f97ffeb9bf540f68474eb169699d2f5bdb42c1d79e601642f8cdd60cc48093e0f2cd3c9fee319fb42f1389463a17bb8cac2d11373bcfe7583e745d3f7bb2139151cc500ea2a19f42c84f44bc387a38f5e6584f84eea8c757b16021fecf09db3a4f5deb77968113c479bc1a1e68", 0x82, 0x8000}, {&(0x7f0000000340)="ba68c40193afb246ea03286ee0857fd58203cd56f105b53be45960c4dc9e2209402d435958be44d5323ed8afe260fa68773758f25f9225f4f8bc115520f8d103f40ab3d2799b681d77b200ffbb36802053a3a16d6441c7359e326d1e592ecae5439e5e7ed7b622f1b8e5123166129a50a1d3a4e282d2818a07459a3414c251f8d8b6c912666d6b1233ff2deddd991296c2bf79f0fea07d1460b536164a7d50052a2c0b139a7f9a75b75a3fd2979c9db05cc76e47e51423361ba0b7dbf253e4d21d780a712e2c5bfad45feef7fef7663fb0ff70bd0c327250009e8c52e27232", 0xdf, 0xf800000000000000}], 0x8, &(0x7f00000004c0)={[{@prjjquota={'prjjquota', 0x3d, 'ntfs\x00'}}, {@heap='heap'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@whint_mode_off='whint_mode=off'}, {@noflush_merge='noflush_merge'}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@subj_type={'subj_type', 0x3d, '}!vboxnet0selinux\\\'-%^)-'}}, {@euid_gt={'euid>', r0}}, {@hash='hash'}, {@fsname={'fsname', 0x3d, '{'}}, {@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, 'devtmpfs\x00'}}, {@measure='measure'}, {@seclabel='seclabel'}]}) 04:38:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext;\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:17 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x83}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x105000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x3, 0x0, "568bac44f291e33f478e8295ea4d46fa81f81610890bf0ad04e6391672dba8bb4ff501ec0c2a8833ac59717b96ffde88d53f45f77cd636a27d08038c5d99b6cef9fa4b2c235bd885bb321e03b297e6ba"}, 0xd8) connect$inet6(r1, &(0x7f0000000080), 0x1c) 04:38:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018554c, &(0x7f0000000000)={0xa3}) [ 259.639358] tmpfs: Bad mount option “Q•/Ù‹«ös­º”rjµV¦ [˜”aD [ 259.700943] tmpfs: Bad mount option ”¨²÷‡vQ˜H~Ö¼ì~|×^¡)à-V‰ñ¥—;ƒ 04:38:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185548, &(0x7f0000000000)={0xa3}) [ 259.797630] f2fs_msg: 6 callbacks suppressed [ 259.797661] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 259.815257] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 04:38:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000000)={0xa3}) [ 259.855990] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 259.883542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 04:38:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018557a, &(0x7f0000000000)={0xa3}) [ 259.907812] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 259.919397] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 259.959614] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 259.971615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 260.015356] tmpfs: Bad mount option “Q•/Ù‹«ös­º”rjµV¦ [˜”aD [ 260.030625] tmpfs: Bad mount option ”¨²÷‡vQ˜H~Ö¼ì~|×^¡)à-V‰ñ¥—;ƒ 04:38:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x88) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xfffffffffffffdff, 0x0, 0x0, 0xffffffffffffff88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 04:38:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578740400", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185508, &(0x7f0000000000)={0xa3}) 04:38:18 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0, 0xffff000000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x0, &(0x7f0000000240)) 04:38:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x3, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0x8d, "7f1f18044ddeae1032e73839e3faf2636c80da5948d1f29668f0bd1355a3af75bb1aab8cb7a4f9bf98ec9936c98875953f6ab897e1383e02c9b862e64797f3556d3ede4f3cfe48fc85140f0ecfdfdb899c9b5d7d0d756a7c685b27c229dbf43d52c07c355c4d980735c2413b16c50a5bb8681c2b21e2af9f508ad22937f38291467393f0f73d7e721091f42918"}, &(0x7f0000000280)=0x95) fstat(r0, &(0x7f0000000000)) getegid() getgroups(0x6, &(0x7f00000000c0)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0x0]) sendto(r2, &(0x7f00000002c0)="0b191e2697b10878fc7b10b5478c9e02f09d6e82f0d10074d7cfafe49d0dddcfbe1fe4b4eac6a580b132c31df3", 0x2d, 0x804, &(0x7f0000000300)=@in={0x2, 0x4e24, @rand_addr=0x80000000}, 0x80) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r6, r4, r5) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@broute={"62726f75746500000000000600", 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x7, &(0x7f0000000080), &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000009aa0765aa3b0b99d02c17426aa0fe584000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e2a30456b886bc2165b41fe0500000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000000000000000000b0000000600100009001000071756f3cf52b14f674610000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e61740000000000000000000000000000000000000000000000000000000010000000000000000180c20000000000ffffffff000000006e666c6f67000000000000000000000000000000050000000000000000000000500000000000000000000000000000000000000017d122d4e27ebdf3b9dc569e338e2c551c2fc4a195000000001c3275eb584d928b1f16fb7809c40aee86d9a0ef7981f4af1506f4fe16383d2afb577ed2bb6dd99f02000000415544495400000000c451000000000000000000000000000000000000000000080000000000000000000000000000000000000000fe0cc95a1169085ca6f16e82234d7be2fdab67d34bc349c7dc57f2f807d6913455729d08db7ab52127047654eef29be360a5b3e05e12db6cfffb56137f185b9e60ec860def5d5b7fc5e135903753695b61a8d988e43dcddbcba58df1f981a0bf6f"]}, 0x314) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000440)=0x2) 04:38:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1}) [ 260.312683] kernel msg: ebtables bug: please report to author: Wrong len argument [ 260.344916] kernel msg: ebtables bug: please report to author: Wrong len argument 04:38:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x80}) timer_settime(0x0, 0x10000001, &(0x7f0000000080)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) [ 260.384535] usb usb9: usbfs: process 10530 (syz-executor2) did not claim interface 0 before use [ 260.440100] device bridge_slave_1 left promiscuous mode [ 260.445958] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.461794] IPVS: ftp: loaded support on port[0] = 21 [ 260.480175] device bridge_slave_0 left promiscuous mode [ 260.485701] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.555935] team0 (unregistering): Port device team_slave_1 removed [ 260.564794] team0 (unregistering): Port device team_slave_0 removed [ 260.574093] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 260.612523] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 260.681102] bond0 (unregistering): Released all slaves 04:38:18 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x58000) ioctl$TCFLSH(r0, 0x540b, 0x400) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000003, 0x20400000087) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x10000248, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000000000)=0x108) 04:38:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext1\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB='dax']) 04:38:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa}) [ 260.827811] vhci_hcd: invalid port number 10 04:38:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c}) 04:38:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f436f3902e360f01d1baf80c66b8bc5b6e8966efbafc0c66edf2df5bdbbaf80c66b80491988766efbafc0c66b80058000066ef0f22d066b9800000c00f326635000800000f30baf80c66b8100b728266efbafc0cb86394ef660f70de05", 0x5d}], 0x1, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000000180)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x3}) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x50) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000280)={0x1000, 0x4, 0xfffffffffffffff7, "5c3dd0dbd079bcede202478b0e3f2b60e7afd7a8841cf4bee9f23dd265eed53ca19f2ae6a4be0f696fd0022a582e812bb1bbc437dcca31c8b1369c4fa9054cb846793056c76ab9b97ef50b1ae7099e60a7529d6946c1a8283cf97e85c376a25de55044ca999ed7a2e21ecf9f4e62cd9b2e65c84464aae92614735953f7b268bbdeb6ac976386739a905f94ce75c3343a67b207ff3a79045e258596792fa1b1c29c55b260721f22844c7113c369c2ff477bf44209ac264b0f4ab89c4029cf723a90abdc67750c329b12527229c50cf571802b7e29c6cfebebacd699aed85e80066d7c3b46a96df5d9b1d915d5b86bd86044bba2eb4bb8ff07154ce31e0572856d2fc0db3d030cd5ed7994942956eb278761a11631862aeacdc3b748173f9ee8477e0c305ef7a759c4fe8bdd8f939cbe2722e1a09d065cbb053410f0356e489af79b9d73fa92e12d1e3b64ca4109468f5cfb5ce453ac2090d91adeff4108caab6631896481ab2af7f4ce2e68882734f46df6cf101bafd44a28074a7f5b01941b81e2ac579c4ca21f093dc8c47a7cafa50c37a23010262a611448c7889f178012e8edc08c9a9e3ce9cb70d241c131bda2164e1b4877eaca7b81a3f61b9fa5acd786f5e498211538753d48bb2f0e60ebfc69bff06c750f38b0391c3d113c8539b6584106f4d5c7d8390b580c1add5847c6b68244ea9adab115a60d42aebf1aa769f78c651155deb7054ee7bcb2b2ad966a9dd3e902d8602e049b30fc3f55334763c078fa4550d31fbfed093009064c12d02ee6dd0cc355a2f0d9a6554d8a06629fd6bbe94041b499025ae612ba61daf3f67d5cd85600c95afd7d3241abe80b4642ec99cc38b5cd690d72dc616a0d80332a93160832e99d9fe8e1e70b01ce76fd70950c20b6b4d9bf3ebaf90975d78983bfcc3da7e334667d6bd03fd9186e80c867ec8668f9f87bdfe4e00953e26fa8b6e1b93a8a2ad35b476426c5ef570537d31a886792e5e216c26d5da072956a01734706ecbd29fccbfe5e89b0a20f27c1c9a7db1f6c87d0fb82d34098b00c8600ba741e0b49052f4fcb375f91ef864a7e0a0a620c34a55dbafd366118200518821aefe4ecce6ebe7c2ac74f0784fddc811fd1fb49af5077e492c916eda226056228b9e4ebf6240b1fbe0a6bc4a3dee164cd193eaa2123b5304b7ca1b2bb2a05f5dec2e3925dd48bf9b4a017a7ca31bfd45f61253d3816590c9e477611c76a02d332cda38eb0fdbfdfb737d02a2479aaac697aa99f47672a90f764e76dc59b956a34249376adbdbc1195c473caea3fe41f247a5b6ab0a17515939ca6340a1b21b4102563486abca5180bb9febf0994ea39541d12439f0cd6fd533b33552e777f3a2b41115877ae95b760ea74a81fce97fe1df52ab24359759fea089c52751d8cd666d5de7d4f7daefa5c961b082150230713a261de97e4a36b3997a731d3b0b7072020597e55ac9028357fd95734c0abc55aa0e4c984ef84f6f167100b37925ec77e8991ecb6245fb094cce654fedfab3e1881faeadfccebe459ca6378df8036292b849b8295bcfe6646f18ae3617b44ad5fd64e49a3b3b243fe0287d45a7cde563ffd340e4011768711397873511c9e4936f2469ed400d0de9fa54101332ac6bc7d976186ac0bbdcd80d00a3cba4fa1f70a0bdf7cb6ee725513f0aa86844c19d816a1d733c1b16bcf1311cfe7e0f22667f6fdbf2f8120890f267e95602917151e64e7331b7688a976e635233f56fcee7cabc14e320e2c8854f51be47e1df6581bbee932d19578c0f30abb48756ae39d553e525b477648f88ddf3ca06fea90f8d9e9cddcec096a40ebd05f5d9689d9e78b22a987eb6337c25295921f4ced9ec11f0d618da2f281bb83557b18b21a5e53276f5aa8fd748620e183d564976085e066b2378c44f00f1cb61bb85b53fe29ff40338e90d027f276fc9ca70aabe97afe5f9c44c21cb8612fdc0a4e0a0cd136fdfe273a46e45fb7f5085128271b99567ec7021add3dc2df1f8fe90b69e5df158f94d5bb4182aa613c084a2282c666c04480b9ee9d3d5042e826f52a9774b7442079393bdf10491bbd091789229652e2c558359a8b6f2c41004147f7a9bad9d3c37e990d877b82a119a0dacda2e8daeb6723a13e37fbf0cb3d1d1868e5cebd02167c951954e2730b8d548fb1f052918c98ad7aa19bc6031c610447ddfca904d5ca4cf6fb107cf8df68932704b58b0e081313cd3401fe9af8ef233d0a3a3e1a849dde143714d1fc6721a68bf1cd8dcfa635bafd4dd8f87a22807c789fde85e7848df30813162328947b554ec3e92e03b63120618c0ce57cb71aab7b76fe3e6b953f58ff800d470c3c5821441a59419e2ffe7c87b926fc09be678ad4377c26fa45949748fd05bd09adc4785a4d844866153ebb18713ed63ea9c882fad406e442ab6da457073741f10385e6297dfff2f0969b60766e4a1f21bfa2cf438ffd73b2f02cfc4b7c385f6ffd20a0e788f8dde5a0904015fa943387406e9970e50a5d377ce2712f81bbeeea6220500dc2ee6a1bd7da2c1e6d4d1593dfdba0655e99d045b7f48eaa39d01ce78d2c8782dd3d25c11af32e342a168704a2554ec94a430b87fd85bfd41b66102a224de43e21885835729f5bc84709aa49bc5b2c61d36738716dfb730c59954f4172b060b9180ec916e05e76c1e5ff1f8d687f4bb5ab597207eb4253c9e8786f1d3f09b03d9bc3ecdc2db44cba8d2200c9c7bfad9d5ccd73a0f2576dd730b69b8229a0ea6039cfddabdbab46ced441f5cc2564df30b5a0837265567149a94166c9b4a565290580ef5e400a09e81a24efa320e090353389d029ee94c39abd52a9d716c8f4f76baa97ca30b72e1728b9fa3f8f8d0aab506dd7f2743466fc577c3f95c349b9bcf3ab711d7cfd9c5fccbe0b30d288167ba537a5af3c501367fd7d963051e8f22a88f4ebb30b102a2936a8fd5ee7ce737f2c9716f985988c3cbba699281e42301c6c321df7ee2026fe0c1656db683f654d24f0465a4bef35751d2a7db5d610eadd5126f8c50a1a7515a71f986ca276f73db5c2139fe02d5471d261f7fef5fca6506a36687b1bff0f88cbe712680c6346bb78dade717a0cc984ce5e1e68ea6e4b9f6aea9d1ad5ac54bbaf2830bd03a619893fbfb66138cfb459e5f76a89477bb2a21ae4a43aa386b7fe558ebe1de46021dc2843ec849e990a8af661312cfb4224ab8f742800276b1c7cc1ba5c683ea19d2c7391a5dc5ec8ff2b1ce6c3a80308e7573099d4ed302f4dd73a2ebbe85e46438ec2d8ee1c8b2054a4970eaf0fb6b8b1947a98273c4a9cc781b21d9e56d3202c8227fba7dcdf075ba6619518fa7e88b5fc77097cb789c5ae87d0ef2dd997b7b31526c96a9ada5f4fa8b9fa00b8fcb84d283b8e0b1d34770da2c232be5c9077764976226bb0b999c5afe5c40725982af9d57adb842d920e617f885966995444c5f09376bd6501dbd32aeedb1235b5f1a26843d00f5111d6d5118e78a7dbc316cf1e06a35c0a1549b9ad50ff6aa26d6360319808d597bfae909a590485d20993305dfc8dec907cf74f9f76c5acfe27959dbc9f15201939eb5397acf62af9eca9df817802141b5795424d325c3c86092802d7fb513d8188a597d46d12b2e90ce3389df8b30c3943a278f619a0f8708dc470480eb2372e2794096fc887b1d0ef47eee41e4bc116d00d3784d45bf4b41ec818972dbfc6d8940e1e845f5bd5a7878833066a4ffbf1ebf0c106041084f0225074a7c197e7e69776bf1c66c52bd2411234f360e13d476e48df0a1f59630f4583a1fe3e62d576c1e3c2fb57e222eff40ca9256c91d509c51f4b1d25228284dc84603223b16dab8628dadf4144b77a751b3ec6588a2b5a40464bf23b0b2e7eebaef32044ff6866258b5e61cde96b0c1965a116f4aba7b5c4142062fb50037bcfafe39a946509088f8c7f1b87892eb9616e5016977e869a26036f22f5cb5e156737484a6b161deac8ac51f276621a402d22b24196b2b375503dff7ccbd89bfa64be8553819cedb0bffaa0ce85d8beddd0afa0988cfa36d5c8321effd0fab3ad1313f27d59474ce981ed8af83e31c43256bcf48c28d29b24a0933a3b6a2304d9af6fe064a03e3c2c2139c7fc34bff8e33666de3680afb47207ec1a562a16d4e18bf2a7af8b871d88e335ca9128bdaf36307205c9fae53eb57e1d8a23916fdda177a908202ee9485ecf74a61b0c52fc193c909987fb8d4b480bd5d093da42fdb333c2447a5464a760d24de90e25f968bef561f76a43b0af22ffea3a4425d40f0336123a1bf279d83ac42594a9bc62ea57bf95a0761151ca0ae363b76ef799bee4aa03d794e7a6cf9770fb14fe9a9da6212b37554eeec72032338259a2f1e00587a48d544a496b497324e0d7588051aba48d941c82e06e2c6aa70f9a169332d6e6726e6c40adac1470c11ccacbf5fbf39f56f2946b806d63a47ec33abc557bb7cd5b5893f0dd655424c93768a74d1d0c10bce80cd817ac787fce9a2fe19c2d2f86a7a6afece8b7dddc07105be3dddce6c4297ad7c6fa4c9dee961bba9eed1c72ceff49093388c0bdd2c39ca1ea7f6617652aabb0726f2ada344f917aaa2c91431f6ab0385a1ee374e3becbf2375905153ec667b6a45b92ac16a9b15808688809ae42976035cc18267005c1e6922748c3030fdf38a7adc7829e5a0f42bacb3ee7c7dc20c7c3287ffd5133bd42f9b3ae1433ffe8ca2f1e120110ddbced4f0ac81b92cf1f579a4d562e45be92e3278b5cec1fed45a449f6f1210d884543d3a984cc7a54702fb0e7ea76bcf6272b229fc1eb3854c38403be34463a73313ec09753105bd69e3d00819d572b50d0b6b01f70bce4ef0e9929a290dba462c8b3337fe91770cf423b8e75045c387a6e68b5b95b0aff35473f3be71f8da60e260f2cdd9189f9d81bf7300d46351fdc2014f9cfb14fc98bf3d5320624e45e66fdd80c0d833fc6d40a0f50b1ac56fb6d178daf6a24747a8549e7b809d3567ccfd9211d4d2ee7a1316d16412c791b904c734281c618bf3a2048605a1b0bcea48e90e5770205ea3bad18006790f6265113012b4f0dc758235776a7c25173c7092703511d3bb06147f644621f94c573d35dc7cb1349728710f4c7899b4afd792d30f8d709fb9a602331276196c2cf2be6331ceeff3593dc8c0ff4e74002b2f55a1fae9522bb5ea5953c2b576baa8ecbb735872fd95d3d753c922ced2bc8a2d08baeaa72a79025f761724459e395ec040085392034852a8ea405ebc41cfca26f04471584fce790417d6ea288ede8fb904ec2d9f20527d130e0ec6c87779e70eab4e316dd6974877fab221ee3b2985a49ae95cea526291994fcafe1e226fd292c24959df82add9aab1b213536cf70e7af5e8d2abcfff933f2101b0933118dca67b1ab07122f9d39e6be83297be91ad8dd91412f7a64de196a14e65d8b70916a2a75e38eac57e050e6c2d490d0c6a6c65686d4193aab2250ef27aface9beb140dc1c85b6cf339b5220caa754fc56b4706e7fef168bff52bf9d70036ace0e5d446d85f676d6ba3e1d5ab8acd6b80fbfff03281762a748d1cf91a57e065b757eab9ea97323d739a278d0445beac63b82f6e88e1e91d1fd047d44e5a6168d4fd4b7fa8c46c80cc9b951a5e315349cac06735e662b733824bed3c89640f2a547212f35038001998958382d077f2a6d0915f59c3a8499c7fcda316b6fb9bc48864374feab774902250f418a633eea70582b5961a792fe53b285e79ae16360711deffe8dbe849c569a9183"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x5) [ 260.848871] vhci_hcd: invalid port number 10 [ 260.864954] kernel msg: ebtables bug: please report to author: Num_counters wrong [ 260.892217] vhci_hcd: invalid port number 76 [ 260.896703] ================================================================== [ 260.904097] BUG: KASAN: slab-out-of-bounds in vhci_hub_control+0x1b6d/0x1be0 [ 260.904111] Read of size 4 at addr ffff8801cd55c3bc by task syz-executor2/10564 [ 260.904116] [ 260.904134] CPU: 1 PID: 10564 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #55 [ 260.904144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.904148] Call Trace: [ 260.904172] dump_stack+0x1c4/0x2b4 [ 260.904207] ? dump_stack_print_info.cold.2+0x52/0x52 [ 260.904222] ? printk+0xa7/0xcf [ 260.904236] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 260.904262] print_address_description.cold.8+0x9/0x1ff [ 260.961844] kasan_report.cold.9+0x242/0x309 [ 260.966268] ? vhci_hub_control+0x1b6d/0x1be0 [ 260.970774] __asan_report_load4_noabort+0x14/0x20 [ 260.975710] vhci_hub_control+0x1b6d/0x1be0 [ 260.980049] ? vhci_hcd_probe+0x240/0x240 [ 260.984215] ? kasan_unpoison_shadow+0x35/0x50 [ 260.988805] ? kasan_kmalloc+0xc7/0xe0 [ 260.992703] ? __kmalloc+0x31c/0x760 [ 260.996429] ? kasan_check_write+0x14/0x20 [ 261.000675] ? do_raw_spin_lock+0xc1/0x200 [ 261.004913] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 261.009504] usb_hcd_submit_urb+0x17bb/0x20a0 [ 261.014007] ? vhci_hcd_probe+0x240/0x240 [ 261.018157] ? usb_create_hcd+0x40/0x40 [ 261.022142] ? do_syscall_64+0x1b9/0x820 [ 261.026212] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.031579] ? __x64_sys_ioctl+0x73/0xb0 [ 261.035638] ? do_syscall_64+0x1b9/0x820 [ 261.039700] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.045067] ? ___might_sleep+0x1ed/0x300 [ 261.049221] ? lock_release+0x970/0x970 [ 261.053203] ? arch_local_save_flags+0x40/0x40 [ 261.057787] ? __mutex_lock+0x85e/0x1700 [ 261.061844] ? plist_check_head+0xea/0x150 [ 261.066076] ? __lockdep_init_map+0x105/0x590 [ 261.070571] ? __lockdep_init_map+0x105/0x590 [ 261.075074] usb_submit_urb+0x893/0x14e0 [ 261.079143] usb_start_wait_urb+0x13d/0x370 [ 261.083464] ? sg_clean+0x240/0x240 [ 261.087101] usb_control_msg+0x332/0x4e0 [ 261.091175] ? usb_start_wait_urb+0x370/0x370 [ 261.095678] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 261.101269] proc_control+0x99b/0xef0 [ 261.105072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.110610] ? proc_bulk+0xa70/0xa70 [ 261.114331] usbdev_do_ioctl+0x1eb8/0x3b50 [ 261.118583] ? processcompl_compat+0x680/0x680 [ 261.123166] ? futex_wait+0x5ec/0xa50 [ 261.126985] ? mark_held_locks+0x130/0x130 [ 261.131218] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 261.136407] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 261.141510] ? futex_wake+0x304/0x760 [ 261.145322] ? lock_downgrade+0x900/0x900 [ 261.149466] ? mark_held_locks+0x130/0x130 [ 261.153702] ? do_futex+0x249/0x26d0 [ 261.157412] ? kasan_check_read+0x11/0x20 [ 261.161561] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 261.166837] ? rcu_bh_qs+0xc0/0xc0 [ 261.170375] ? unwind_dump+0x190/0x190 [ 261.174267] ? exit_robust_list+0x280/0x280 [ 261.178593] ? __fget+0x4aa/0x740 [ 261.182047] ? lock_downgrade+0x900/0x900 [ 261.186203] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 261.191998] ? smk_access+0x53b/0x700 [ 261.195801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.201333] ? smack_log+0x423/0x590 [ 261.205047] ? smk_access_entry+0x310/0x310 [ 261.209365] ? __fget+0x4d1/0x740 [ 261.212822] ? smk_tskacc+0x3dd/0x520 [ 261.216629] usbdev_ioctl+0x25/0x30 [ 261.220257] ? usbdev_compat_ioctl+0x30/0x30 [ 261.224667] do_vfs_ioctl+0x1de/0x1720 [ 261.228558] ? ioctl_preallocate+0x300/0x300 [ 261.232969] ? smk_curacc+0x7f/0xa0 [ 261.236596] ? smack_file_ioctl+0x210/0x3c0 [ 261.240913] ? fget_raw+0x20/0x20 [ 261.244367] ? smack_file_lock+0x2e0/0x2e0 [ 261.248610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.254147] ? security_file_ioctl+0x94/0xc0 [ 261.258558] ksys_ioctl+0xa9/0xd0 [ 261.262028] __x64_sys_ioctl+0x73/0xb0 [ 261.265949] do_syscall_64+0x1b9/0x820 [ 261.269834] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 261.275206] ? syscall_return_slowpath+0x5e0/0x5e0 [ 261.280152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.285001] ? trace_hardirqs_on_caller+0x310/0x310 [ 261.290016] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 261.295030] ? prepare_exit_to_usermode+0x291/0x3b0 [ 261.300047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.304894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.310078] RIP: 0033:0x457519 [ 261.313270] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 261.332168] RSP: 002b:00007f611816fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.339886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 261.347150] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 261.354418] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 261.361683] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61181706d4 [ 261.368952] R13: 00000000004bf65f R14: 00000000004cf538 R15: 00000000ffffffff [ 261.376223] [ 261.377846] Allocated by task 1: [ 261.381216] save_stack+0x43/0xd0 [ 261.384665] kasan_kmalloc+0xc7/0xe0 [ 261.388383] kmem_cache_alloc_trace+0x152/0x750 [ 261.394009] usb_set_configuration+0x10d2/0x19d0 [ 261.398761] generic_probe+0xb6/0x110 [ 261.402558] usb_probe_device+0xaf/0x110 [ 261.406613] really_probe+0x5be/0x850 [ 261.410411] driver_probe_device+0x108/0x210 [ 261.414818] __device_attach_driver+0x25a/0x2d0 [ 261.419500] bus_for_each_drv+0x16b/0x1f0 [ 261.423644] __device_attach+0x2a1/0x430 [ 261.427698] device_initial_probe+0x1a/0x20 [ 261.432013] bus_probe_device+0x1fb/0x2a0 [ 261.436158] device_add+0x93e/0x17b0 [ 261.439874] usb_new_device+0x9ec/0x1a40 [ 261.443930] usb_add_hcd+0xb1f/0x1910 [ 261.447733] vhci_hcd_probe+0xfb/0x240 [ 261.451617] platform_drv_probe+0x96/0x160 [ 261.455847] really_probe+0x5be/0x850 [ 261.459645] driver_probe_device+0x108/0x210 [ 261.464051] __device_attach_driver+0x25a/0x2d0 [ 261.468715] bus_for_each_drv+0x16b/0x1f0 [ 261.472861] __device_attach+0x2a1/0x430 [ 261.476917] device_initial_probe+0x1a/0x20 [ 261.481240] bus_probe_device+0x1fb/0x2a0 [ 261.485384] device_add+0x93e/0x17b0 [ 261.489092] platform_device_add+0x36e/0x6f0 [ 261.493496] vhci_hcd_init+0x386/0x4e0 [ 261.497378] do_one_initcall+0x145/0x957 [ 261.501441] kernel_init_freeable+0x4bb/0x5ae [ 261.505932] kernel_init+0x11/0x1b2 [ 261.510037] ret_from_fork+0x3a/0x50 [ 261.513740] [ 261.515363] Freed by task 0: [ 261.518365] (stack is not available) [ 261.522068] [ 261.523692] The buggy address belongs to the object at ffff8801cd55c440 [ 261.523692] which belongs to the cache kmalloc-2048 of size 2048 [ 261.536521] The buggy address is located 132 bytes to the left of [ 261.536521] 2048-byte region [ffff8801cd55c440, ffff8801cd55cc40) [ 261.548906] The buggy address belongs to the page: [ 261.553830] page:ffffea0007355700 count:1 mapcount:0 mapping:ffff8801da800c40 index:0x0 compound_mapcount: 0 [ 261.563797] flags: 0x2fffc0000008100(slab|head) [ 261.568483] raw: 02fffc0000008100 ffffea0007354088 ffffea0007355d08 ffff8801da800c40 [ 261.576366] raw: 0000000000000000 ffff8801cd55c440 0000000100000003 0000000000000000 [ 261.584236] page dumped because: kasan: bad access detected [ 261.589935] [ 261.591568] Memory state around the buggy address: [ 261.596489] ffff8801cd55c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 261.603847] ffff8801cd55c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 261.611208] >ffff8801cd55c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 261.619773] ^ [ 261.624960] ffff8801cd55c400: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 261.632317] ffff8801cd55c480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 261.639666] ================================================================== [ 261.647018] Kernel panic - not syncing: panic_on_warn set ... [ 261.647018] [ 261.654383] CPU: 1 PID: 10564 Comm: syz-executor2 Tainted: G B 4.19.0-rc7+ #55 [ 261.663557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.672905] Call Trace: [ 261.675498] dump_stack+0x1c4/0x2b4 [ 261.679126] ? dump_stack_print_info.cold.2+0x52/0x52 [ 261.684320] ? lock_downgrade+0x900/0x900 [ 261.688513] panic+0x238/0x4e7 [ 261.691704] ? add_taint.cold.5+0x16/0x16 [ 261.695856] ? print_shadow_for_address+0xb6/0x116 [ 261.700783] ? trace_hardirqs_off+0xaf/0x310 [ 261.705200] kasan_end_report+0x47/0x4f [ 261.709176] kasan_report.cold.9+0x76/0x309 [ 261.713507] ? vhci_hub_control+0x1b6d/0x1be0 [ 261.718004] __asan_report_load4_noabort+0x14/0x20 [ 261.722934] vhci_hub_control+0x1b6d/0x1be0 [ 261.727263] ? vhci_hcd_probe+0x240/0x240 [ 261.731410] ? kasan_unpoison_shadow+0x35/0x50 [ 261.735988] ? kasan_kmalloc+0xc7/0xe0 [ 261.739876] ? __kmalloc+0x31c/0x760 [ 261.743590] ? kasan_check_write+0x14/0x20 [ 261.747828] ? do_raw_spin_lock+0xc1/0x200 [ 261.752065] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 261.756647] usb_hcd_submit_urb+0x17bb/0x20a0 [ 261.761139] ? vhci_hcd_probe+0x240/0x240 [ 261.765293] ? usb_create_hcd+0x40/0x40 [ 261.769267] ? do_syscall_64+0x1b9/0x820 [ 261.773327] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.778690] ? __x64_sys_ioctl+0x73/0xb0 [ 261.782749] ? do_syscall_64+0x1b9/0x820 [ 261.786806] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.792172] ? ___might_sleep+0x1ed/0x300 [ 261.796324] ? lock_release+0x970/0x970 [ 261.800301] ? arch_local_save_flags+0x40/0x40 [ 261.804884] ? __mutex_lock+0x85e/0x1700 [ 261.808965] ? plist_check_head+0xea/0x150 [ 261.813209] ? __lockdep_init_map+0x105/0x590 [ 261.817702] ? __lockdep_init_map+0x105/0x590 [ 261.822211] usb_submit_urb+0x893/0x14e0 [ 261.826282] usb_start_wait_urb+0x13d/0x370 [ 261.830603] ? sg_clean+0x240/0x240 [ 261.834241] usb_control_msg+0x332/0x4e0 [ 261.838302] ? usb_start_wait_urb+0x370/0x370 [ 261.842796] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 261.848340] proc_control+0x99b/0xef0 [ 261.852160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.857709] ? proc_bulk+0xa70/0xa70 [ 261.861431] usbdev_do_ioctl+0x1eb8/0x3b50 [ 261.865670] ? processcompl_compat+0x680/0x680 [ 261.870251] ? futex_wait+0x5ec/0xa50 [ 261.874059] ? mark_held_locks+0x130/0x130 [ 261.878293] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 261.883486] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 261.888586] ? futex_wake+0x304/0x760 [ 261.892399] ? lock_downgrade+0x900/0x900 [ 261.896548] ? mark_held_locks+0x130/0x130 [ 261.900783] ? do_futex+0x249/0x26d0 [ 261.904496] ? kasan_check_read+0x11/0x20 [ 261.908643] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 261.913918] ? rcu_bh_qs+0xc0/0xc0 [ 261.917462] ? unwind_dump+0x190/0x190 [ 261.921356] ? exit_robust_list+0x280/0x280 [ 261.925679] ? __fget+0x4aa/0x740 [ 261.929131] ? lock_downgrade+0x900/0x900 [ 261.933284] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 261.939083] ? smk_access+0x53b/0x700 [ 261.942884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.948417] ? smack_log+0x423/0x590 [ 261.952132] ? smk_access_entry+0x310/0x310 [ 261.956453] ? __fget+0x4d1/0x740 [ 261.959907] ? smk_tskacc+0x3dd/0x520 [ 261.963714] usbdev_ioctl+0x25/0x30 [ 261.967339] ? usbdev_compat_ioctl+0x30/0x30 [ 261.971747] do_vfs_ioctl+0x1de/0x1720 [ 261.975636] ? ioctl_preallocate+0x300/0x300 [ 261.980059] ? smk_curacc+0x7f/0xa0 [ 261.983687] ? smack_file_ioctl+0x210/0x3c0 [ 261.988002] ? fget_raw+0x20/0x20 [ 261.991454] ? smack_file_lock+0x2e0/0x2e0 [ 261.995697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.001233] ? security_file_ioctl+0x94/0xc0 [ 262.005641] ksys_ioctl+0xa9/0xd0 [ 262.009112] __x64_sys_ioctl+0x73/0xb0 [ 262.012999] do_syscall_64+0x1b9/0x820 [ 262.016885] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 262.022249] ? syscall_return_slowpath+0x5e0/0x5e0 [ 262.027201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.032046] ? trace_hardirqs_on_caller+0x310/0x310 [ 262.037062] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 262.042258] ? prepare_exit_to_usermode+0x291/0x3b0 [ 262.047275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.052121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.057305] RIP: 0033:0x457519 [ 262.060501] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.079398] RSP: 002b:00007f611816fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.089218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 262.096485] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 262.103751] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.111016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61181706d4 [ 262.118282] R13: 00000000004bf65f R14: 00000000004cf538 R15: 00000000ffffffff [ 262.126421] Kernel Offset: disabled [ 262.130066] Rebooting in 86400 seconds..